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REMARKS/ARGUMENTS 

In response to the Examiner's final Office Action of May 12, 2005 the Applicant 
submits the accompanying Amendments to the specification, drawings and claims and the 
below Remarks directed thereto. A marked-up version of the amended specification is 
submitted together with a substitute specification and substitute drawings. 

Li the present application, there are currently 1024 specification pages containing 
1023 description pages and 1 claim page for pending claims 1 and 3-6 and 331 drawing 
sheets containing Figs. 1-413. The Amendments substantially alter the number of 
specification and drawing sheets, as required by the Examiner, to include 66 specification 
pages containing 65 description pages and 1 claim page and 29 drawing sheets, as follows: 

In the Drawings: 

Figs. 14-66, 74-347, 355-388, 399-410 and 413 are deleted; 

Figs. 67-73, 348-354, 389-398, 411 and 412 are renumbered as new Figs. 14-39, 
respectively; and 

the remaining drawings sheets are renumbered as new drawings sheets 1-29. 

In the specification: 

the Field of Invention section is unchanged; 

the Backgroimd of Invention section is imchanged; 

the Summary of Invention section is xmchanged; 

the Brief Description of the Drawings section is amended to conform with the above- 
mentioned deletion of most of the current drawing Figures; and 

the Detailed Description of the Preferred and Other Embodiments section is 
substantially amended to delete description not pertaining to the present invention, to 
remove the current section numbering and cross-references to those numbered sections, and 
to reflect the renumbering of the amended drawing Figures. 

The Applicant submits that these amendments introduce no new matter. 

In the claims: 

independent claim 1 is amended to omit "range" fi:om the recitation "in the event that 
the temperature is below a predetermined temperature range"; 

dependent claim 3 is amended to be dependent from amended claim 1; and 
pending dependent claims 4-6 are unchanged. 

It is respectfiiUy submitted that the above amendments do not add new matter to the 
present application nor add any new issues to the prosecution of the present application. 

Specification Objections 

It is respectfully submitted that the above-described amendments to substantially 
alter the number of specification and drawing sheets provide the corrections required by the 
Examiner. 
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35 use 112, second paragraph Rejections 

It is respectfully submitted that the above-described amendment to the dependency of 
claim 3 to be from amended claim I addresses the Examiner's rejection to claim 3. 

35 use 102(b) Rejections 

It is respectfully submitted that the subject matter of amended independent claim 1, 
and claims 3-6 dependent therefrom, is not disclosed by either Kitano (USP 5,870,267) or 
Kawai et al. (USP 6,560,164), for at least the reasons discussed in the Applicant's response 
to the first Office Action and the following reasons. 

As discussed in the Applicant's response to the first Office Action, in the integrated 
circuit of the claimed invention under-temperature detection is performed and corrected so 
as to prevent security attacks. Independent claim 1 has been amended further to clarify that 
the output of the system clock is altered when a temperature below a predetermined 
temperature, not temperature range as currently recited. 

It is respectfully submitted that this further amendment to claim 1 specifically recites 
under-temperature detection and therefore distinguishes the present invention over Kitano 
and Kawai, because the amended recitation can not be reasonably broadly interpreted to 
cover an infinite temperature range as purported by the Examiner. 

It is respectfully submitted that all of the Examiner's objections and rejections have 
been traversed. Accordingly, it is submitted that the present application is in condition for 
allowance and reconsideration of the present application is respectfully requested. 

Very respectfully, 
Applicant: 




C/o: 



Silverbrook Research Pty Ltd 

393 Darling Street 

Bahnain NSW 2041, Australia 



Email: 



kia.silverbrook@silverbrookresearch.com 



Telephone: 



+612 9818 6633 



Facsimile: 



+61 2 9555 7762 



FIELD OF INVENTION 



The present invention relates to a mechanism for preventing or reducing the possibility of inducing 
thermal-based attacks on an integrated circuit with on-board clock generation circuitry and at least 
some form of security. 

The invention has primarily been developed for use in a printer that uses a plurality of security chips to 
ensure that modifications to operating parameters can only be modified in an authorized manner, and 
will be described with reference to this application. However, it will be appreciated that the invention 
can be applied to other fields in which analogous problems are &ced. 

BACKGROUND OF INVENTION 

Manufacturing a printhead that has relatively high resolution and print-speed raises a number of 
problems. 

Difficulties in manufacturing pagewidth printheads of any substantial size arise due to the relatively 
small dimensions of standard silicon wafers that are used in printhead (or printhead module) 
manufacture. For example, if it is desired to make an 8 inch wide pagewidth printhead, only one such 
printhead can be laid out on a standard 8-inch wafer, since such wafers are circular in plan. 
Manu&cturing a pagewidth printhead fi-om two or more smaller modules can reduce this limitation to 
some extent, but raises other problems related to providing a joint between adjacent printhead modules 
that is precise enough to avoid visible arti&cts (which would typically take the form of noticeable 
lines) when the printhead is used. The problem is exacerbated in relatively high-resolution 
applications because of the tight tolerances dictated by the small spacing between nozzles. 

The quality of a joint region between adjacent printhead modules relies on factors including a 
precision with which the abutting ends of each module can be manufactured, the accuracy with which 
they can be aligned when assembled into a single printhead, and other more practical factors such as 
management of ink channels behind the nozzles. It will be appreciated that the difficulties include 
relative vertical displacement of the printhead modules with respect to each other. 

Whilst some of these issues may be dealt with by carefiil design and manu&cture, the level of 
precision required renders it relatively expensive to manu&cture printheads within the required 
tolerances. It would be desirable to provide a solution to one or more of the problems associated with 
precision manufacture and assembly of multiple printhead modules to form a printhead, and especially 
a pagewidth printhead. 
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In some cases, it is desirable to produce a number of different printhead module types or lengths on a 
substrate to maximise usage of the substrate's surface area. However, different sizes and types of 
modules will have different numbers and layouts of print nozzles, potentially including different 
horizontal and vertical offsets. Where two or more modules are to be joined to form a single 
5 printhead, there is also the problem of dealing with different seam shapes between abutting ends of 

joined modules, which again may incorporate vertical or horizontal of&ets between the modules. 
Printhead controllers are usually dedicated application specific integrated circuits (ASICs) designed 
for specific use with a single type of printhead module, that is used by itself rather than with other 
modules. It would be desirable to provide a way in which different lengths and types of printhead 
1 0 modules could be accounted for using a single printer controller. 

Printer controllers face other difficulties when two or more printhead modules are involved, especially 
if it is desired to send dot data to each of the printheads direcdy (rather than via a single printhead 
connected to the controller). One concern is that data delivered to different length controllers at the 

1 5 same rate will cause the shorter of the modules to be ready for printing before any longer modules. 

Where there is httle difference involved, the issue may not be of importance, but for large length 
differences, the result is that the bandwidth of a shared memory fi-om which the dot data is supplied to 
the modules is effectively left idle once one of the modules is full and the remaining module or 
modules is still being filled. It would be desirable to provide a way of improving memory bandwidth 

20 usage in a system comprising a plurality of printhead modules of uneven length. 

In any printing system that includes multiple nozzles on a printhead or printhead module, there is the 
possibility of one or more of the nozzles filing in the field, or being inoperative due to manufacturing 
defect. Given the relatively large size of a typical printhead module, it would be desirable to provide 
25 some form of compensation for one or more " dead" nozzles. Where the printhead also outputs 

fixative on a per-nozzle basis, it is also desirable that the fixative is provided in such a way that dead 
nozzles are compensated for. 

A printer controller can take the form of an integrated circuit, comprising a processor and one or more 
30 peripheral hardware units for implementing specific data manipulation functions. A number of these 

units and the processor may need access to a common resource such as memory. One way of 
arbitrating between multiple access requests for a conmion resource is timeslot arbitration, in which 
access to the resource is guaranteed to a particular requestor during a predetermined timeslot. 

35 One difficulty with this arrangement lies in the fact that not all access requests make the same 

demands on the resource in terms of timing and latency. For example, a memory read requires that 
data be fetched from memory, which may take a number of cycles, whereas a memory write can 
commence inmiediately. Timeslot arbitration does not take into account these differences, which may 
result in accesses being performed in a less efficient manner than might otherwise be the case. It 

40 would be desirable to provide a timeslot arbitration scheme that improved this efficiency as compared 
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with prior art timeslot arbitration schemes. 



Also of concern when allocating resources in a timeslot arbitration scheme is the fact that the priority 
of an access request may not be the same for all units. For exan^le, it would be desirable to provide a 
5 timeslot arbitration scheme in which one requestor (typically the memory) is granted special priority 

such that its requests are dealt with earlier than would be the case in the absence of such priority. 

In systems that use a memory and cache, a cache miss (in which an attempt to load data or an 
instruction from a cache fails) results in a memory access followed by a cache update. It is often 

1 0 desirable when updating the cache in this way to update data other than that which was actually 

missed. A typical example would be a cache miss for a byte resulting in an entire word or line of the 
cache associated with that byte being updated. However, this can have the effect of tying up 
bandwidth between the memory (or a memory manager) and the processor where the bandwidth is 
such that several cycles are required to transfer the entire word or line to the cache. It would be 

1 5 desirable to provide a mechanism for updating a cache that improved cache update speed and/or 

eflBciency. 

Most integrated circuits an externally provided signal as (or to generate) a clock, often provided from a 
dedicated clock generation circuit. This is often due to the difficulties of providing an onboard clock 

20 that can operate at a speed that is predictable. Manufacturing tolerances of such on-board clock 

generation circuitry can result in clock rates that vary by a factor of two, and operating temperatures 
can increase this margin by an additional factor of two. In some cases, the particular rate at which the 
clock operates is not of particular concern. However, where the integrated circuit will be writing to an 
internal circuit that is sensitive to the time over which a signal is provided, it may be undesirable to 

25 have the signal be applied for too long or short a time. For exan^le, flash memory is sensitive to 

being written too for too long a period. It would be desirable to provide a mechanism for adjusting a 
rate of an on-chip system clock to take into account the impact of manufacturing variations on 
clockspeed. 

30 One form of attacking a secure chip is to induce (usually by increasing) a clock speed that takes the 

logic outside its rated operating frequency. One way of doing this is to reduce the temperature of the 
integrated circuit, which can cause the clock to race. Above a certain frequency, some logic will start 
malfunctioning. In some cases, the malfunction can be such that information on the chip that would 
otherwise be secure may become available to an external connection. It would be desirable to protect 

35 an integrated circuit from such attacks. 

In an integrated circuit comprising non-volatile memory, a power failure can result in unintentional 
behaviour. For example, if an address or data becomes unreliable due to falling voltage supplied to the 
circuit but there is still sufficient power to cause a write, incorrect data can be written. Even worse, 
40 the data (incorrect or not) could be written to the wrong memory. The problem is exacerbated with 
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multi-word writes. It would be desirable to provide a mechanism for reducing or preventing spurious 
writes when power to an integrated circuit is failing. 

In an integrated circuit, it is often desirable to reduce unauthorised access to the contents of memory. 
5 This is particularly the case where the memory includes a key or some other form of security 

information that allows the integrated circuit to commimicate with another entity (such as another 
integrated circuit, for example) in a secure manner. It would be particularly advantageous to prevent 
attacks involving direct probing of memory addresses by physically investigating the chip (as distinct 
from electronic or logical attacks via manipulation of signals and power supplied to the integrated 
1 0 circuit). 

It is also desirable to provide an environment where the manufacturer of the integrated circuit (or some 
other authorised entity) can verify or authorize code to be run on an integrated circuit. 

1 5 Another desideratum would be the ability of two or more entities, such as integrated circuits, to 

communicate with each other in a secure manner. It would also be desirable to provide a mechanism 
for secure commimication between a first entity and a second entity, where the two entities, whilst 
capable of some form of secure communication, are not able to establish such communication between 
themselves. 

20 

In a system that uses resources (such as a printer, which uses inks) it may be desirable to monitor and 
update a record related to resource usage. Authenticating ink quality can be a major issue, since the 
attributes of inks used by a given printhead can be quite specific. Use of incorrect ink can result in 
anything fix>m misfiring or poor performance to damage or destruction of the printhead. It would 
25 therefore be desirable to provide a system that enables authentication of the correct ink being used, as 

well as providing various support systems secure enabling refilling of ink cartridges. 

In a system that prevents unauthorized programs from being loaded onto or run on an integrated 
circuit, it can be laborious to allow developers of software to access the circuits during software 

30 development. Enabling access to integrated circuits of a particular type requires authenticating 

software with a relatively high-level key. Distributing the key for use by developers is inherently 
unsafe, since a single leak of the key outside the organization could endanger security of all chips that 
use a related key to authorize programs. Having a small number of people with high-security 
clearance available to authenticate programs for testing can be inconvenient, particularly in the case 

35 where frequent incremental changes in programs during development require testing. It would be 

desirable to provide a mechanism for allowing access to one or more integrated circuits without 
risking the security of other integrated circuits in a series of such integrated circuits. 

In symmetric key security, a message, denoted by M, is plaintext. The process of transforming M into 
40 ciphertext C, where the substance of M is hidden, is called encryption. The process of transforming C 
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back into M is called decryption. Referring to the encryption function as £, and the decryption 
function as D, we have the following identities: 

E[M\ = C 

D{C\ = M 

Therefore the following identity is true: 
D[E[MW = M 

A symmetric encryption algorithm is one where: 

• the encryption function E relies on key Ki, 

• the decryption function D relies on key K2, 

• K2 can be derived from Ki, and 

• Ki can be derived from K2. 

In most symmetric algorithms, K] equals K2. However, even if Ki does not equal K2, given that one 
key can be derived from the other, a single key K can suffice for the mathematical definition. Thus: 

D^[C] = M 

The security of these algorithms rests very much in the key K. Knowledge of K allows anyone to 
encrypt or decrypt. Consequently K must remain a secret for the duration of the value of M. For 
example, M may be a wartime message "My current position is grid position 123-456". Once the war 
is over the value of M is greatly reduced, and if K is made public, the knowledge of the combat unit's 
position may be of no relevance whatsoever. The security of the particular symmetric algorithm is a 
function of two things: the strength of the algorithm and the length of the key. 

An asymmetric encryption algorithm is one where: 

• the encryption function E relies on key Ki, 

• the decryption function D relies on key K2, 

• K2 cannot be derived from Ki in a reasonable amount of time, and 

• Ki cannot be derived from K2 in a reasonable amount of time. 

Thus: 

Efcdm = C 
D^2lC] = M 

These algorithms are also called public-key because one key Ki can be made public. Thus anyone can 
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encrypt a message (using Ki) but only the person with the corresponding decryption key (K2) can 

decrypt and thus read the message. 

In most cases, the following identity also holds: 

E^[M] = C 
5 D^,[C]-M 

This identity is very important because it implies that anyone with the public key Ki can see M and 
know that it came from the owner of K2. No-one else could have generated C because to do so would 
imply knowledge of K2. This gives rise to a different application, unrelated to encryption - digital 
1 0 signatures. 

A number of public key cryptographic algorithms exist. Most are impractical to implement, and many 
generate a very large C for a given M or require enormous keys. Still others, while secure, are far too 
slow to be practical for several years. Because of this, many public key systems are hybrid - a public 
1 5 key mechanism is used to transmit a symmetric session key, and then the session key is used for the 

actual messages. 

All of the algorithms have a problem in terms of key selection. A random number is simply not secure 
enough. The two large primes p and q must be chosen carefully - there are certain weak combinations 
20 that can be factored more easily (some of the weak keys can be tested for). But nonetheless, key 

selection is not a simple matter of randomly selecting 1 024 bits for example. Consequently the key 
selection process must also be secure. 

Symmetric and asymmetric schemes both suffer from a difficulty in allowing establishment of 
25 multiple relationships between one entity and a two or more others, without the need to provide 

multiple sets of keys. For example, if a main entity wants to establish secure communications with 
two or more additional entities, it will need to maintain a different key for each of the additional 
entities. For practical reasons, it is desirable to avoid generating and storing large nimibers of keys. 
To reduce key numbers, two or more of the entities may use the same key to communicate with the 
30 main entity. However, this means that the main entity cannot be sure which of the entities it is 

communicating with. Similarly, messages from the main entity to one of the entities can be decrypted 
by any of the other entities with the same key. It would be desirable if a mechanism could be provided 
to allow secure communication between a main entity and one or more other entities that overcomes at 
least some of the shortcomings of prior art. 



35 



In a system where a first entity is capable of secure communication of some form, it may be desirable 
to establish a relationship with another entity without providing the other entity with any information 
related the first entity's security features. Typically, the security features might include a key or a 
cryptographic frmction. It would be desirable to provide a mechanism for enabling secure 
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communications between a first and second entity when they do not share the requisite secret function, 
key or other relationship to enable them to establish trust 

A number of other aspects, features, preferences and embodiments are disclosed in the Detailed 
Description of the Preferred Embodiment below. 
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SUMMARY OF INVENTION 



In accordance with the invention, there is provided an integrated circuit including an on-board system 
clock, the integrated circuit including a clock filter configured to detennine a temperature of the 
integrated circuit and to alter an output of the system clock based on the temperature. 

Preferably, the clock filter is configured to alter the ou^ut of the system clock in the event the 
temperature is outside a predetermined temperature range. 

More preferably, altering the output includes preventing the clock signal fi'om reaching one or more 
logical circuits on the integrated circuit to which it would otherwise be applied. 

It is particularly preferred that the predetermined temperature range is selected such that a 
temperature-related speed of the system clock ou^ut that is not due to the clock filter is within a 
predetermined fi-equency range. It is desirable that the fi-equency range be within an operating 
fi*equency of some or all of the logic circuitry to which the system clock is supplied. 

In the preferred form of the invention, the clock filter is configvired to prevent the system clock from 
reaching some or all of the logic circuitry in the event the temperature falls below a predetermined 
level. This level is chosen to be high enough that race conditions, in which the clock speeds up to the 
point where logic circuitry behavior becomes unpredictable, are avoided. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Preferred and other embodiments of the invention will now be described, by way of example only, 
with reference to the accompanying drawings, in which: 
Figure 1 is an example of state machine notation 
5 Figure 2 shows document data flow in a printer 

Figure 3 is an example of a single printer controller (hereinafter "SoPEC") A4 simplex printer system 
Figure 4 is an example of a dual SoPEC A4 duplex printer system 
Figure 5 is an example of a dual SoPEC A3 simplex printer system 
Figure 6 is an example of a quad SoPEC A3 duplex printer system 
1 0 Figure 7 is an example of a SoPEC A4 simplex printing system with an extra SoPEC used as 
DRAM storage 

Figure 8 is an example of an A3 duplex printing system featuring four printing SoPECs 

Figure 9 shows pages containing different numbers of bands 

Figure 10 shows the contents of a page band 
1 5 Figure 1 1 illustrates a page data path from host to SoPEC 

Figure 12 shows a page structure 

Figure 13 shows a SoPEC system top level partition 

F i gur e 1 4 shows a SoPEC CPU memory map (not to sca le ) 

F i gure 15 i s a b l ock di a gram of CPU 
20 Figur e 16 shows CPU bus trans a ct i ons 

Figure 17 shows a stat e machin e for a CPU subsyst e m s l av e 

F i gur e 18 shows a SoPEC CPU memory map (not to sca le ) 

F i gur e 19 shows an e xt e rnal signal vi e w of a m e mory m a nag e m e nt un i t (h e r e inaft e r "MMU") sub - 
b l ock partit i on 

25 Figure 20 shows on i nt e rnal signal v ie w of an MMU sub - block part i tion 

Figur e 21 shows a DRAM wr i te buffer 

Figur e 22 shows DIU waveforms for mult i ple transact i ons 

F i gur e 23 shows a SoPEC LEON CPU coro 

Figure 24 ohowo a cach e data RAM wrapper 
30 F i gur e 25 shows a roa l t i mo d e bug un i t block diagram 

F i gur e 26 shows i nterrupt acknowledg e cycl e s for s i ngl e and p e nding int e rrupts 

F i gur e 27 shows an A3 dup le x system f e atur i ng four print i ng SoPECs w i th a s i ng l e SoPEC DRAM 

dovico 

F i gure 28 is an SCB b l ock d i agram 
35 F i gure 20 i s a logical view of the SCB of figure 28 

F i gur e 30 shows an I S I conf i gurat i on w i th four SoPEC d e v i c e s 

F i gur e 31 shows half duplex inter le av e d transm i ss i on from I SIMast e r to I SIS I av e 

Figure 32 shows IS I transactions 

Figure 33 shows an I S I long pack e t 
40 F i gure 3 4 shows an IS I p i ng packet 
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F i gur e 35 shows a short I Si pack e t 

Figur e 36 shows sucoossfu l transmiss i on of two l ong paokots with soquonco b i t toggling 

Figur e 37 shows s e quonoo b i t operation w i th orrorod l ong pookot 

F i gur e 38 shows s e quonco b i t operat i on w i th ACK e rror 
5 Figur e 39 shows an IS I sub - block part i tion 

F i gure 4 0 shows an I S I ser i a l Interface eng i n e functiona l block diagram 

F i gure 4 1 is an Si E e dge d e t e ction and data lO diagram 

F i gure 4 2 i s an S I E Rx/Tx stato maohino Tx cycle state diagram 

Figur e 4 3 shows an SIE Rx/Tx stat e machine Tx b i t stuff '0' cyc le stat e diagram 
10 Figure 44 shows an S I E Rx/Tx stato mach i ne Tx b i t stuff '1 ' cyc i o stato d i agram 

Figure 4 5 shows an S I E Rx/Tx stato mach i ne Rx cycle stato diagram 

Figur e 4 6 shows an S I E Tx funct i onal timing e xampl e 

F i gur e 4 7 shows an SIE Rx functiona l t i m i ng example 

Figur e 4 8 shows an S I E Rx/Tx F I FO block diagram 
15 F i gur e 4 9 shows S I E Rx/Tx F I FO contro l signal gat i ng 

Figur e 50 shows an SIE b i t stuffing stat e machino Tx cycl e stat e diagram 

F i gure 51 shows an SIE bit stripp i ng stat e machine Rx cycle stat e diagram 

Figur e 52 shows a CRC16 g e n e ration/ch e cking shift reg i ster 

Figur e 53 shows circular buff e r operat i on 
20 Figure 5 4 shows duty cycl e s ele ct 

Figur e 55 shows a GP I O part i tion 

F i gur e 56 shows a motor contro l RTL diagram 

F i gur e 57 I s an i nput d e glitch RTL diagram 

F i gur e 58 I s a frequency ana l yser RTL diagram 
25 F i gure 59 shows a brush l ess DC contro l l e r 

Figur e 60 shows a per i od m e asure un i t 

F i gur e 61 shows l ino synch generat i on logic 

Figure 62 shows an I CU partition 

Figure 63 is an i nterrupt clear stato d i agram 
30 Figur e 63A T i m e rs sub b l ock part i t i on d i agram 

F i gur e 6 4 is a watchdog timer RTL diagram 

Figur e 65 I s a g e n e r i c tim e r RTL diagram 

Figure 66 Is a schemat i c of a timing pulse genertor 

F i our e 67 Fiaure 14 is a Pulse generator RTL diagram 
35 Fioure 68 Fiaure 15 shows a SoPEC clock relationship 

F i our e 69 FiQure 16 shows a CPR block partition 

Figure 70 Flqure 1 7 shows reset deglitch logic 

F i gure 71 Figure 18 shows reset synchronizer logic 

Figur e 72 Fiqure 19 is a clock gate logic diagram 
40 Figure 73 Fiaure 20 shows a PLL and Clock divider logic 

PEA23US 10 



Figur e 7 4 shows a PLL contro l state mach i n e d i agram 

F i gur e 75 shows a LSS master syst e m - levo l i ntorfaco 

Figure 76 shows START and STOP cond i t i ons 

F i gur e 77 shows an LSS transfer of 2 data byt e s 
5 F i gur e 78 is an example of an LSS wr i te to a OA Ch i p 

F i gure 79 is an examp le of an LSS road from QA Chip 

F i gur e 80 shows an LSS block diagram 

Figure 81 shows an LSS mu l t i command transact i on 

Figure 82 shows start and stop g e n e ration baood on pr e v i ous bus state 
10 F i gur e 83 shows an LSS master stat e machine 

F i gure 8 4 shows LSS master t i m i ng 

F i gur e 85 shows a SoPEC system top l ev e l partit i on 

F i gur e 86 shows an e ad bus w i th 3 cyc l e random DRAM r e ad acc e ss e s 

F i gur e 87 shows i nter le av i ng of CPU and non CPU r e ad acc e ss e s 
15 Figur e 88 shows inter l eav i ng of read and writ e acc e ss e s with 3 cyc l e random DRAM accesses 

F i gure 80 shows intorloav i ng of write accesses w i th 3 cyc l e random DRAM acc e ss e s 

Figure 90 shows a road protocol for a SoPEC Unit molding a s i ngl e 256 bit access 

F i gur e 91 shows a r e ad protoco l for a SoPEC Un i t mak i ng a sing le 256 b i t access 

Figure 02 shows a wr i te protocol for a SoPEC Un i t making a s i ng l e 256 b i t access 
20 Figur e 93 shows a protocol for a posted, masked, 128 - bit wr i t e by th e CPU 

F i gur e 9 4 shows a write protoco l shown for CDU making four cont i guous 6 4 b i t accesses 

Figur e 95 shows times l ot based arbitration 

Figur e 96 shows timos l ot based arbitration w i th s e parat e point e rs 

Figure 07 shows a first example (a) of separate road and write arbitrat i on 
25 F i gur e 98 shows a s e cond e xamp le (b) of s e parat e r e ad and writ e arbitration 

F i gure 00 shows a th i rd examp l e (c) of separat e r e ad and writ e arb i trat i on 

Figur e 100 shows a D I U part i t i on 

Figur e 101 shows a DIU partit i on 

F i gure 102 shows mu l tip le x i ng and addr e ss trans l at i on log i c for two memory i nstances 
30 Figure 103 shows a tim i ng of dau_dcu_valid, dcu_dau_adv and dcu_dau_wadv 

F i gure 1 0 4 shows a DCU state machine 

F i gur e 105 shows random read timing 

F i gure 106 shews random wr i t e tim i ng 

F i gure 107 shows refresh t i m i ng 
35 Figure 108 shows pag e mod e writ e t i m i ng 

F i gure 100 shows tim i ng of non CPU D I U read acc e ss 

Figur e 110 shows t i ming of CPU D I U r e ad access 

Figure 1 1 1 shows a CPU D I U r e ad access 

F i gur e 112 shows tim i ng of CPU D I U write accoss 
40 F i gure 113 shows t i m i ng of a non CDU / non CPU DIU wr i te access 
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F i gur e 
F i gure 



10 Figur e 



Figur e 



15 Figur e 



Figure 
F i gur e 



Figur e 



F i gure 
20 F i gure 



Figur e 



Flgtife^ 



Figufe- 



Figur e 



1 4 shows tim i ng of CDU P I U wr i te acc e ss 

15 shows oommond mult i plexor sub b l ock partition 



16 shows command mu l t i p le xor t i ming at D I U r e qu e stors i nterface 

17 shows generation of ro_arbitrato and ro_arbitrato_wadv 



18 shows CPU Int e rfac e and arb i trat i on l og i c 

19 shows arbitrat i on timing 



20 shows setting RotationSync to e nable a now rotat i on. 



21 shows a tim e s l ot bas e d arb i trat i on 



22 shows a timoslot based arbitrat i on w i th separate po i nt e rs 

23 shows a CPU pr e access write leekahead po i nter 



2 4 shows arbitration hi e rarchy 

25 shows hierarchica l round robin pr i ority compar is on 



26 shows a read mu l tip l exor partit i on 



27 shows a r e ad command qu e u e ( 4 de e p buff e r) 

28 shows state mach i nes for shared read bus accesses 



20 shews a wr i t e multip le xor part i t i on 



30 shows a read multip l exer timing for back to back shared road bus transfer 

31 shows a wr i t e multip l exer partition 

32 shows a b l ock diagram of a PCU 

33 shows PCU accesses to PEP registers 

3 4 shows cemmand arbitration and execut i on 

35 shows DRAM command access state machin e 

36 shows an outl i n e of oontone data flow with r e sp e ct to CDU 



37 show s a DRAM storage arrang e ment for a single l i ne of JPEG 8x8 b l ocks i n 4 co l ors 

38 shows a r e ad contro l unit state mach i ne 



25 Fi§tif& 



Figur e 
Rgufe^ 



39 shews a m e mory arrang e m e nt of JPEG b l ocks 

4 0 shows a conten e data writ e stat e mach i ne 



F i gure 



F i gur e 
30 Figure 



41 shows lead i n and l ead out c li pping of contene data In mult i SePEC env i ronment 
A2 shows a block diagram of CFU 



Figure 



43 shows a DRAM storag e arrang e ment for a s i ng l e l i n e of JPEG blocks in 4 colors 

4 4 shows a block d i agram of co l or space converter 



Figure 



45 shows a convorter/ i nvertor 



Figure 



4 6 shows a h i gh l ev el block d i agram of LBD In context 



FifUfe^ 



47 shows a schematic outline of the LBD and the SFU 



35 FI§UF& 



F i gure 



4 8 shows a b l ock d i agram of l ossless bl le v el decoder 

49 shows a stream decoder b l ock d i agram 



Figur e 



50 shows a command contro lle r block diagram 

51 shows a state d i agram for cemmand contro l ler (CC) stat e mach i n e 



F i gure 
40 F i gur e 



52 shows a next edge un i t block d i agram 

53 shows a next edge unit buffer diagram 
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10 



Figure 



Figufe- 



Figur e 



F i gure 



Figur e 



g o n o ra 
Figure 



5 4 shows a n e xt e dge unit e dgo dotoct d i agram 

55 shows a stat e diagram for th e n e xt e dg e un i t stat e mach i n e 



56 shows a l i no fil l un i t block diagram 

57 shows a state diagram for the Lin e F i l l Un i t (LFU) stat e mach i ne 

58 shows a b i leve l DRAM buffer 



59 shows int e rfac e s b e tw e en LBD/SFU/HCU 

60 shows on SFU sub block partition 

61 shows an LBDProvL i noF i fo sub b l ock 



62 shows timing of s i gnals on the LBDPrevL i noF I FO interface to D I U and address 



0f 



63 shows tim i ng of s i gna l s on LBDPr e vL i n e F i FQ i nterface to DIU and addr e ss generator 

64 shows LBDNoxtLin e Fifo sub - b l ock 



Figufe 



65 shows t i ming of signals on LBDN e xtLin e FIFO int e rfac e to DIU and addr e ss g e nerator 



Fl§uf& 
15 Figufa 



66 shows LBDN e xtLin e FIFO D I U i nt e rfac e stat e diagram 

67 shows an LDB to SFU wr i t e i nt e rfac e 



Figufe 
Figure 



68 shows an LDB to SFU r e ad i nt e rface (w i th i n a line) 



F i gure 
Figur e 



69 shows an HCUReadLinoF i fo Sub block 

70 shows a D I U writ e Interfac e 



71 shows a D I U R e ad I nt e rface multiploxing by s e l e ct_hrfplf 



20 Figure 



F i gur e 



72 shows DIU road requ e st arb i tration logic 

73 shows addr e ss g e n e ration 



F i gur e 



Figure 



74 shows an X scal i ng contro l un i t 

75 Y shows a scal i ng contro l unit 



Fi§uf& 



76 shows an overv ie w of X and Y s ca li ng at HCU i nt e rface 



25 Fi§uf& 



77 shows a high l eve l block diagram of TE i n cont e xt 

78 shows a QR Code 



Figur e 



79 shows Netpag e tag structure 



Figur e 



80 shows a N e tpage tag with data rendered at 1600 dpi (magnifi e d v i ew) 



F i gure 
30 Figure 



81 shows on example of 2x2 dots for each b l ock of QR cod e 



Figure 



F i gure 



Figure 



82 shows p l ac e m e nt of tags for portrait & l andscape pr i nting 

83 shows agG o n o ra l r e pr e sentat i on of tag plac e m e nt 

8 4 shows compos i tion of SoPEC's tag format structur e 

85 shows a simple 3x3 tag structure 



35 Fl§uf& 



86 shows 3x3 tag redes i gned for 21 x 21 area (not simple rep li cation) 

87 shows a TE B l ock D i agram 



Figwe- 



88 shows a TE H ie rarchy 



F i gure 
F i gur e 



89 shows a b l ock diagram of PCU accesses 

90 shows a tag encoder top level FSM 

91 shows g ene rated control s i gnals 



40 Figure 



92 shows l ogic to combine dot information and encoded data 
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F i gure 193 shows g e neration of Lastdotintag/1 
F i gure 10^ shows gen e ration of Dot PoG i tion Val i d 
Figur e 195 shows gen e ration of wr i te enab l e to the TFU 
Figure 196 shows gonoration of Tag Dot Number 
5 Figur e 197 shows TD I Arch l teoture 

F i gure 198 shows data flow through tho TD I 

F i gure 199 shows raw tag data i nt e rface b l ock diagr a m 

F i gure 200 shows an RTD I State F l ow Diagram 

Figur e 201 shows a r e lat i onsh i p between TE_ondoftagdata, cdu_startofbandstoro and 
10 cdu_ e ndofbandstore 

Figur e 202 shows a TD i Stat e Flow Diagram 

Figur e 203 shows mopping of th e tag data to cod e words 0 7 

Figure 20 4 shows coding and mapp i ng of uncoded fixed tog data for (15,5) RS encoder 

Figure 205 shows mapp i ng of pr e ced e d f i x e d tag data 
15 F i gur e 206 shows coding and mapp i ng of variabl e tag data for (1 5,7) RS e ncod e r 

Figure 207 shows coding and mapp i ng of uncod e d f i x e d tag data for (15,7) RS e ncod e r 

Figur e 208 shows mapping of 2D decoded var i abl e tag data 

F i gure 209 shows a simp l e block d i agram for an m~^ R e ed Solomon encoder 

Figur e 210 shows an RS onoodor I /O diagram 
20 F i gur e 21 1 shows a (15,5) & (15,7) RS e ncod e r block d i agram 

F i gur e 212 shows a (15,5) RS e ncod e r t i m i ng diagram 

Figur e 213 shows a (15,7) RS e ncod e r t i m i ng d i agram 

F i gure 214 shows a circuit for mult i plying by alpha^ 

Figur e 21 5 shows adding two fi el d ele ments 
25 Figur e 216 shows an RS encod e r i mp le mentation 

F i gur e 21 7 shows an e ncoded tag data i nt e rfac e 

Figure 218 shows an e ncoded fixed tag data int e rfac e 

Figur e 219 shows an e ncoded voriobl o tag data i nt e rfac e 

.F i gur e 220 shows an e ncod e d variabl e tag data sub - buff e r 
30 Figure 221 shows a br e akdown of the tag format structur e 

Figure 222 shows a TFSI FSM stat e flow d i agram 

Figure 223 shows a TFS block diagram 

Figure 224 shows a tabl e A i nterfac e b l ock d i agram 

F i gur e 225 shows a table A addr e ss gen e rator 
35 Figur e 226 shows a tab l e C i nterface block d i agram 

F i gur e 227 shows a tab le B I nterfac e block d i agram 

F i gure 228 shows i nt e rfac e s between TE. TFU and HCU 

F i gure 229 shows a 16 byte F I FO i n TFU 

Figure 230 shows a high level b l ock diagram show i ng th e HCU and its ext e rna l int e rfac e s 
40 F i gure 231 shows a b l ock d i agram of tho HCU 
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Figur e 232 shows a b l ock diagram of tho contro l unit 

Figur e 233 showo a block d i agram of determ i n e advdot un i t 

F i gur e 23 4 shows a pag e structur e 

F i gure 235 shows a block diagram of a margin unit 
5 Figure 236 shows a block d i agram of a d i thor matrix tab le I nt e rfac e 

F i guro 237 shows an oxamp i o of reading li nos of d i ther matrix from DRAM 

Figur e 238 shows a state mach i n e to read dithor matrix tab le 

Figur e 239 shows a conton e dotg e n unit 

Figur e 2 4 0 shows a b l ock diagram of dot r e org unit 
10 F i gur e 2 4 1 shows an HCU to DNC int e rfac e (also used in DNC to DWU, LLU to PHI) 

Figur e 242 shows SFU to HCU i ntorfaco (a l l f ee d e rs to HCU) 

Figur e 243 shows roprosontative l ogic of the SFU to HCU intorfoco 

Figur e 2 44 shows a h i gh - l e v e l block d i agram of DNC 

Figur e 2 4 5 shows a dead nozz l e tablo format 
15 Figur e 2 4 6 shows sot of dots op e rated on for e rror diffus i on 

F i gur e 2A7 shows a b l ock diagram of DNC 

F i guro 218 shows a sub b l ock d i agram of ink replac e m e nt un i t 

Figur e 2 4 9 shows a doad nozz i o tablo stat e machin e 

F i gur e 250 shows l ogic for d e ad nozzio r e moval and i nk r e placement 
20 Figuro 251 shows a sub block diagram of orror diffusion un i t 

F i guro 252 shows a maximum l ength 32 bit LFSR used for random b i t g e nerat i on 

Figur e 253 shows a h i gh -le v el data f l ow diagram of DWU in context 

Figuro 254 shows a printhoad nozzio layout for 36 - nozzlo b i lithic pr i nth e ad 

Figur e 255 shows a pr i nth e ad nozzle l ayout for a 36 - nozzlo b i lith i c printh e ad 
25 Figur e 256 shows a dot li n e stor e log i cal roprosontation 

F i gur e 257 shows a conceptua l vi e w of pr i nth e ad row al i gnmont 

F i gur e 258 shows a conceptual v i ow of printhoad rows (as coon by tho LLU and PH I ) 

F i gur e 259 shows a comparison of 1 .5x v 2x buffer i ng 

F i gur e 260 shows an e v e n dot order in DRAM (Incr o aGlng sens e , 13320 dot wido l i n o ) 
30 F i gur e 261 shows an ovon dot ord e r i n DRAM (d e creasing sense, 13320 dot wido l in e ) 

Figur e 262 shows a dotlin e F I FO data structure i n DRAM 

F i guro 263 shows a DWU partit i on 

F i guro 264 shows a buffer address g e n e rator sub block 

F i gure 265 shows a D I U I ntorfaco sub block 
35 F i gure 266 shows an i nt e rfac e control l or stat e diagram 

F i gure 267 shows a high l eve l data flow diagram of LLU in context 

F i gur e 268 shows paper and printh e ad nozzles r el at i onship (examp le with D4-Djt-5) 

F i guro 269 shows pr i nthoad structure and dot gonorate order 

Figure 270 shows an ordor of dot data g e neration and transm i ssion 
40 F i guro 271 shows a conceptual v i ow of printhoad rows 
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Figure 272 ohowG a dotl i no FIFO data struoturo in DRAM (LLU opocifioat i on) 

Figure 273 showo an LLU part i t i on 
. F i gur e 274 s hows a dot g e n e rator RTL diagram 

Figure 275 shows a D I U i nt e rface 
5 F i gur e 276 shows an int e rfac e contro i ler stato diagram 

Figur e 277 shows high l ovo l data flow diagram of PH I in context 

Figure 278 shows powor on reset 

F i gur e 279 shows pr i nthead data rat e e qua li zation 

Figure 280 shows a printhoad structur e and dot gonorato ordor 
10 F i gure 281 shows an ord e r of dot data g e n e rat i on and transmiss i on 

Figure 282 shows an ord e r of dot data generation and transmission (singl e printhoad case) 

Figure 283 shows printh e ad I nt e rface t i ming param e t e rs 

Figure 284 shows printhead t i m i ng w i th marg i n i ng 

F i gure 285 shows a PHI block part i tion 
15 F i gure 286 shows a sync generator stato d i agram 

F i gur e 287 shows a l in e sync d e- gi i tch RTL d i agram 

Figure 288 shows a fire generator state d i agram 

Figur e 289 shows a PHI controller state mach i n e 

Figure 290 s hows a datapath unit part i t i on 
20 F i gur e 291 shows a dot ord e r control le r stat e diagram 

Figure 292 shows a data g e nerator stat e diagram 

Figur e 293 shows data s e r i aliz e r t i ming 

Figure 294 shows a data s e rial i z e r RTL Diagram 

F i gur e 295 shows printhoad types 0 to 7 
25 F i gure 296 shows an id e al join between two di li th i o printhead s e gments 

F i gur e 297 shows an example of a join between two bil l thic printhoad segments 

Figur e 298 shows printabl e vs non printabl e ar e a und e r n e w d e fin i tion 

( l ook i ng at co l ors as if 1 row only) 

Figur e 299 shows identificat i on of printhoad nozzles and shift reg i ster sequences for pr i nthoads i n 

30 arrang e ment 1 

Figure 300 shows domu l tip l oxing of data w i th i n th e pr i nthoads in arrangomont 1 

F i gure 301 shows doub le data rat e signa l ling for a typo 0 pr i nthead in arrangement 1 

F i gure 302 shows doub l e data rat e s i gna ll ing for a typ e 1 pr i nth e ad in arrang e m e nt 1 

F i gure 303 shows I dent i ficat i on of printh e ads nozz le s and shift - r e gist e r s e qu e nc e s for pr i nthoads I n 

35 arrangement 2 

Figure 30 4 shows demult i plex i ng of data w i thin the pr i ntheads in arrangement 2 
Figur e 305 shows double data rate signal li ng for a typo 0 printhead i n arrang e m e nt 2 
Figure 306 shows doub le data rat e signa ll ing for a type 1 printhead i n arrang e m e nt 2 
F i gure 307 shows a l l 8 printhoad arrang e m e nts 

40 F i gure 308 shows a printhoad structure 
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F i guro 300 shows a column Structuro 

F i gur e 310 shows a pr i nthood dot shift rogistor dot mapping to pago 

F i guro 31 1 shows data t i m i ng dur i ng pr i nting 

F i gur e 312 shows pr i nt qual i ty 
5 Figure 313 shows fire and select shift register setup for pr i nt i ng 

Figuro 31 A shows a fire pattern acros s butt ond of printhead chips 

F i guro 31 5 shows firo pattern gonoration 

Figuro 316 shows dotormination of so l oct sh i ft r e gister va l uo 

F i gur e 317 shows timing for printing signals 
10 figuro 318 shows i nitialisation of printhoads 

figure 310 shows a nozzio tost l atching c i rcu i t 

figur e 320 shows nozzl e t e st i ng 

figure 321 shows a t e mperatur e read i ng 

figur e 322 shows CMOS t e sting 
15 figure 323 shows a roticio l ayout 

figuro 32 4 show s a st e pp e r patt e rn on Waf e r 

Figure 325 shows rolat i onship botwoon datasots 

F i gur e 326 shows a validation hi e rarchy 

Figur e 327 shows d e v el opm e nt of op e rating syst e m cod e 
20 F i gur e 328 shows protoco l for d i rect l y v e rify i ng r e ads from Ch i pR 

Figur e 320 shows a protocol for s i gnature translation protoco l 

F i gur e 330 shows a protoco l for a dir e ct auth e nt i cated write 

F i guro 331 shows an altornat i vo protocol for a d i rect authenticat e d wr i t e 

F i gur e 332 shows a protoco l for bas i c updat e of permiss i ons 
25 F i guro 333 shows a protoco l for a multip l e key update 

Figur e 334 shows a protoco l for a singl e k e y authenticated road 

Figur e 335 shows a protocol for a sing le k e y authonticotod wr i to 

F i gur e 336 shows a protocol for a s i ng le k e y update of p e rmissions 

F i gure 337 shows a protocol for a s i nglo koy update 
30 F i gur e 338 shows a protoco l for a mu l tipl e k e y s i ng le- M authont i catod road 

Figur e 330 shows a protoco l for a mult i pl e k e y auth e nticat e d writ e 

Figur e 3 4 0 shows a protocol for a mu l tip le key updat e of p e rm i ss i ons 

Figuro 3^1 shows a protoco l for a mu l tip l e koy update 

F i gure 3 4 2 shows a protoco l for a mu l t i p l e koy mult i p l e M auth e nticat e d r e ad 
35 Figuro 343 shows a protoco l for a mult i p l e koy authont i catod wr i to 

F i gur e 344 shows a protoco l for a mu l tip i o koy update of perm i ss i ons 

F i gur e 3 4 5 shows a protocol for a multiple key update 

F i gur e 3 4 6 shows r el at i onsh i p of p e rmissions b i ts to M[n] acc e ss b i ts 

Figuro 3 4 7 shows 160 b i t max i ma l per i od LFSR 
40 Figure 3 4 8 Fiaure 21 shows clock filter 
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Figur e 3 4 9 Fiaure 22 shows tamper detection line 

F i gure 350 Fiaure 23 shows an oversize nMOS transistor layout of Tamper Detection Line 
Figure 351 Figure 24 shows a Tamper Detection Line 

Figure 352 Fioure 25 shows how Tamper Detection Lines cover the Noise Generator 
5 F i gure 353 Flgure 26 shows a prior art FET Implementation of CMOS inverter 
Figur e 36 4 Figure 27 shows non-flashing CMOS 
Figure 355 shows compon e nts of a print e r based rofill dovic e 
F i gure 356 shows r e fill i ng of print e rs by pr i nt e r basod rof i l l d e v i ce 
F i gure 357 ohowG compononts of a homo r e f i l l station 
10 Figur e 358 shows a throo i nk r e sorvoir un i t 

Figur e 359 shows r e fi l l of ink cartr i dg e s in a hom e r e f i l l station 
Figur e 360 shows compon e nts of a commorc i a l r e fil l stat i on 
F i gure 361 shows an ink rooorvo i r un i t 

F i gur e 362 shows r e fi ll of I nk cartr i dg e s I n a comm e rcia l r e fil l station (show i ng a s i ngl e refi ll un i t) 
15 F i guro 363 shows equ i va l ent s i gnature generation 
Figure 364 shows a basic fi el d d e fin i t i on 

F i gur e 365 shows an oxampio of defin i ng fie l d sizes and pos i t i ons 
F i gur e 366 shows permissions 

Figure 367 shows a first e xamp le of perm i ss i ons for a fi el d 
20 Figur e 368 shows a second oxampio of permissions for a fie l d 
F i gur e 369 shows fi e ld attr i but e s 

F i gur e 370 shows an output signature gonoration data format for Read 

Figur e 371 shows an I nput signatur e v e rificat i on data format for T e st 

F i gur e 372 shows an output signature generation data format for Trans l ate 
25 F i gur e 373 shows an I nput signature verificat i on data format for Wr I teAuth 

F i gur e 37 4 shows i nput signatur e data format for RoplacoKoy 

Figur e 375 shows a k e y r e p l ac e ment map 

Figuro 376 shows a key rop l ooomont mop after K | . i s r e p l ac e d 

Figur e 377 shows a k e y replacem e nt proc e ss 
30 F i gure 378 shows an output s i gnature data format for GetProgramK e y 

Figure 370 shows transf e r and rollback process 

Figure 380 shows an upgrad e flow 

F i gur e 381 shows author i s e d i nk r e fi ll paths I n the printing syst e m 
F i guro 382 shows on I nput s i gnature ver i ficat i on data format for Xf e rAmount 
35 Figur e 383 shows a transfer and ro ll back proc e ss 
Figuro 38^ shows an upgrade flow 

Figuro 385 shows authoris e d upgrade paths I n the pr i nting syst e m 
F i gur e 386 shows a d i r e ct signatur e va li dat i on s e qu e nce 
Figuro 387 shows signature va li dation using translation 
40 F i gure 388 shows s e tup of proauth fi el d attribut e s 
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F i gur e 389 Fiqure 28 shows a high level block diagram of QA Chip 
F i gure 390 FiQure 29 shows an analogue unit 
Figur e 391 Figure 30 shows a serial bus protocol for trimming 
F i gur e 392 Figure 31 shows a block diagram of a trim unit 
5 F i gur e 39 3 Fioure 32 shows a block diagram of a CPU of the QA chip 
Figuro 394 Fiqure 33 shows block diagram of an MIU 
Figur e 395 Fiqure 34 shows a block diagram of memory components 
Figur e 396 Fiqure 35 shows a first byte sent to an lOU 
Figuro 397 Fiqure 36 shows a block diagram of the lOU 
1 0 Figur e 398 Figure 37 shows a relationship between external SDa and SCIk and generation of 
internal signals 

Figure 399 shows b l ock diagram of ALU 

Figur e 4 00 shows a b l ock d i agram of DataS e l 

F i gur e 401 shows a b l ock diagram of ROR 
15 F i gur e 4 02 shows a block d i agram of th e ALU's l O block 

Figure 403 shows a b l ock d i agram of PCU 

Figuro 104 shows a block d i agram of on Address Gonorator Un i t 

Figur e 4 05 shows a b l ock diagram for a Count e r Un i t 

F i guro 406 shows a block d i agram of PMU 
20 F i gur e 407 shows a state machin e for PMU 

Figur e 408 shows a block d i agram of MRU 

F i gur e 4 09 shows s i mplifiod MAU stat e machine 

F i gur e 4 10 shows power on res e t behav i our 

F i gur e 4 11 Figure 38 shows a ring oscillator block diagram 
25 F i gur e 4 12 Fiaure 39 shows a system clock duty cycle 

Figuro 413 shows power on rosot 
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DETAILED DESCRIPTION OF PREFERRED AND OTHER EMBODIMENTS 
It will be appreciated that the detailed description that follows takes the form of a highly detailed 
design of the invention, including supporting hardware and software. A high level of detailed 
disclosure is provided to ensure that one skilled in the art will have ample guidance for 
5 implementing the invention. 

Imperative phrases such as "must", "requires", "necessary" and "important" (and similar language) 
should be read as being indicative of being necessary only for the preferred embodiment actually 
being described. As such, unless the opposite Is clear from the context, imperative wording should 
10 not be Interpreted as such. Nothing in the detailed description is to be understood as limiting the 
scope of the invention, which Is intended to be defined as widely as is defined in the accompanying 
claims. 

Indications of expected rates, frequencies, costs, and other quantitative values are exemplary and 
1 5 estimated only, and are made In good faith. Nothing in this specification should be read as implying 
that a particular commercial embodiment is or will be capable of a particular performance level in 
any measurable area. 

It will be appreciated that the principles, methods and hardware described throughout this document 
20 can be applied to other fields. Much of the security-related disclosure, for example, can be applied 
to many other fields that require secure communications between entitles, and certainly has 
application far beyond the field of printers. 

SYSTEM OVERVIEW 

25 The preferred of the present invention is implemented in a printer using microelectromechanical 
systems (MEMS) printheads. The printer can receive data from, for example, a personal computer 
such as an IBM compatible PC or Apple computer. In other embodiments, the printer can receive 
data directly from, for example, a digital still or video camera. The particular choice of 
communication link is not Important, and can be based, for example, on USB, Firewire, Bluetooth or 

30 any other wireless or hardwired communications protocol. 

Print System Overview 
3 I ntroduct i on 

This document describes the SoPEC (Small office home office Print Engine Controller) ASIC 
35 (Application Specific Integrated Circuit) suitable for use in, for example, SoHo printer products. The 
SoPEC ASIC is intended to be a low cost solution for bi-lithic printhead control, replacing the 
multichip solutions in larger more professional systems with a single chip. The increased cost 
competitiveness Is achieved by Integrating several systems such as a modified PEC1 printing 
pipeline, CPU control system, peripherals and memory sub-system onto one SoC ASIC, reducing 
40 component count and simplifying board design. 
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This section will give a general introduction to Memjet printing systems, introduce the components 
that make a bi-lithic printhead system, describe possible system architectures and show how 
several SoPECs can be used to achieve A3 and A4 duplex printing. The section "SoPEC ASIC" 
5 describes the SoC SoPEC ASIC, with subsections describing the CPU, DRAM and Print Engine 
Pipeline subsystems. Each section gives a detailed description of the blocks used and their 
operation within the overall print system. The final section describes the bi-lithic printhead 
construction and associated implications to the system due to its makeup. 

10 A Nomenc l atur e 

4zA — Bi-LiTHic Printhead Notation 

A bi-lithic based printhead is constructed from 2 printhead ICs of varying sizes. The notation M:N is 
used to express the size relationship of each IC, where M specifies one printhead IC in inches and 
N specifies the remaining printhead IC in inches. 



The 'SoPEC/MoPEC Bilithic Printhead Reference' document [10] contains a description of the bi- 
lithic printhead and related terminology. 

4t2 — Definitions 
20 The following terms are used throughout this specification: 

Bi-lithic printhead Refers to printhead constructed from 2 printhead ICs 

CPU Refers to CPU core, caching system and MMU. 

ISI-Bridge chip A device with a high speed interface (such as USB2.0, Ethernet or 
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IEEE1394) and one or more ISI interfaces. The ISI-Bridge would be the 
ISIMaster for each of the ISI buses it interfaces to. 



ISlMaster 



The ISIMaster is the only device allowed to initiate communication on the 
Inter Sopec Interface (ISI) bus. The ISIMaster interfaces with the host. 
Multi-SoPEC systems will contain one or more ISISIave SoPECs connected 
to the ISI bus. ISISIaves can only respond to communication initiated by the 
ISIMaster. 



ISISIave 



30 



LEON 



Refers to the LEON CPU core. 



LineSyncMaster 



The LineSyncMaster device generates the line synchronisation pulse that all 

SoPECs in the system must synchronise their line outputs to. 

Refers to SoPEC based print system with multiple SoPEC devices 

Refers to page printed with tags (normally in infrared ink). 

Refers to Print Engine Controller version 1 , precursor to SoPEC used to 

control printheads constructed from multiple angled printhead segments. 

Single MEMS IC used to construct bi-lithic printhead 

The PrintMaster device is responsible for coordinating all aspects of the print 
operation. There may only be one PrintMaster in a system. 



Multi-SoPEC 



35 



Netpage 
PEC1 



Printhead IC 



PrintMaster 



40 
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QA Chip Quality Assurance Chip 

Storage SoPEC An ISISIave SoPEC used as a DRAM store and which does not print. 
Tag Refers to pattern which encodes information about its position and orientation 

which allow it to be optically located and its data contents read. 
5 4^ — ^Acronym and Abbreviations 

The following acronyms and abbreviations are used in this specification 





CFU 


Contone FIFO Unit 




CPU 


Central Processing Unit 




DIU 


DRAM Interface Unit 


10 


DNC 


Dead Nozzle Compensator 




DRAM 


Dynamic Random Access Memory 




DWU 


DotLine Writer Unit 




GPIO 


General Purpose Input Output 




HCU 


Halftoner Compositor Unit 


15 


ICU 


Interrupt Controller Unit 




ISI 


Inter SoPEC Interface 




LDB 


Lossless Bi-level Decoder 




LLU 


Line Loader Unit 




LSS 


Low Speed Serial interface 


20 


MEMS 


Micro Electro Mechanical System 




MMU 


Memory Management Unit 




PCU 


SoPEC Controller Unit 




PHI 


PrintHead Interface 




PSS 


Power Save Storage Unit 


25 


RDU 


Real-time Debug Unit 




ROM 


Read Only Memory 




SCB 


Serial Communication Block 




SFU 


Spot FIFO Unit 




SMG4 


Silverbrool< Modified Group 4. 


30 


SoPEC 


Small office home office Print Engine Controller 




SRAM 


Static Random Access Memory 




TE 


Tag Encoder 




TFU 


Tag FIFO Unit 




TIM 


Timers Unit 


35 


USB 


Universal Serial Bus 



4i4 — Pseudocode notation 

In general the pseudocode examples use C like statements with some exceptions. 
Symbol and naming convections used for pseudocode. 
// Comment 
40 = Assignment 
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AND,OR.NOT 



++, — 



[XX:YY] 
{a, b. c} 




Operator equal, not equal, less than, greater than 
Operator addition, subtraction, multiply, divide, modulus 

Bitwise AND, bitwise OR, bitwise exclusive OR, left shift, right shift, complement 
Logical AND, Logical OR, Logical inversion 
Array/vector specifier 
Concatenation operation 
Increment and decrement 



4 . 4 .1 Register and signal naming conventions 

In general register naming uses the C style conventions with capitalization to denote word 
10 delimiters. Signals use RTL style notation where underscore denote word delimiters. There is a 

direct translation between both convention. For example the CmdSourceFifo register is equivalent 
to cmdjsourceJTtfo signal. 

47S-STATE MACHINE NOTATION 

State machines should be described using the pseudocode notation outiined above. State machine 

1 5 descriptions use the convention of underline to indicate the cause of a transition from one state to 
another and plain text (no underline) to indicate the effect of the transition i.e. signal transitions 
which occur when the new state is entered. 
A sample state machine is shown in Figure 1 . 
§ Printing Considerations 

20 A bi-lithic printhead produces 1600 dpi bi-level dots. On low-diffusion paper, each ejected drop 

forms a 22.5nm diameter dot. Dots are easily produced in isolation, allowing dispersed-dot dithering 
to be exploited to its fullest. Since the bi-lithic printhead is the width of the page and operates with a 
constant paper velocity, color planes are printed in perfect registration, allowing ideal dot-on-dot 
printing. Dot-on-dot printing minimizes 'muddying' of midtones caused by inter-color bleed. 

25 A page layout may contain a mixture of images, graphics and text Continuous-tone (contone) 

images and graphics are reproduced using a stochastic dispersed-dot dither. Unlike a clustered-dot 
(or amplitude-modulated) dither, a dispersed-dot (or frequency-modulated) dither reproduces high 
spatial frequencies (i.e. image detail) almost to the limits of the dot resolution, while simultaneously 
reproducing lower spatial frequencies to their full color depth, when spatially integrated by the eye. 

30 A stochastic dither matrix is carefully designed to be free of objectionable low-frequency patterns 
when tiled across the image. As such its size typically exceeds the minimum size required to 
support a particular number of intensity levels (e.g. 16x16x 8 bits for 257 intensity levels). 
Human conti-ast sensitivity peaks at a spatial frequency of about 3 cycles per degree of visual field 
and then falls off logarithmically, decreasing by a factor of 100 beyond about 40 cycles per degree 

35 and becoming immeasurable beyond 60 cycles per degree [25][25]. At a normal viewing distance 
of 12 inches (about 300mm), this translates roughly to 200-300 cycles per inch (cpi) on the printed 
page, or 400-600 samples per inch according to Nyquisfs theorem. 
In practice, contone resolution above about 300 ppi is of limited utility outside special applications 
such as medical imaging. Offset printing of magazines, for example, uses contone resolutions in the 

40 range 1 50 to 300 ppl. Higher resolutions contribute slightiy to color error through the dither. 
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Black text and graphics are reproduced directly using bi-level black dots, and are therefore not anti- 
aliased (i.e. low-pass filtered) before being printed. Text should therefore be supersampled beyond 
the perceptual limits discussed above, to produce smoother edges when spatially integrated by the 
eye. Text resolution up to about 1200 dpi continues to contribute to perceived text sharpness 
5 (assuming low-diffusion paper, of course). 

A Netpage printer, for example, may use a contone resolution of 267 ppi (i.e. 1600 dpi / 6), and a 
black text and graphics resolution of 800 dpi. A high end office or departmental printer may use a 
contone resolution of 320 ppi (1600 dpi / 5) and a black text and graphics resolution of 1600 dpi. 
Both formats are capable of exceeding the quality of commercial (offset) printing and photographic 
1 0 reproduction. 

§ Document Data Flow 

§r1 — Considerations 

Because of the page-width nature of the bi-lithic printhead, each page must be printed at a constant 
15 speed to avoid creating visible artifacts. This means that the printing speed can't be varied to match 
the input data rate. Document rasterization and document printing are therefore decoupled to 
ensure the printhead has a constant supply of data. A page is never printed until it is fully rasterized. 
This can be achieved by storing a compressed version of each rasterized page image in memory. 
This decoupling also allows the RIP(s) to run ahead of the printer when rasterizing simple pages, 
20 buying time to rasterize more complex pages. 

Because contone color images are reproduced by stochastic dithering, but black text and line 
graphics are reproduced directly using dots, the compressed page image format contains a 
separate foreground bi-level black layer and background contone color layer. The black layer is 
composited over the contone layer after the contone layer is dithered (although the contone layer 
25 has an optional black component). A final layer of Netpage tags (in infrared or black ink) Is 
optionally added to the page for printout. 

Figure 2 shows the flow of a document from computer system to printed page. 
At 267 ppi for example, a A4 page (8.26 inches x 1 1 .7 inches) of contone CMYK data has a size of 
26.3MB. At 320 ppi, an A4 page of contone data has a size of 37.8MB. Using lossy contone 
30 compression algorithms such as JPEG [27], contone images compress with a ratio up to 10:1 

without noticeable loss of quality, giving compressed page sizes of 2.63MB at 267 ppi and 3.78 MB 
at 320 ppi. 

At 800 dpi, a A4 page of bi-level data has a size of 7.4MB. At 1600 dpi, a Letter page of bi-level 
data has a size of 29.5 MB. Coherent data such as text compresses very well. Using lossless bi- 
35 level compression algorithms such as SMG4 fa x as d i scussod i n S e ction 8.1 .2.3.1 , ten-point plain 
text compresses with a ratio of about 50:1. Lossless bi-level compression across an average page 
is about 20:1 with 10:1 possible for pages which compress pooriy. The requirement for SoPEC is to 
be able to print text at 10:1 compression. Assuming 10:1 compression gives compressed page 
sizes of 0.74 MB at 800 dpi, and 2.95 MB at 1600 dpi. 
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Once dithered, a page of CMYK contone image data consists of 1 16MB of bi-level data. Using 
lossless bi-level compression algorithms on this data is pointless precisely because the optimal 
dither is stochastic - i.e. since it Introduces hard-to-compress disorder. 

Netpage tag data is optionally supplied with the page image. Rather than storing a compressed bi- 
5 level data layer for the Netpage tags, the tag data is stored in its raw form. Each tag is supplied up 
to 120 bits of raw variable data (combined with up to 56 bits of raw fixed data) and covers up to a 
6mm X 6mm area (at 1600 dpi). The absolute maximum number of tags on a A4 page is 15,540 
when the tag is only 2mm x 2mm (each tag is 126 dots x 126 dots, for a total coverage of 148 tags 
X 105 tags). 15,540 tags of 128 bits per tag gives a compressed tag page size of 0.24 MB. 
1 0 The multi-layer compressed page image format therefore exploits the relative strengths of lossy 
JPEG contone image compression, lossless bi-level text compression, and tag encoding. The 
format is compact enough to be storage-efficient, and simple enough to allow straightforward real- 
time expansion during printing. 

Since text and images normally don't overlap, the normal worst-case page image size is image 
1 5 only, while the normal best-case page image size is text only. The addition of worst case Netpage 
tags adds 0.24MB to the page image size. The worst-case page image size is text over image plus 
tags. The average page size assumes a quarter of an average page contains images. Table 1 
shows data sizes for compressed Letter page for these different options. 
Table 1 . Data sizes for A4 page (8.26 inches x 1 1 .7 inches) 

20 





267 ppi contone 
800 dpi bi-level 


320 ppi contone 
1600 dpi bi-level 


Image only (contone), 10:1 compression 


2.63 MB 


3.78 MB 


Text only (bi-level), 10:1 compression 


0.74 MB 


2.95 MB 


Netpage tags, 1600 dpi 


0.24 MB 


0.24 MB 


Worst case (text + image + tags) 


3.61 MB 


6.67 MB 


Average (text + 25% image + tags) 


1.64 MB 


4.25 MB 



6r3 — Document Data Flow 

The Host PC rasterizes and compresses the incoming document on a page by page basis. The 
page is restructured into bands with one or more bands used to construct a page. The compressed 
25 data is then transferred to the SoPEC device via the USB link. A complete band is stored in SoPEC 
embedded memory. Once the band transfer is complete the SoPEC device reads the compressed 
data, expands the band, normalizes contone, bi-level and tag data to 1600 dpi and transfers the 
resultant calculated dots to the bi-lithic printhead. 
The document data flow is 

30 • The RIP software rasterizes each page description and compress the rasterized page image. 
The infrared layer of the printed page optionally contains encoded Netpage [5] tags at a 
programmable density. 
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The compressed page image is transferred to the SoPEC device via the USB normally on a 
band by band basis. 

The print engine takes the compressed page image and starts the page expansion. 
The first stage page expansion consists of 3 operations performed in parallel 
expansion of the JPEG-compressed contone layer 
expansion of the SMG4 fax compressed bi-level layer 
encoding and rendering of the bi-level tag data. 

The second stage dithers the contone layer using a programmable dither matrix, producing 
up to four bi-level layers at full-resolution. 
10 • The second stage then composites the bi-level tag data layer, the bi-level SMG4 fax de- 
compressed layer and up to four bi-level JPEG de-compressed layers into the full-resolution 
page image. 

A fixative layer is also generated as required. 

The last stage formats and prints the bi-level data through the bi-lithic printhead via the 

1 5 printhead interface. 

The SoPEC device can print a full resolution page with 6 color planes. Each of the color planes can 
be generated from compressed data through any channel (either JPEG compressed, bi-level SMG4 
fax compressed, tag data generated, or fixative channel created) with a maximum number of 6 data 
channels from page RIP to bi-lithic printhead color planes. 

20 The mapping of data channels to color planes is programmable, this allows for multiple color planes 
in the printhead to map to the same data channel to provide for redundancy in the printhead to 
assist dead nozzle compensation. 

Also a data channel could be used to gate data from another data channel. For example in stencil 
mode, data from the bilevel data channel at 1600 dpi can be used to filter the contone data channel 
25 at 320 dpi, giving the effect of 1600 dpi contone image. 
St3 — Page comsiderations due to SoPEC 

The SoPEC device typically stores a complete page of document data on chip. The amount of 
storage available for compressed pages is limited to 2Mbytes, imposing a fixed maximum on 
compressed page size. A comparison of the compressed image sizes in Table 2 indicates that 

30 SoPEC would not be capable of printing worst case pages unless they are split into bands and 
printing commences before all the bands for the page have been downloaded. The page sizes in 
the table are shown for comparison purposes and would be considered reasonable for a 
professional level printing system. The SoPEC device is aimed at the consumer level and would not 
be required to print pages of that complexity. Target document types for the SoPEC device are 

35 shown Table 2. 

Table 2. Page content targets for SoPEC 



Page Content Description Calculation Size 



PEA23US 



26 







(MByte) 


Best Case picture Image, 267ppi with 3 colors, 
A4 size 


8.26x11.7x267x267x3 
@10:1 


1.97 


Full page text, 800dpi A4 size 


8.26x11.7x800x800 @ 
10:1 


0.74 


Mixed Graphics and Text 

- Image of 6 inches x 4 inches @ 267 ppi and 3 

colors 

- Remaining area text --73 inches^, 800 dpi 


6x4x267x267x3 @ 5:1 
800x800x73 @ 10:1 


1.55 


Best Case Photo, 3 Colors, 6.6 Megapixel Image 


6.6 Mpixel @ 10:1 


2.00 



If a document with more complex pages is required, the page RIP software in the host PC can 
determine that there is insufficient memory storage in the SoPEC for that document. In such cases 
the RIP software can take two courses of action. It can increase the compression ratio until the 
5 compressed page size will fit in the SoPEC device, at the expense of document quality, or divide 
the page into bands and allow SoPEC to begin printing a page band before all bands for that page 
are downloaded. Once SoPEC starts printing a page it cannot stop, if SoPEC consumes 
compressed data faster than the bands can be downloaded a buffer underrun error could occur 
causing the print to fail. A buffer underrun occurs if a line synchronisation pulse is received before a 

1 0 line of data has been transferred to the printhead. 

Other options which can be considered if the page does not fit completely into the compressed 
page store are to slow the printing or to use multiple SoPECs to print parts of the page. A Storage 
SoPEC ( Section 7.2.5) could be added to the system to provide guaranteed bandwidth data 
delivery. The print system could also be constructed using an ISI-Bridge chip (Sect i on 7.2.6) t o 

1 5 provide guaranteed data delivery. 
7 Memjet Printer Architecture 

The SoPEC device can be used in several printer configurations and architectures. 
In the general sense every SoPEC based printer architecture will contain: 
One or more SoPEC devices. 
20 • One or more bi-lithic printheads. 
Two or more LSS busses. 
Two or more OA chips. 

USB 1 .1 connection to host or ISI connection to Bridge Chip. 

ISI bus connection between SoPECs (when multiple SoPECs are used). 
25 Som e e xamp l e print e r configurat i ons as outlined in S e ction 7.2. The var i ous system compon e nts 
ar e outlinod br i ofly i n Section 7.1 . 
Tri — System Components 
7t4t4-SoPEC Print Engine Controller 

The SoPEC device contains several system on a chip (SoC) components, as well as the print 
30 engine pipeline control application specific logic. 
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7.1.1.1 — Print Engine Pipeline (PEP) Logic 

The PEP reads compressed page store data from the embedded memory, optionally decompresses 
the data and formats it for sending to the printhead. The print engine pipeline functionality includes 
expanding the page image, dithering the contone layer, compositing the black layer over the 
5 contone layer, rendering of Netpage tags, compensation for dead nozzles in the printhead, and 
sending the resultant image to the bi-lithic printhead. 

7.1.1.2 — Embedded CPU 

SoPEC contains an embedded CPU for general purpose system configuration and management. 
The CPU performs page and band header processing, motor control and sensor monitoring (via the 
10 GPIO) and other system control functions. The CPU can perform buffer management or report 
buffer status to the host. The CPU can optionally run vendor application specific code for general 
print control such as paper ready monitoring and LED status update. 

7.1.1.3 — Embedded Memory Buffer 

A 2.5Mbyte embedded memory buffer is integrated onto the SoPEC device, of which approximately 
1 5 2Mbytes are available for compressed page store data. A compressed page is divided into one or 
more bands, with a number of bands stored in memory. As a band of the page is consumed by the 
PEP for printing a new band can be downloaded. The new band may be for the current page or the 
next page. 

Using banding it is possible to begin printing a page before the complete compressed page is 
20 downloaded, but care must be taken to ensure that data is always available for printing or a buffer 
underrun may occur. 

An Storage SoPEC acting as a memory buffer (Sect i on 7.2.5) or an ISI-Bridge chip with attached 
DRAM (S e ction 7.2.6) could be used to provide guaranteed data delivery. 
7.1.1.^ — Embedded USB 1.1 Device 
25 The embedded USB 1.1 device accepts compressed page data and control commands from the 
host PC, and facilitates the data transfer to either embedded memory or to another SoPEC device 
in multi-SoPEC systems. 
7t4t2 Bi-lithic Printhead 

The printhead is constructed by abutting 2 printhead ICs together. The printhead ICs can vary in 
30 size from 2 inches to 8 inches, so to produce an A4 printhead several combinations are possible. 

For example two printhead ICs of 7 inches and 3 inches could be used to create a A4 printhead (the 
notation is 7:3). Similariy 6 and 4 combination (6:4), or 5:5 combination. For an A3 printhead it can 
be constructed from 8:6 or an 7:7 printhead IC combination. For photographic printing smaller 
printheads can be constructed. 

35 TA^ LSS interface bus 

Each SoPEC device has 2 LSS system buses for communication with QA devices for system 
authentication and ink usage accounting. The number of QA devices per bus and their position in 
the system is unrestricted with the exception that PRiNTER_QA and INKJQA devices should be on 
separate LSS busses. 
40 7t4t4 QA devices 
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Each SoPEC system can have several QA devices. Normally each printing SoPEC will have an 
associated PRINTER_QA, ink cartridges will contain an INK_QA chip. PRiNTER_QA and INKjQA 
devices should be on separate LSS busses. All QA chips in the system are physically identical with 
flash memory contents defining PRINTER_QA from INK_QA chip. 

5 Tt^t© IS^ interface 

The Inter-SoPEC Interface (ISI) provides a communication channel between SoPECs in a multi- 
SoPEC system. The ISIMaster can be SoPEC device or an ISI-Bridge chip depending on the printer 
configuration. Both compressed data and control commands are transferred via the interface. 
TAS ISI-Bridge Chip 

10 A device, other than a SoPEC with a USB connection, which provides print data to a number of 
slave SoPECs. A bridge chip will typically have a high bandwidth connection, such as USB2.0, 
Ethernet or IEEE1394, to a host and may have an attached external DRAM for compressed page 
storage. A bridge chip would have one or more ISI interfaces. The use of multiple ISI buses would 
allow the construction of independent print systems within the one printer. The ISI-Bridge would be 

1 5 the ISIMaster for each of the ISI buses it interfaces to. 
TtS Possible SoPEC Systems 

Several possible SoPEC based system architectures exist. The following sections outline some 
possible architectures. It is possible to have extra SoPEC devices in the system used for DRAM 
storage. The QA chip configurations shown are indicative of the flexibility of LSS bus architecture, 
20 but not limited to those configurations. 

l^A ^A4 Simplex with 1 SoPEC device 

In Figure 3, a single SoPEC device can be used to control two printhead ICs. The SoPEC receives 
compressed data through the USB device from the host. The compressed data is processed and 
25 transferred to the printhead. 

TtStS M Duplex with 2 SoPEC devices 

In Figure 4, two SoPEC devices are used to control two bi-lithic printheads, each with two printhead 
ICs. Each bi-lithic printhead prints to opposite sides of the same page to achieve duplex printing. 
The SoPEC connected to the USB is the ISIMaster SoPEC, the remaining SoPEC is an ISISIave. 
30 The ISIMaster receives all the compressed page data for both SoPECs and re-distributes the 
compressed data over the Inter-SoPEC Interface (ISI) bus. 

It may not be possible to print an A4 page every 2 seconds in this configuration since the USB 1.1 
connection to the host may not have enough bandwidth. An alternative would be for each SoPEC to 
have its own USB 1 .1 connection. This would allow a faster average print speed. 
35 7t2t3 ^A3 Simplex with 2 SoPEC devices 

In Figure 5, two SoPEC devices are used to control one A3 bi-lithic printhead. Each SoPEC controls 
only one printhead IC (the remaining PHI port typically remains idle). This system uses the SoPEC 
with the USB connection as the ISIMaster. In this dual SoPEC configuration the compressed page 
40 store data is split across 2 SoPECs giving a total of 4Mbyte page store, this allows the system to 
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use compression rates as in an A4 architecture, but with the increased page size of A3. The 
ISIMaster receives all the compressed page data for all SoPECs and re-distributes the compressed 
data over the Inter-SoPEC Interface (ISt) bus. 

It may not be possible to print an A3 page every 2 seconds in this configuration since the USB 1 .1 
5 connection to the host will only have enough bandwidth to supply 2Mbytes every 2 seconds. Pages 
which require more than 2MBytes every 2 seconds will therefore print more slowly. An alternative 
would be for each SoPEC to have its own USB 1 .1 connection. This would allow a faster average 
print speed. 

7t2t4 ^A3 Duplex with 4 SoPEC devices 

10 In Figure 6 a 4 SoPEC system is shown. It contains 2 A3 bi-lithic printheads, one for each side of an 
A3 page. Each printhead contain 2 printhead ICs, each printhead IC is controlled by an independent 
SoPEC device, with the remaining PHI port typically unused. Again the SoPEC with USB 1 .1 
connection is the ISIMaster with the other SoPECs as ISISIaves. In total, the system contains 
SMbytes of compressed page store (2Mbytes per SoPEC), so the increased page size does not 

1 5 degrade the system print quality, from that of an A4 simplex printer. The ISIMaster receives all the 
compressed page data for all SoPECs and re-distributes the compressed data over the Inter- 
SoPEC Interface (ISI) bus. 

It may not be possible to print an A3 page every 2 seconds in this configuration since the USB 1 .1 
connection to the host will only have enough bandwidth to supply 2Mbytes every 2 seconds. Pages 
20 which require more than 2MBytes every 2 seconds will therefore print more slowly. An alternative 
would be for each SoPEC or set of SoPECs on the same side of the page to have their own USB 
1 .1 connection (as ISISIaves may also have direct USB connections to the host). This would allow a 
faster average print speed. 

TtStS SoPEC DRAM storage solution: A4 Simplex with 1 printing SoPEC and 1 memory SoPEC 

25 Extra SoPECs can be used for DRAM storage e.g. In Figure 7 an A4 simplex printer can be built 
with a single extra SoPEC used for DRAM storage. The DRAM SoPEC can provide guaranteed 
bandwidth delivery of data to the printing SoPEC. SoPEC configurations can have multiple extra 
SoPECs used for DRAM storage. 

7.2.6 — ISI-Bridge chip solution: A3 Duplex system with 4 SoPEC devices 
30 In Figure 8, an ISI-Bridge chip provides slave-only IS! connections to SoPEC devices. Figure 8 

shows a ISI-Bridge chip with 2 separate ISt ports. The ISI-Bridge chip is the ISIMaster on each of 

the ISI busses it Is connected to. All connected SoPECs are ISISIaves. The ISI-Bridge chip will 

typically have a high bandwidth connection to a host and may have an attached external DRAM for 

compressed page storage. 
35 An alternative to having a ISI-Bridge chip would be for each SoPEC or each set of SoPECs on the 

same side of a page to have their own USB 1 .1 connection. This would allow a faster average print 

speed. 

8 Page Format and Printflow 

When rendering a page, the RIP produces a page header and a number of bands (a non-blank 
40 page requires at least one band) for a page. The page header contains high level rendering 
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parameters, and each band contains compressed page data. The size of the band will depend on 
the memory available to the RIP, the speed of the RIP, and the amount of memory remaining In 
SoPEC while printing the previous band(s). Figure 9 shows the high level data structure of a 
number of pages with different numbers of bands in the page. 

Each compressed band contains a mandatory band header, an optional bl-level plane, optional sets 
of Interleaved contone planes, and an optional tag data plane (for Netpage enabled applications). 
Since each of these planes is optional, the band header specifies which planes are Included with 
the band. Figure 10 gives a high-level breakdown of the contents of a page band. 

A single SoPEC has maximum rendering restrictions as follows: 
1 bi-level plane 

1 contone interleaved plane set containing a maximum of 4 contone planes 
1 tag data plane 

a bi-llthic printhead with a maximum of 2 printhead ICs 
The requirement for single-sided A4 single SoPEC printing is 

average contone JPEG compression ratio of 10:1, with a local minimum compression ratio of 
5:1 for a single line of interleaved JPEG blocks. 

average bi-level compression ratio of 10:1 , with a local minimum compression ratio of 1 :1 for 
a single line. 

If the page contains rendering parameters that exceed these specifications, then the RIP or the 

Host PC must split the page Into a format that can be handled by a single SoPEC. 

In the general case, the SoPEC CPU must analyze the page and band headers and generate an 

appropriate set of register write commands to configure the units in SoPEC for that page. The 

various bands are passed to the destination SoPEC(s) to locations in DRAM determined by the 

host. 

The host keeps a memory map for the DRAM, and ensures that as a band is passed to a SoPEC, it 
is stored in a suitable free area in DRAM. Each SoPEC is connected to the ISI bus or USB bus via 
its Serial communication Block (SCB). The SoPEC CPU configures the SCB to allow compressed 
data bands to pass from the USB or ISI through the SCB to SoPEC DRAM. Figure 1 1 shows an 
example data flow for a page destined to be printed by a single SoPEC. Band usage information is 
generated by the individual SoPECs and passed back to the host. 

SoPEC has an addressing mechanism that permits circular band memory allocation, thus facilitating 
easy memory management. However it is not strictly necessary that all bands be stored together. 
As long as the appropriate registers in SoPEC are set up for each band, and a given band is 
contiguous^, the memory can be allocated In any way. 



^Although a band must contain at least one plane 

^Contiguous allocation also includes wrapping around in SoPEC's band store memory. 
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BA — Pr i nt eng i ne example page format 

Th i s s e ct i on d e scrib e s a poss i ble format of comprossed pagos oxpoctod by th e e mb e dd e d CPU i n 
SoPEC. Tho format is gonorated by softwar e i n th e host PC and intorprotod by omboddod software 
i n SoPEC. This s e ction i ndicat e s the typ e of i nformat i on in a pago format structure, but 
5 i mpl e m e ntations nood not bo l im i t e d to th i s format. Th e host PC can optiona ll y perform tho major i ty 
of the header process i ng. 
The compressed format and the pr i nt engines ar e d e signed to al l ow rea l t i mo pago expans i on 
dur i ng pr i nting, to ensure that print i ng is novor i nterrupted In tho middle of a pag e du e to data 
undorrun. 

10 Th e pag e format d e scr i b e d h e r e i s for a single black b i- l e v el layer, a conton e lay e r, and a Notpago 
tag layer. The black bi lovo l l ayor is defined to compos i te owr tho contone layor. 
Tho b l ack bi l ovol l ayer consists of a bitmap contain i ng a 1 b i t opacity for each pixel. Th i s black 
lay e r matt e has a r e solution which i s an i nteger or non i nteger factor of th e pr i nt e r's dot r e so l ution. 
Th e h i gh e st supported resolut i on is 1600 dpi, i .e. tho pr i nter's fu l l dot resolut i on. 

15 Th e conton e l ay e r, opt i onal l y passed i n as YCrCb, cons i sts of a 2 4 bit CMY or 32 - bit CMYK color 
for each p i xel. Th i s contone imago has a roso l ution wh i ch i s on i nteger or non integer factor of tho 
printer's dot resolution. Tho requir e m e nt for a singl e SoPEC i s to support 1 side p e r 2 s e conds 
A^/Lotter printing at a reso l ut i on of 267 pp i , i . e . on e- sixth th e pr i nter's dot reso l ution. 
Non i nteger scaling can b e p e rform e d on both th e conton e and bi level i mages. On l y i nteger 

20 scaling can bo perform e d on th e tag data. 

Tho black b i- l e v el layer and th e contone lay e r are both in comprossed form for e fficient storage i n 
th e pr i nt e r's int e rna l m e mory. 
StItI Page structure 

A sing l e SoPEC i s ab le to pr i nt w i th fu ll edge bleed for L e tt e r and A3 v i a diff e rent st i tch part 
25 combinations of tho b i l i thic pr i nthoad. it imposes no margins and so has a printab l e pago area 
wh i ch corresponds to th e siz e of its pap e r. The target pag e size is constrained by th e printab le 
page ar e a, l ess the explicit (targot) l oft and top margins spec i fied in tho page description. Those 
r e lat i onships ar e il l ustrated bolow. 

8.1.2 Compressed pago format 

30 Apart from b ei ng i mp li c i t l y dofinQd in relation to the printable pago aroa, e ach page descr i ption is 

comploto and self contained. There is no data stored separately from tho pago d e scr i ption to wh i ch 
th e pag e d e scr i pt i on r e f e rs.^ Tho pag e d e scription consists of a pag e h e ad e r which describes th e s iz e and 
resolution of th e pag e , follow e d by one or mor e pag e bonds which describe the actual page cont e nt. 
8.1.2.1 — Pago hoador 
35 Tab l e 3 shows an examp l e format of a pag e h e ad e r. 



SoPEC ro l ios on dith e r matric e s and tag struoturos to have already boon sot up, but thoso are not cons i dorod 
to be part of a genera l pago format. I t i s trivia l to oxtond tho pago format to a ll ow exact spooif l oation of d i ther 
matrices and tag struoturos. 
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Tab le 3. Pag e head e r format 



format 



d e script i on 



s ignatur e 



16 - b i t i nteg e r 



Page h e ad e r format signature. 



version 



16 - b i t i nt e g e r 



Pag e h e ad e r format vers i on number. 



structure sizo 



16 - b i t i nteg e r 



S i z e of page header. 



band count 



16 b i t i nteger 



Number of bands spocifiod for th i s pag e . 



target reso l ution (dpi) 



16 b i t i nteger 



Resolut i on of targ e t pag e . Th i s is a l vyays 
1 600 for th e M e mj e t print e r. 



target pago width 



16 bit integer 



Width of target page, i n dots. 



target pago he i ght 



32 b i t I nteg e r 



IHo i ght of target page, in dots 



target l oft margin for b l ack and 



16 bit i nteger 



contone 



W i dth of targ e t le ft margin, i n dots, for black 

and contono. 



targ e t top margin for b l ack and 
contone 



16 - bit I nteg e r 



Height of targ e t top marg i n, i n dots, for black 



and contone. 



targ e t right margin for black and 
contone 



16 - b i t int e g e r 



W i dth of target right marg i n, in dots, for black 



and contone. 



Height of target bottom margin, in dots, for 
black and conton e . 



target bottom marg i n for b l ack|1 6 b i t integer 
and contone 



targ e t l e ft marg i n for tags 



16 - b i t i nt e g e r 



W i dth of targ e t le ft margin, in dots, for tags. 



target top margin for tags 



16 bit intogor 



H ei ght of targ e t top margin, in dots, for tags. 



target right marg i n for tags 



16 b i t int e ger 



Width of targ e t right marg i n, i n dots, for tags. 



target bottom marg i n for tags 



16 b i t integer 



H ei ght of targ e t bottom marg i n, in dots, for 
tag&T 



generate tags 



1 6 bit int e ger 



Sp e c i fi e s wh e th e r to generate tags for th i s 
pag e (0 — rot^I — y e s). 



fix e d tag data 



28 - b i t int e g e r 



Th i s is on l y valid i f g e n e rat e tags i s s e t. 



tag v e rtica l sca l e factor 



16 - bit i nt e g e r 



Scale factor i n vortical direction from tag data 



roso l utlon to target reso l ution. Valid rango ~ 
51 1 . I nteger scal i ng on l y 



tag horizonta l sca l e factor 



16 - b i t i nt e g e r 



Sca l e factor in hor i zontal dir e ct i on from tag 
data r e solution to target r e solution. Va l id 



rang e " 1 - 51 1 . I nt e ger scaling only. 



b i le ve l l ayer vort i ca l sca le factor 



6 bit i nteger 



Scale factor in v e rt i ca l direction from b i-le ve l 



reso l ution to target resolution (must bo 1 or 



greater). May bo non -i nt e g e r. 

Expressed as a fraction with upper 8 b i ts th e 



numerator and th e l ower 8 b i ts th e 



denom i nator. 
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bi -le v e l l ay e r horizonta l sca l e fac 



16 bit i nt e g e r Sca le factor in hor i zonta l direct i on from bi 



as a fract i on w i th uppor 8 bits tho numorator 
and th e l ow e r 8 b i ts th e d e nominator. 



ovol rosolution to target roso l ut i on (must be 1 
or gr e at e r). May bo non Int e g e r. Expr e ssed 



bi - le v e l layer pago width 



16 b i t i nteger 



W i dth of bi - l e v e l l ay e r page, in p i x e ls. 



bi l e v e l l ay e r pago height 



32 - bit int e g e r 



He i ght of b i le v e l l ayer pago, i n pix e ls. 



contone f l ags 



16 bit i nt e g e r 



Dofinos tho color convers i on that is r e qu i red 
for tho JPEG data- 



B i ts 2 0 s p e c i fy how many contono planoc 



thoro oro (o.g. 3 for CMY and A for CMYK). 



Bit 3 spocifi e s wh e ther the first 3 co l or plan e s 
nood to b e conv e rted bock from YCrCb to 



C I VIY. Only valid i f b2 0 - 3 or 1. 



9 — no conversion, l eav e JPEG co l ors alon e 



1 — color convert. 



B i ts 7 4 sp e cifi e s wh e th e r the YCrCb was 



gonoratod directly from CMY, or whothor i t 
was converted to RGB first via th e step: R ~ 



255 C, G - 255 M, B ~ 255 Y. Each of th o 



co l or plan e s can b e i ndiv i dually inv e rt e d. 
0 — do not i nvert color p l an e 0 



1 — i nv e rt color plane 0 

0 — do not i nv e rt co l or p l an e 1 



1 — i nvert co l or p l an e 1 



0 — do not inv e rt color plan e 2 



1 — inv e rt color plan e 2 



0 — do not inv e rt co l or p l ane 3 

1 — i nv e rt co l or plane 3 



Bit 8 sp e cifi e s whether the contono data is 



JPEG compr e ss e d or non compr e ssed: 



0 — JPEG compr e ss e d 



non comprossod 



Tho rema i n i ng b i ts ar e r e serv e d (0). 



contono vortical sca le factor 



16 - bit i nt e g e r 



Sca l e factor i n vort i ca l direction from contono 



ohonnol rosolut i on to target rosolut i on. Val i d 



PEA23US 



34 







range ~ 1 255. May bo non Intogor. 


Expressed as a fraction with upper 8 bits tho 


numorator and the lower 8 bits the 


denominator. 


oontone horizontal scale factor 


1 6-bit integer 










contone channol rosolution to target 
resolution. Valid range ~ 1 255. May be non- 


integer. 

Expressed as a fraction with upper 8-bits the 


numorator and tho lower 8 bits the 


denominator- 


contone page width 








16-bit integer 


Width of contone page, in contone pixels. 


Gontono page height 


32 bit integer 


IHoight of contone page, in contone pixels. 


roscrvod 


up to 128 bytes 


Roservod and 0 pads out page header to 
multiple of 128 bytes. 



The pago head e r contains a s i gnatur e and v e rsion wh i ch allow th e CPU to id e nt i fy th e page h e ad e r 
format. If tho signatur e and/or v e rs i on are m i ssing or incompatibl e w i th th e CPU, th e n th e CPU can 
5 rojoct th e pag e . 

Th e Gontono flags define how many oontono l ay e rs aro present, wh i ch typica ll y is used for defin i ng 
whether the contono lay e r i s CMY or CMYK. Additional l y, if th e co l or p l an e s ar e CMY, th e y can b e 
opt i ona ll y stored as YCrCb, and further opt i ona ll y color space converted from CMY direct l y or via 
RGB. Fina l ly tho contone data is spec i fied as b ei ng e ith e r JPEG compr e ss e d or non compress e d. 
10 Th e pag e head e r d e fin e s the r e solution and size of tho targ e t pag e . Th e b i- l e v e l and conton e l ay e rs 
are cl i pped to th e targ e t pag e if n e c e ssary. This happ e ns wh e n e v e r th e bi -le v e l or conton e sca le 
factors ar e not factors of the target page width or he i ght. 

Th e targ e t left, top, right and bottom marg i ns d e fin e tho position i ng of th e targ e t page w i th i n the 
printab l e pago aroa. 

15 Tho tag parameters specify wh e ther or not Netpage tags shou l d bo produced for th i s pag e and what 
or ie ntation the tags shou l d bo produced at ( l andscape or portrait mode). Tho f i xed tag data i s a l so 
prov i ded. 

Th e conton e , bi leve l and tag l ay e r param e t e rs d e fine tho pago size and th e sca l e factors. 
8.1.2.2 — B a nd format 
20 Tab le 4 shows th e format of tho pag e band header. 

Tab l o A. Band header format 





format 


description 


signature 


16-bit integer 


Pago band header format signature. 
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version 


16 bit integer 


Page band header format version number. 


e>4r>i 






LFI lU VVi^t'lU JfV^I""l,/Cit lU 1 l^l^l It 


1 fi hit int^^nf^r 




bi lovol layor bond data oizo 


32 bit integer 


Size of bi lovol layer band data, in bytes. 








oontono band data oizo 


32 bit integer 


Size of oontono piano band data, in bytos. 








tag band hoight 


16-bit integer 


Height of tag band, in dots. 


tag band data size 


32- bit integer 


Size of unencoded tag data band, in bytes. Can be 
0 which indicates that no tag data is provided. 




reserved 


up to 128 bytos 


Reserved and 0 pads out band header to multiple 
of 128 bytos. 



The b i l ovo l l ay e r paramotors define the hoight of the black band, and the sizo of i ts compressed 
band data. The variable s i ze b l ack data fol l ows th e pag e band h e ad e r. 

The conton e l ay e r param e t e rs d e fin e th e h ei ght of th e conton e band, and th e siz e of its compress e d 
page data. The var i able size contono data follows th e b l ack data. 



5 The tag band data Is the sot of variable tag data ha l f l inos as required by the tag encoder. The 
format of th e tag data i s found in Section 26.5.2. Th e tag band data fo l lows th e conton e data. 
Table 5 shows th e format of the variab l e s i zo compressed band data which fol l ows th e pag e band 
h e ader. 

Tabl e 5. Pag e band data for mat 

field format Doscr i pt i on 

b l ack data Mod i fi e d G 4 facsimil e bitstr eam"* Compr e ss e d bi - l e v el lay e r, 
conton e data JPEG byt e str e am Compr e ss e d conton e data l ay e r. 

tag data map Tag data array Tag data format. See Sect i on 26.5.2. 

10 Th e start of e ach variable sizo segment of band data shou l d be a li gned to a 256 bit DRAM word 
boundary. 

Th e fol l owing s e ctions d e scrib e th e format of the compr e ss e d b i-l evel l ayers and th e compr e ss e d 
contono l ayer, sect i on 26.5.1 on page 1 describes tho format of the tag data structures. 
8,1.2.3 — Bi lev e l data Gompr e esion 
15 Th e (typical l y 1600 dp i ) b l ack b i- l e ve l layor i s lossless l y compressed using Si l verbrook Mod i fied 
Group 4 (SMG 4 ) compr e ss i on which is a version of Group 4 Facsim ile compr e ss i on [22] without 
Huffman and w i th s i mplif i ed run l ength encod i ngs. Typical l y compr e ss i on rat i os oxcood 10:1. Th e 
e ncoding ar e list e d in Tab le 6 and Tab le 7. 

Tab l e 6. Bi Level group 4 facsimile sty l o compression encod i ngs 

20 





Encoding 


Description 


same as Group 4 










Pass Command: aO < — b2, skip next two edges 



* See section 8.1 .2.3 on page 36 4- for note regarding the use of this standard 
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Facsimi le 



Vort i ca l (O): aO < — b1, color " loo l or 



44© 



\/ortical(1 ): aO < b1 + 1 , color - 



Q^Q 



V e rticaK 1): aO < b1 — 1 , co l or - 



110000 



Vortical(2): aO < b1 + 2, co l or - 



010000 



V e rt i ca l ( 2): aO < b1 — 2, co l or - 



co l or 



co l or 



co l or 



color 



Uniqu e 



100000 



\/ e rt i ca l (3): aO < b1 ^ 3, color - ico l or 



implcmontat i on 



000000 



V e rt i cal( - 3): aO < b1 — 3, color - loolor 



:RL><RLMOO 



Hor i zontal: aO < aO * <RL> * <RL> 



SMG4 has a pass through modo to copo w i th l oca l nogatlvo comprossion. Paso through modo i o 
act i vat e d by a sp e cial run l e ngth oodo. Pass through mod e continu e s to e ith e r e nd of lin e or for a 
pro programmed numbor of b i ts, whiohovor io ohortor. The opocia l run longth codo is a l ways 
e xecuted as a run le ngth cod e , fol l ow e d by pass through. The pass through oscap e cod e is a 
med i um l e ngth run - l e ngth with a run of less than or oqual to 31. 
Tablo 7. Run longth (RL) encodings 



Encoding 



D e scr i ption 



Uniqu e — te — this 



RRRRR1 



Short B l ack Runl e ngth (5 b i ts) 



imp l omontation 



RRRRR1 



Short Wh i te Runlongth (5 b i ts) 



RRRRRRRRRR10 



M e d i um Black Runlength (10 bits) 



RRRRRRRR10 



M e dium Whit e Run l ongth (8 bits) 



RRRRRRRRRR10 



Med i um B l ack Run l ength w i th RRRRRRRRRR ' 
31 , Ent e r pass through 



RRRRRRRR10 



M e dium Wh i t e Runl e ngth w i th RRRRRRRR 



RRRRRRRRRRRRRRROO 



31 , Entor pass through 



Long Black Runl e ngth (15 bits) 



RRRRRRRRRRRRRRROO Long Wh i te Run l ongth (15 b i ts) 



Since tho compr e ssion is a b i tstr e am, th e e ncodings ar e r e ad r i ght (least significant bit) to l eft (most 
s i gn i ficant bit). Th e run l e ngths given as RRRR in Tablo — arc road i n tho samo way ( l oast 
10 signif i cant b i t at th e right to most s i gn i ficant b i t at tho l oft). 

Each band of b i le v e l data is opt i onally se l f contained. Tho first l ino of each band thoroforo is based 
on a 'prev i ous' blank l i ne or tho l ast l ino of tho previous band. 
8.1 .2.3.1 Group 3 and 4 facs i m ile comprossion 

Tho Group 3 Facsim i le oomprosoion algor i thm [22] l oss le ss l y comprossos b i lovo l data for 
15 transm i ssion ov e r slow and no i sy t ele phono l i nos. Tho b i lovol data r e pr e s e nts scann e d b l ack t e xt 
and graphics on a wh i te background, and tho a l gorithm i s tunod for this class of i mages ( i t i s 
e xp l ic i tly not tuned, for examp l e, for haiftonod b i l ovol images). Th e ID Group 3 algorithm 
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run l ongth e ncodoo oaoh Gcan li n e and th e n Huffman - e ncodes tho rosuit i ng a i n le ngths. Runlongths 
i n tho rango 0 to 63 ore cod e d with torminating oodos. Run l engths i n th e range to 2623 aro 
cod e d w i th mak e up codos, each roprosent i ng a multipl e of 6 4 , fo l lowed by a term i nating cod e . 
Runlongths excood i ng 2623 aro cod e d w i th mu l tipio mak e up cod e s fo l low e d by a terminat i ng codo. 
5 Tho Huffman tab l es aro fixed, but are s e parately tuned for black and wh i t e runs (oxcopt for mak e up 
codos abovo 1728, which arc common). Whon poss i ble, tho 2D Group 3 algorithm e ncodes a 
scanl i no as a s e t of short edg e d el tas (0, +1 . +2, +3) with referenc e to th e pr e vious scan ii no. The 
delta symbo l s ar e e ntropy encod e d (so that th e zero delta symbo l is on l y on e b i t l ong etc.) Edges 
w i thin a 2D encoded l in e wh i ch can't bo delta encoded ore runl e ngth encoded, and are i d e ntifi e d by 

10 a pr e fix. 1D and 2D oncodod lines are marked different l y. ID encoded l i n e s are g e n e rat e d at 

r e gular i nt e rvals, wheth e r actua ll y requir e d or not, to e nsure that tho d e cod e r can r e cov e r from line 
no i se with min i ma l image degradation. 2D Group 3 ach ie v e s compress i on ratios of up to 6:1 [32], 
Tho Group 4 Facsim ile algor i thm [22] l osslossly compr e ss e s b i l ev e l data for transm i ss i on ov e r 
error froo communicat i ons l i nos ( i . e . th e lin e s aro truly error free, or error correction is done at a 

15 low e r protocol lovol). Th e Group 4 algor i thm i s bas e d on th e 2D Group 3 algorithm, w i th th e 

e ssent i al modif i cation that since transm i ss i on is assumed to bo error froo, ID oncodod l i nos arp no 
l ong e r g e n e rat e d at regular intervals as an aid to e rror recov e ry. Group 4 achi e ves compression 
r atios ranging from 20:1 to 60:1 for th e CC I TT set of test images [32]. 
The design goa l s and performance of the Group A compr e ssion algor i thm qualify it as a 

20 compress i on algorithm for th e b i le v e l l ay e rs. How e v e r, its Huffman tab l es ar e tuned to a l ower 
scanning r e solut i on (100 400 dpi), and it encod e s run le ngths exceed i ng 2623 awkward l y. 
8.1.2.4 — Contone data compr e ssion 

Th e conton e lay e r (CMYK) i s e ither a non compress e d byt e stream or is compressed to an 
I ntor l oavod JPEG byt e str e am. Th e JPEG bytostream is comp le t e and self - conta i ned. I t contains al l 

25 data r e qu i r e d for docomprossion, i nclud i ng quant i zat i on and Huffman tab l es. 

Th e contono data is opt i onally convortod to YCrCb before being oomprossod (th e r e is no sp e cific 
advantage in co l or spac e conv e rting if not compr e ssing). Addit i onal l y, th e CMY contone pix e ls ar e 
opt i onally converted (on on individual bas i s) to RGB before color conv e rsion us i ng R-255 C, 
G"255 M, B-255 Y. Optiona l bitw i s e i nv e rsion of the K plan e may also be performed. Not e that th i s 

30 CMY to RGB conversion is not i ntend e d to be accurate for d i splay purposes, but rath e r for th e 
purposes of l at e r convert i ng to YCrCb. Th e inverse transform w ill bo applied befor e pr i nt i ng. 
8.1.2.^.1 JPEG compress i on 

Th e JPEG compr e ss i on algor i thm [27] l ossi l y compr e ss e s a contono i mago at a spooifiod qua l ity 
level. It i ntroduc e s imp e rc e ptib le i mag e d e gradat i on at compress i on rat i os b el ow 5:1, and n e g li gible 
35 i mago degradat i on at compr e ss i on ratios b el ow 10:1 [33]. 

JPEG typ i ca l ly first transforms tho imago i nto a co l or space which s e parat e s luminanc e and 
chrom i nanc e i nto separate color channe l s. Th i s a ll ows th e chrom i nance channels to be subsamp le d 
without appr e ciab le loss becaus e of the human visual system's re l at i ve l y gr e at e r s e ns i tiv i ty to 
l uminance than chrominance. Aftor this f i rst step, each color channel is compr e ssed separate l y. 
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Tho imago is dividod i nto 8x8 pixo l b l ocks. Each b l ock i s then transformod i nto tho fr e qu e ncy 
doma i n v i a a d i scret e cosin e transform (DCT). This transformat i on has the offoct of conc e ntrat i ng 
image energy i n rolativoiy l ower frequency co e ffic ie nts, which a ll ows h i gher frequency co e fficients 
to bo more crud e ly quantized. This quant i zat i on i s tho principa l sourc e of compr e ssion i n JPEG. 
5 Furth e r compress i on i s achi e v e d by ordering coeffici e nts by fr e quency to maxim i ze tho li kelihood of 
adjac e nt z e ro coefficients, and then run l ongth encod i ng runs of zoroos. F i nally, th e run lg ngths and 
non z e ro frequency coeffici e nts aro entropy cod e d. D e compress i on i s tho i nverse process of 
compr e ssion. 

8.1.2. 4 .2 Non com prossod format 

10 I f th e conton e data i s non - compr e ssed, i t must be i n a b l ock based format bytostr e am with tho 

samo pixol order as wou l d bo produced by a JPEG d e coder. The bytostr e am th e r e for e cons i sts of a 
scries of 8x8 b l ock of tho orig i na l image, starting w i th the top loft 8x8 block, and work i ng 
hor i zonta ll y across tho pago (as i t W\ \\ be print e d) until the top rightmost 8x8 block, then tho next 
row of 8x8 blocks (l e ft to r i ght) and so on until th e l ower row of 8x8 blocks ( l oft to right). Each 8x8 

15 b l ock consists of 6 4 8 bit pix e ls for color plan e 0 (r e pr e s e nting 8 rows of 8 pixe l s i n the ord e r top le ft 
to bottom right) follow e d by 64 8 bit pixels for co l or piano 1 and so on for up to a maximum of 4 
co l or p i anos. 

I f the origina l imag e i s not a multiple of 8 p i xels i n X or Y, padd i ng must bo present (the extra pixel 
data will be i gnor e d by th e s e tt i ng of margins). 

20 8.1.2. 4 .3 Compr e ssed format 

I f the contono data i s compr e ss e d the f i rst memory band contains JPEG h e aders ( i nclud i ng tabl e s) 
plus MCUs (min i mum cod e d un i ts). The ratio of spac e b e tw ee n th e various co l or plan e s i n th e 
JPEG str e am i s 1:1:1:1. No subsampling i s permitted. Band i ng can bo comp l otcly arbitrary i .o there 
can b e mu l tipl e JPEG Images por band or 1 JPEG i mago d i v i dod over mu l t i ple bands. The break 

25 between bands is on l y memory a li gnm e nt based. 
8.1.2.4.4 Conv e rs i on of RGB to YCrCb (in R I P) 

YCrCb i s d e fin e d as per CC I R 601 1 [2 4 ] e xcept that Y, Cr and Cb aro norma li zed to occupy a l l 256 
le v e ls of an 8 - bit b i nary encoding and take account of tho actua l hardware implementat i on of tho 
invers e transform with i n SoPEC. 
30 The exact color conv e rsion computat i on i s as fol l ows: 

Y* - (0805/32768)R + (10235/32768)6 + (3728/32768)B 

Cr* - (16375/32768)R (13716/32768)G (2650/32768)B + 128 

Cb*- (5520/32768)R (108 4 6/32768)G + (16375/32768)6 -H 28 

Y, Cr and Cb ar e obtained by rounding to th o near e st int e g e r. Th e r e i s no n ee d for saturation s i nc e 
35 ranges of Y*, Cr* and Cb* after rounding are [0 255], [1 - 255] and [1 255] respect i vely. Not e that full 
QCGuracy ie poceiblo with 2^ bite. See [1 4 ] for mor e i nformation. 
SoPEC ASIC 
0 Overview 

The Small Office Home Office Print Engine Controller (SoPEC) is a page rendering engine ASIC 
40 that takes compressed page images as input, and produces decompressed page images at up to 6 
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channels of bi-level dot data as output. The bi-level dot data is generated for the Memjet bi-lithic 
printhead. The dot generation process takes account of printhead construction, dead nozzles, and 
allows for fixative generation. 

A single SoPEC can control 2 bi-lithic printheads and up to 6 color channels at 10,000 lines/sec^ 
5 equating to 30 pages per minute. A single SoPEC can perform full-bleed printing of A3, A4 and 
Letter pages. The 6 channels of colored ink are the expected maximum In a consumer SOHO, or 
office Bi-lithic printing environment: 
CMY, for regular color printing. 

K, for black text, line graphics and gray-scale printing. 
10 • IR (infrared), for Netpage-enabled [5] applications. 

F (fixative), to enable printing at high speed. Because the bi-lithic printer is capable of printing 
so fast, a fixative may be required to enable the ink to dry before the page touches the page 
already printed. Otherwise the pages may bleed on each other. In low speed printing 
environments the fixative may not be required. 
1 5 SoPEC is color space agnostic. Although it can accept contone data as CMYX or RGBX, where X is 
an optional 4th channel, it also can accept contone data in any print color space. Additionally, 
SoPEC provides a mechanism for arbitrary mapping of input channels to output channels, Including 
combining dots for ink optimization, generation of channels based on any number of other channels 
etc. However, inputs are typically CMYK for contone input, K for the bi-level input, and the optional 
20 Netpage tag dots are typically rendered to an infra-red layer. A fixative channel is typically 
generated for fast printing applications. 

SoPEC is resolution agnostic. It merely provides a mapping between input resolutions and output 
resolutions by means of scale factors. The expected output resolution is 1600 dpi, but SoPEC 
actually has no knowledge of the physical resolution of the Bi-lithic printhead. 

25 SoPEC is page-length agnostic. Successive pages are typically split into bands and downloaded 
into the page store as each band of information is consumed and becomes free. 
SoPEC provides an interface for synchronization with other SoPECs. This allows simple multi- 
SoPEC solutions for simultaneous A3/A4/Letter duplex printing. However, SoPEC is also capable of 
printing only a portion of a page image. Combining synchronization functionality with partial page 

30 rendering allows multiple SoPECs to be readily combined for alternative printing requirements 
including simultaneous duplex printing and wide format printing. 

Table 8 lists some of the features and corr e spond i ng benefits of SoPEC. 
Tabl e 8. F e atur e s and B e n e fits of SoPEC 



Feature 




Optimised print arohitecturo in 
hardware 


30ppm full page photographic quality color printing from a 
desktop PC 



^10,000 lines per second equates to 30 A4/Letter pages per minute at 1600 dpi 
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0.13micron CMOS 
y'*o million irgnoisiorsj 


High spood 

LOW OOSl 

High functionality 










1 chip drives up to 1 33,920 


Low cost page-width printers 


1 chip drives up to 6 color planes 


99% of SoHo printers can uqo 1 SoPEC dovico 






Power saving sleep mode 


SoPEC can enter a power saving sloop mode to reduce 
power dissipation between print jobs 




jKEivj expansion 


LOW uanQWiQin rrom 

Low memory roquiremonts in printer 




Lossless bitplano expansion 


High resolution text and line art with low bandwidth from PC 
(e.g. over USB) 










Stochastic disporsod dot dither 


Optically smooth image quality 


Hardwaro compositor for 6 Imago 


Pages compositod in roal time 


planes 




Dead nozzio compensation 


Extends printhead life and yield 
rxeouces-prinineaQ gosi 


Color space agnostic 


Compatible with all inksets and image sourcos including 


KvjD, OMYix, spot, oic L a D , noxaonromo, YorL>Di\, 

'^RrnR nnH nthnr 












Cascadable in resolution 


Printers of any resolution 






Cascadable in image size 


Pnnters of any width up to 16 inches 






Cascadable in speed 


Higher speeds are possible by having each SoPEC print ono 
vertical strip of the page- 


Fixative channel data generation 


Extremely fast ink drying without wastage 


Built in socurity 


Rovonuo models aro protected 






Undercolor removal on dot by dot 
basis 


Reduced ink usage 
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uoes noi require ToriLS Tor niyn 
Dpood oporation 


iHO TOffii supsitiunon or rnissirig lOmo 


Flexible printhead configuration 






Many configurations of printheads aro supported by ono chip 


Drives Bi lithio printheads diroctly 


No print driver chips required, results in lower cost 


Dotorminos dot ooourato ink usago 


Removes need for physical ink monitoring system in ink 
cartridges 



&tA — Printing rates 

The required printing rate for SoPEC is 30 sheets per minute with an inter-sheet spacing of 4 cm. 
To achieve a 30 sheets per minute print rate, this requires: 
5 300mm x 63 (dot/mm) / 2 sec = 105.8 ^seconds per line, with no inter-sheet gap. 

340mm x 63 (dot/mm) / 2 sec = 93.3 iiseconds per line, with a 4 cm inter-sheet gap. 
A Printline for an A4 page consists of 13824 nozzles across the page [2]. At a system clock rate of 
160 MHz 13824 dots of data can be generated in 86.4 fxseconds. Therefore data can be generated 
fast enough to meet the printing speed requirement. It is necessary to deliver this print data to the 
10 print-heads. 

Printheads can be made up of 5:5, 6:4, 7:3 and 8:2 inch printhead combinations [2]. Print data is 
transferred to both print heads in a pair simultaneously. This means the longest time to print a line is 
determined by the time to transfer print data to the longest print segment. There are 9744 nozzles 
across a 7 inch printhead. The print data is transferred to the printhead at a rate of 106 MHz (2/3 of 
1 5 the system clock rate) per color plane. This means that it will take 91 .9 (is to transfer a single line 
for a 7:3 printhead configuration. So we can meet the requirement of 30 sheets per minute printing 
with a 4 cm gap with a 7:3 printhead combination. There are 1 1 160 across an 8 inch printhead. To 
transfer the data to the printhead at 106 MHz will take 105.3 jus. So an 8:2 printhead combination 
printing with an inter-sheet gap will print slower than 30 sheets per minute. 

20 SoPEC BASIC ARCHITECTURE 

From the highest point of view the SoPEC device consists of 3 distinct subsystems 
CPU Subsystem 
DRAM Subsystem 

Print Engine Pipeline (PEP) Subsystem 
25 See Figure 1 3 for a block level diagram of SoPEC. 

Or^rl CPU Subsystem 

The CPU subsystem controls and configures all aspects of the other subsystems. It provides general 
support for interfacing and synchronising the external printer with the internal print engine. It also 
controls the low speed communication to the QA chips. The CPU subsystem contains various 
30 peripherals to aid the CPU, such as GPIO (includes motor control), interrupt controller, LSS Master 
and general timers. The Serial Communications Block (SCB) on the CPU subsystem provides a full 
speed USB1 .1 interface to the host as well as an Inter SoPEC Interface (ISI) to other SoPEC devices. 
DRAM Subsystem 
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The DRAM subsystem accepts requests from the CPU, Serial Communications Block (SCB) and 
blocks within the PEP subsystem. The DRAM subsystem (in particular the DIU) arbitrates tlie 
various requests and determines which request should win access to the DRAM. The DIU arbitrates 
based on configured parameters, to allow sufficient access to DRAM for all requestors. The DIU 
5 also hides the implementation specifics of the DRAM such as page size, number of banks, refresh 
rates etc. 

9t2t3 Print Engine Pipeline (PEP) subsystem 

The Print Engine Pipeline (PEP) subsystem accepts compressed pages from DRAM and renders 
them to bl-level dots for a given print line destined for a printhead interface that communicates 

1 0 directly with up to 2 segments of a bi-lithic printhead. 

The first stage of the page expansion pipeline is the CDU, LED and TE. The CDU expands the 
JPEG-compressed contone (typically CMYK) layer, the LBD expands the compressed bl-level layer 
(typically K), and the TE encodes Netpage tags for later rendering (typically in IR or K ink). The 
output from the first stage is a set of buffers: the CPU, SFU, and TFU. The CPU and SFU buffers 

1 5 are Implemented in DRAM. 

The second stage is the HCU, which dithers the contone layer, and composites position tags and 
the bi-level spotO layer over the resulting bi-level dithered layer. A number of options exist for the 
way In which compositing occurs. Up to 6 channels of bi-level data are produced from this stage. 
Note that not all 6 channels may be present on the printhead. For example, the printhead may be 

20 CMY only, with K pushed into the CMY channels and IR ignored. Alternatively, the position tags 
may be printed in K if IR ink is not available (or for testing purposes). 

The third stage (DNC) compensates for dead nozzles in the printhead by color redundancy and 
error diffusing dead nozzle data into surrounding dots. 

The resultant bi-level 6 channel dot-data (typically CMYK-IRF) is buffered and written out to a set of 
25 line buffers stored in DRAM via the DWU. 

Finally, the dot-data is loaded back from DRAM, and passed to the printhead interface via a dot 
FIFO. The dot FIFO accepts data from the LLU at the system clock rate (pc//c), while the PHI 
removes data from the FIFO and sends it to the printhead at a rate of 2/3 times the system clock 
rat e (s o o Sect i on 0.1) . 

30 

— SoPEC Block Description 

Looking at Figure 13, the various units are described here in summary form: 
Tabie- 9Table 3 . Units within SoPEC 



Subsystem 


Unit 

Acronym 


Unit Name 


Description 


DRAM 


DIU 


DRAM interface unit 


Provides the interface for DRAM read and write 
access for the various SoPEC units, CPU and 
the SCB block. The DIU provides arbitration 
between competing units controls DRAM 
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access. 






Embedded DRAM 


20Mbits of embedded DRAM, 


CPU 


CPU 


Central Processing 
Unit 


CPU for system configuration and control 




MMU 


Memory Management 
Unit 


Limits access to certain memory address areas 
in CPU user mode 


RDU 


Real-time Debug Unit 


Facilitates the observation of the contents of 
most of the CPU addressable registers in 
SoPEC in addition to some pseudo-registers in 
realtime. 


TIM 


General Timer 


Contains watchdog and general system timers 


LSS 


Low Speed Serial 
Interfaces 


Low level controller for interfacing with the QA 
chips 


GPIO 


General Purpose lOs 


General lO controller, with built-in Motor control 
unit, LED pulse units and de-glitch circuitry 


ROIVI 


Boot ROM 


16 KBytes of System Boot ROM code 


ICU 


Interrupt Controller 
Unit 


General Purpose interrupt controller with 
configurable priority, and masking. 


CPR 


Clock. Power and 
Reset block 


Central Unit for controlling and generating the 
system clocks and resets and powerdown 
mechanisms 


PSS 


Power Save Storage 


Storage retained while system is powered down 


USB 


Universal Serial Bus 
Device 


USB device controller for interfacing with the 
host USB. 


ISI 


Inter-SoPEC Interface 


ISI controller for data and control 
communication with other SoPEC's in a multi- 
SoPEC system 


SCB 


Serial Communication 
Block 


Contains both the USB and ISI blocks. 


Print Engine 

Pipeline 

(PEP) 


PCU 


PEP controller 


Provides external CPU with the meanis to read 
and v^ite PEP Unit registers, and read and 

write DRAM in single 32-bit chunks. 




CDU 


Contone decoder unit 


Expands JPEG compressed contone layer and 
writes decompressed contone to DRAM 


CPU 


Contone FIFO Unit 


Provides line buffering between CDU and HCU 


LBD 


Lossless Bi-level 
Decoder 


Expands compressed bi-level layer. 


SFU 


Spot FIFO Unit 


Provides line buffering between LBD and HCU 


TE 


Tag encoder 


Encodes tag data into line of tag dots. 
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TFU 


Tag FIFO Unit 


Provides tag data storage between TE and 
HCU 


HCU 


Halftoner compositor 
unit 


Dithers contone layer and composites the bi- 
level spot 0 and position tag dots. 


DNC 


Dead Nozzle 
Compensator 


Compensates for dead nozzles by color 
redundancy and error diffusing dead nozzle 
data into surrounding dots. 


DWU 


Dotline Writer Unit 


Writes out the 6 channels of dot data for a 
given Printline to the line store DRAM 


LLU 


Line Loader Unit 


Reads the expanded page image from line 
store, formatting the data appropriately for the 
bi-lithic printhead. 


PHI 


PrintHead Interface 


Is responsible for sending dot data to the bi- 
lithic printheads and for providing line 
synchronization between multiple SoPECs. 
Also provides test interface to printhead such 
as temperature monitoring and Dead Nozzle 
Identification. 



8t4 — Address i ng sc h eme in SoPEC 
SoPEC must address 

20 Mbit DRAM. 

* PCU addr e ssed r e g i st e rs i n PEP. 

* CPU - subsyst e m addressed regist e rs. 



SoPEC has a unif i ed address space with the CPU capab l e of addressing o il CPU subsyst e m and 
PCU bus acc e ss i bl e r e g i sters (in PEP) and a ll l ocations i n DRAM. The CPU generat e s byt e al i gn e d 
addresses for tho who l e of SoPEC. 
10 22 bits are suff i ci e nt to byte address tho who le SoPEC address space. 
9z4A DRAM addressing sohomo 

Tho omboddod DRAM i s composed of 256 bit words. However tho CPU subsyst e m may n ee d to 
writ e i nd i vidual byt e s of DRAM. Therefore it was docidod to mako tho DtU byto addressabl e . 22 b i ts 
ar e r e qu i r e d to byte address 20 Mb i ts of DRAM. 
15 Most blocks road or wr i t e 256 - b i t words of DRAM. Thoroforo only th e top 1 7 bits i. e . bits 21 to 5 are 
requ i red to address 256 - b i t word a li gn e d l ocations. 
Tho except i ons are 

' CDU which can wr i t e 6 4 b i ts so on l y the top 19 address b i ts i.e. b i ts 21 3 are roqu i rod. 

* Th e CPU - subsyst e m a l ways generates a 22 - b i t byt e aligned DIU address but i t will s e nd 

20 f l ags to tho DIU indicating whether i t i s an 8, 16 or 32 bit write. 
A l l DIU accossos must be w i th i n th e same 256 b i t a l ign e d DRAM word. 
PEP Un i t DRAM addressing 
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PEP Unit conf i gurat i on rogistors which spoo i fy DRAM iocat i ons should opocify 256 b i t al i gn e d 
DRAM addresses i.o. uo i ng addross bits 21:5. Legacy blocks from PEC1 e.g. tho LBD and TE may 
n ee d to spec i fy 6 4 b i t alignod DRAM addr e ss e s if these r e used blocks DRAM address i ng is d i fficult 
to modify. Those 64 bit a l ignod addr e ss e s r e qu i r e addross bits 21 :3. Howev e r, thoso 64 b i t al i gn e d 
5 a ddr e ss e s shou l d b e programm e d to start at a 256 bit DRAM word boundary. 

Un l ike PEC1 , there ar e no constra i nts in SoPEC on data organ i zat i on i n DRAM except that a ll data 
structur e s must start on a 256 bit DRAM boundary. I f data storod i s not a multip l e of 256 bits then 
th e last word shou l d be padded. 
0t4t3 CPU subsystem bus addrosG o d rogistors 

10 Th e CPU subsyst e m bus supports 32 b i t word a li gn e d r e ad and write access e s with var i able acc e ss 
timings. Soo sect i on 11.4 for mor e d e tails of th e access protocol used on this bus. Th e CPU 
subsyst e m bus does not curr e ntly support byte r e ads and wr i tes but this can b e added at a later 
dato if required by i mported IP. 
Ot474 PCU addressed regist e rs i n PEP 

15 Tho PCU only supports 32 bit register roads and writes for th e PEP b l ocks. As the PEP b l ocks only 
occupy a subs e ct i on of the overa ll addr e ss map and th e PCU i s exp l icitly so l octod by th e MMU 
when a PEP b l ock i s b e ing access e d th e PCU does not n ee d to p e rform a decod e of th e high e r - 
ord e r addr e ss bits. Soo Tabio 1 1 for the PEP subsyst e m addr e ss map. 
9t5 — SoPEC Memory Map 

20 Main memory map 

Th e syst e m wide memory map is shown in F i gur e 1 A below. Tho memory map is discuss e d i n detai l 
in S e ction 1 1 1 1 Central Processing Unit (CPU). 
9.5.2 CPU bus p e ripherals addr e ss map 

Th e addr e ss mapping for tho per i phera l s attached to tho CPU bus is shown i n Tabl e 10 below. Th e 
25 MMU p e rforms th e d e code of cpu_adr[21:1 2] to gonerato tho r ele vant cpu_biock_6 e f e ct signal for 
each b l ock. Tho address e d b l ocks decode however many of tho lower order b i ts of cpu_Qdr[1 1 :2] 
ar e required to address a ll tho rogistors with i n the block. 
Table 10. CPU bus p e r i ph e ra l s address map 



B l ock base 



Addr e ss 



ROM base 



0x0000 0000 



MMU base 



0x0001 0000 



T I M baso 



0x0001 1000 



LSS baso 



0x0001 2000 



GP I O baso 



0x0001 3000 



SCB baso 



0x0001 ^000 



I CU baso 



0x0001 6000 



CPR baso 



0x0001 6000 



D I U base 



0x0001 7000 
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PSS_base 


0x0001 8000 






Reserved 






0x0001,0000 to 0x0001 _FFFF 




0x0002,0000 to 0x0002_BFFF 


PCU_base 





0.5.3 PCU Mappod Rogistors (PEP blocks) addross map 

Th e PEP b l ock s aro addr e ss e d via the PCU. From F i gur e 1 4 , th e PCU mapp e d r e g i st e rs ar e i n tho 
range 0x0002_0000 to 0x0Q02_BFFF. From Tab le 1 1 i t can b e s ee n that thor e ar e 1 2 sub - blocks 
within th e PCU addr e ss spac e . Th e r e for e , on l y four b i ts ar e n e c e ssary to addross oach of tho sub 
5 blocks within tho PEP part of SoPEC. A further 12 b i ts may bo used to addross any configurabl e 
rogictor within a PEP block. This giv e s scope for 102^ configuroblo rogistors per sub b l ock (tho 
PCU mapp e d r e gist e rs ar e a ll 32 - bit addr e ss e d r e gist e rs so th e upp e r 10 b i ts aro roquirod to 
i nd i vidua ll y addr e ss th e m). This addr e ss wi l l com e ei th e r from th e CPU or from a command stored 
in DRAM. Tho bus is ass e mbl e d as fol l ows: 
10 ^ — address[15:12] - sub - b l ock addr e ss, 

' addr e ss[n:2] ~ r e gist e r addr e ss within sub block, on l y th e number of b i ts roquirod to docodo 

tho rogistors with i n e ach sub block ar e us e d, 
* addross[1:0] ~ byte addross, unused as PCU mappod rog i stors aro al l 32 bit addressed 

r e g i st e rs. 

15 So for tho case of tho HCU, its addr e sses range from 0x7000 to 0x7FFF w i th i n the PEP subsystem 
or from 0x0002_7000 to 0x0Q02_7FFF i n th e ov e rall syst e m. 
Tab l e 1 1 . PEP blocks address map 



SFU bas e 



Block bas e 



PCU bas e 



CDU base 



CFU bas e 



LBD bas e 



TE bas e 



TFU bas e 



HCU base 



DNC base 



DWU base 



LLU bas e 



PH I base 



Address 



0x0002 0000 



0x0002 1000 



0x0002 2000 



0x0002 3000 



0x0002 ^000 



0x0002 5000 



0x0002 6000 



0x0002 7000 



0x0002 8000 



0x0002 0000 



0x0002 AOOO 



0x0002 BOOO to 0x0002 BFFF 



Ot6 — Buffer management i n SoPEC 
20 As outl i ned in S e ct i on 9.1, SoPEC has a requirement to pr i nt 1 s i de ev e ry 2 seconds i . e . 30 sid e s 
p e r m i nut e . 

Pag e buff e r i ng 
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Approx i mat e ly 2 Mbyt e s of DRAM are resorvod for comprossod page buffering i n SoPEC. I f a pago 
i s comproGSod to f i t with i n 2 Mbyto then a comploto page can bo tranof e rred to DRAM before 
pr i nt i ng. However, the t i m e to transfer 2 Mbyte us i ng USB 1 .1 i s approximate l y 2 s e conds. Th e 
worst cas e cycle timo to print a pago then approach e s 4 seconds. Th i s r e duces tho worst - cas e pr i nt 
5 sp ee d to 15 pages per m i nute. 
Sr&a Band buff e ring 

Th e SoPEC pago oxpanslon blocks support tho notion of page band i ng. Tho pago can be divided 
i nto bands and anoth e r band can bo sent down to SoPEC whi l e wo ar o pr i nt i ng tho current band- 
Th e r e for e we can start pr i nt i ng onco at loast ono band has boon downloadod. 

10 Th e band s i z e granu l ar i ty shou l d b e car e fully chosen to al l ow e ffic i ent us o of th e USB bandw i dth 
and DRAM buff e r space. I t shou l d b e sma ll e nough to a ll ow seamless 30 s i d e s p e r m i nute printing 
but not so smal l as to introduce e xcessiv e CPU overh e ad i n orchostrat i ng th e data transf e r and 
pars i ng tho band headers. Band f i nish int e rrupts have boon provided to notify th e CPU of free buffer 
spac e . It is l i k el y that tho host PC wi ll sup e rv i se th e band transf e r and buff e r manag e m e nt i nst e ad 

15 of tho SoPEC CPU. 

I f SoPEC starts pr i nt i ng b e for e the compl e t e pag e has boon transf e rred to momory*thoro is a r i sk of 
a buffer und e rrun occurring if subs e quent bands ar e not transf e rred to SoPEC in t i m e e .g. duo to 
insufficiont USB bandwidth caused by another USB porlphoral consuming USB bandw i dth. A buff e r 
und e rrun occurs i f a l i n e synchronisat i on pulso is roooivod boforo o li ne of data has been 

20 transferred to th e pr i nth e ad and causes th e print job to fa i l at that l ino, if thoro is no risk of buff e r 
undorrun th e n pr i nt i ng can saf e ly start onc e at l east ono band has boon downloadod. 
If th e r e i s a risk of a buffer undorrun occurr i ng duo to an i nterruption of compressed page data 
transf e r, th e n th e saf e st approach i s to on l y start print i ng onc e w e hav e loaded up th e data for a 
comploto pago. This moans that a worst case latency in tho reg i on of 2 ooconds (w i th USB1 .1 ) w i l l 

25 b e i ncurr e d b e for e pr i nt i ng tho f i rst pag e . Subs e qu e nt pages w ill tak e 2 seconds to print g i ving us 
tho requ i red sustained pr i nting rato of 30 sides per minute. 

A Storage SoPEC (S e ct i on 7.2.5) could b e add e d to the syst e m to provide guaranteed bandw i dth 
data delivery. Th e print system could also bo constructed using an I S I Br i dge chip (Sect i on 7.2.6) to 
provid e guarant e ed data dolivory. 
30 Tho most off i c i ont pago band i ng strategy i s li ko l y to bo d e t e rm i ned on a por pago/ pr i nt job bas i s 
and so SoPEC wi l l support tho us e of bands of any s i ze. 

40 SoPEC Use Cases 

4O74 Introduction 

This chapter i s i ntended to givo an overv ie w of a roprosontativo sot of scenarios or us e cas e s which 
35 SoPEC can perform. SoPEC i s by no moans restr i cted to tho part i cu l ar uso cases described and 

not e v e ry SoPEC syst e m is cons i dered here. 

I n this chapt e r w e discuss SoPEC uso cases under four head i ngs: 

4^ Norma l op e ration use cas e s. 

2) Security us e cas e s. 

40 3) M i scellan e ous us e cas e s. 
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4) Fai l ur e mod e use oosos. 

U se cas e s for both sing le and mu l t i- SoPEC systems aro outlinod. 
Som e tasks may bo compos e d of a numb e r of sub - tasks. 

Th e r e a l tim e r e quirements for SoPEC software tasks are discussed i n " 1 1 Control Process i ng Unit 
5 (CPU)" und e r S e ct i on 1 1.3 R e a l t i m e r e qu i r e m e nts. 

1 0.2 Normal operat i on i n a s ingle SoPEC Sy s tem wit h USB Host connect i on 
SoPEC operat i on is broken up into a number of soctions wh i ch aro out li nod bolow. Buffer 
manag e m e nt In a SoPEC system is normal l y performed by the host. 
10.2.1 Pow e rup 

10 Pow e rup describos SoPEC In i t i al i sat i on fo l lowing an oxterna l rosot or th e watchdog timor system 
rcoct 

A typ i cal powerup sequ e nc e is: 

4^ Ex e cut e r e set sequenc e for comp le t e SoPEC. 

2) CPU boot from ROM. 

15 3) Bas i c configuration of CPU p e riphera l s, SCB and D I U. DRAM i nitial i sation. USB Wakoup. 

4) Down l oad and authenticat i on of program (see Section 10.5.2). 

Ex e cut i on of program from DRAM. 

€) Rotriovo op e rat i ng param e t e rs from PRINTER_QA and authent i cat e op e rating paramotors. 

7) Down l oad and auth e nt i cat e any further datas e ts. 

20 40^2^2 USB wakoup 

The CPU can put d i ffer e nt s e ct i ons of SoPEC i nto sloop mod e by wr i t i ng to registers in tho CPR 

block (chapter 16). Normally th e CPU sub system and th e DRAM wil l b e put i n sleep mode but the 

SCB and power safe storage (PSS) wi ll sti l l be enabled. 

Wak e up d e scr i b e s SoPEC recov e ry from s lee p mode w i th tho SCB and pow e r saf e storag e (PSS) 
25 still enab l ed. I n a s i ng l e SoPEC system, wakeup can b e i nitiat e d fo l low i ng a USB rosot from th e 
SGBt 

A typica l USB wakeup s e qu e nce is: 

4-) Exocuto rosot Goquonco for soct i ons of SoPEC in s l oop modo. 

2) CPU boot from ROM, if CPU subsyst e m was i n s lee p mode. 

30 2) Basic configuration of CPU por i phora l s and DIU, and DRAM i n i t i a li sation, i f r e quir e d. 

4) Download and auth e ntication of program using resu l ts in Power Safo Storage (PSS) (soo 

Sect i on 10.5.2). 

5) Execut i on of program from DRAM. 

6) R e tri e v e op e rating parameters from PRINTER_QA and authenticate operating param e ters. 

35 7) Downlo a d and auth e nticat e us i ng resu l ts i n PSS of any furth e r datas e ts (programs). 

10.2.3 Print i nitialization 

Th i s sequence is typica ll y perform e d at the start of a pr i nt job fo ll ow i ng pow e rup or wakeup: 
4^ Check amount of i nk remain i ng v i a QA chips. 

2) Down l oad stat i c data e.g. dither matr i c e s, d e ad nozzle tab le s from host to DRAM. 
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3) Chock pr i nth e ad temperature, if roqu i rod, and conf i gure pr i nthoad w i th f i r i ng pulse prof i le e to. 

according l y. 

4) I n i tiate pr i nthoad pre heat coquence, i f requ i red. 

10.2.4 First page down l oad 

5 Buffer managomont in a SoPEC oystom i o norma l ly performed by tho host. 
First page, f i rst band down l oad and processing: 

4^ Th e host communicat e s to the SoPEC CPU over the USB to ch e ck that DRAM spac e 

r e ma i n i ng is suffic ie nt to down l oad the first band. 

2) Th e host down l oads th e first band (w i th tho page header) to DRAM. 

10 3) Wh e n th e complete page head e r has b ee n download e d th e SoPEC CPU proc e sses tho page 

header, ca l culates PEP reg i ster commands and writes direct l y to PEP registers or to DRAM. 

4) If PEP regist e r commands hav e be e n writt e n to DRAM, execut e PEP commands 

from DRAM v i a PCU. 

R e maining bands download and proc e ss i ng: 
15 4^ Check DRAM space rema i ning i s suffici e nt to down l oad th e n e xt band. 

2) Down l oad tho next band w i th th e band header to DRAM. 

3) Wh e n tho complete band h e ad e r has been download e d, proc e ss th e band h e ad e r according 

to which e ver band r el at e d register updat i ng m e chan i sm is being used. 

10.2.5 Start printing 

20 4^ Wa i t unt i l at l e ast on e band of tho f i rst pag e has boon down l oad e d. 

On e approach is to only start pr i nting onc e w e hav e l oaded up the data for a c omp l ete page. 
If w e start pr i nt i ng before tho compiete page has been transf e rr e d to memory we run th e risk 
of a buff e r und e rrun occurring because compressed pag e data was not transferred to SoPEC 
in tim e e .g. due to i nsufficient USB bandwidth caus e d by anoth e r USB per i ph e ral consuming 

25 USB bandw i dth. 

2) Start a l l th e PEP Units by wr i t i ng to th e ir Go r e g i st e rs, via PCU commands executed from 

DRAM or direct CPU writ e s. A rapid startup order for th e PEP un i ts i s outl i n e d in Tab le 12. 
Table 1 2. Typ i ca l PEP Unit startup order for pr i nting a page. 



Step# 


Unit 


4- 




2 




3 


HGU 


4 


PHI 


§ 


y=y 


@ 


CFU, SFU, TFU 


7 




8 


TE. LBD 



30 

3) Pr i nt ready i nt e rrupt occurs (from PH I ). 
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4) Start motor control, if first pago, othorwiso food tho noxt pago. Thio Gtep cou l d occur boforo 

tho print ready int e rrupt. 
§) Driv e LEDo, monitor papor ctatus. 

6) Wait for pago alignment via pago sensor(s) GP I O i nterrupt. 

5 7) CPU I nstructs PHI to start producing li no syncs and honco comm e nce pr i nt i ng, or wa i t for an 

e xt e rna l d e vice to produce lino syncs. 

Continu e to down l oad bands and process pago and band h e ad e rs for n e xt pag e . 

10.2.6 Noxt pago(s) download 

As for first page download, performed during pr i nting of current page. 

10 10.2.7 Between bands 

When the finished band flags aro assorted band re l ated reg i sters i n the CDU, LBD. TE need to bo 
r e- programm e d b e for e th e subs e quent band can b e pr i nt e d. This can be v i a PCU commands from 
DRAM. Typ i ca ll y on l y 3 - 5 commands p e r d e compr e ssion unit n ee d to b e executed. Those r e gist e rs 
can a l so b e r e programm e d d i r e ct l y by th e CPU or most li k e ly by updat i ng from shadow r e g i st e rs. 

15 The fin i sh e d band flag int e rrupts th e CPU to t ell th e CPU that th e area of memory associat e d w i th 
th e band is now free. 

10.2.8 Dur i ng page pr i nt 

T ypi c a ll y d u ring page printing i nk usag e is communicat e d to th e OA ch i ps. 

4^ Calcu l at e i nk pr i nt e d (from PH I ). 

20 2) D e cr e m e nt I nk r e maining (via QA ch i ps). 

3) Ch e ck amount of ink r e maining (v i a QA chips). Th i s operat i on may b e b e tter p e rform e d whi le 

the page is be i ng pr i nt e d rath e r than at th e e nd of th e page. 

10.2.9 Pag e fin i sh 

These operat i ons ar e typ i cally p e rform e d wh e n th e pag e is fin i sh e d: 
25 4^ Page finished interrupt occurs from PHI. 

2) Shutdown th e PEP b l ocks by d e- ass e rting th e ir Go r e g i sters. A typ i ca l shutdown ord e r i s 

defined in Table 13. This will sot the PEP Unit stat e- machines to their idle states without 
resetting their configurat i on reg i sters. 

3) Communicat e i nk usag e to QA chips, i f r e qu i red. 

30 Table 13. End of page shutdown order for PEP Units. 



Step# 






PHI (will shutdown by itself in the normal case at tho end of a page) 


2 


DWU (shutting this down stalls the DNC and therefore the HCU and 
above) 


3 


LLU (should already be halted duo to PHI at end of last line of pago) 


4 


TE (this Is the only dot supplier likely to bo running, halted by tho 


5 


CDU (this is likely to already be halted due to end of oontone band) 
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g 


CFU, SFU, TFU, LBD (order unimportant, and should airoady bo 
haltod duo to ond of band) 


7 


HCU, DNC (order unimportant, should airoady have halted) 



10.2.10 — Start of next page 

Those op e rations ar e typical l y p e rformed before pr i nt i ng the n e xt pag e : 

4^ — R e program the PEP Units v i a PCU command proc e ssing from DRAM based on page header. 
2) — Go to Start print i ng. 
5 10.2.11 — End of docum e nt 

4") Stop motor control. 

10.2.12 — Sloop mode 

Th e CPU can put d i ff e r e nt s e ct i ons of SoPEC i nto s l e e p mod e by writ i ng to regist e rs in tho CPR 
block describ e d i n S e ction 16. 
10 4^ I nstruct host PC via USB that SoPEC I s about to s l oop. 

2) Stor e r e usabl e auth e nticat i on resu l ts in Pow e r - Saf e Storag e (PSS). 

3) Put SoPEC into d e fin e d sle e p mode. 

4^73 Normal operat i on in a Mult i SoPEC Sy s tem ISIMaster SoPEC 

I n a mu l ti SoPEC syst e m th e host genera l ly manages program and compr e ss e d page down l oad to 

15 a ll th e SoPECs. I ntor-SoPEC communicat i on i s over tho ISI link which w i ll add a latency. 

In th e case of a multi SoPEC syst e m with just ono USB 1.1 conn e ction, th e SoPEC w i th the USB 
connect i on i s tho I S I Mast e r. Th e I S I bridge ch i p is th o IS I Mast e r in th e cas e of an IS I Bridge SoPEC 
configurat i on. While it is porfoctly possib l e for an I S I S I av o to havo a d i rect USB conn e ction to th e 
host w e do not treat th i s scenar i o oxpiic i t l y hero to avoid poss i ble confusion. 

20 I n a multi SoPEC syst e m on e of th e SoPECs w i ll bo th e Pr i ntMast e r. This SoPEC must manag e 
and control s e nsors and actuators e.g. motor control. Th e s e s e nsors and actuators could bo 
distr i buted ov e r a l l th e SoPECs in th e system. An I S I Master SoPEC may a l so b e the PrintMast e r 
SoPEC. 

I n a mu l ti SoPEC system e ach pr i nt i ng SoPEC w ill g e nerally hav e i ts own PRINTER_QA ch i p (or at 
25 le ast acc e ss to a PR I NTER_QA chip that contains th e SoPECs SOPEC Jd_k e y) to validate 

op e rating parameters and i nk usage. Tho rosulto of thoso operations may be commun i cated to tho 
Pr i ntMast e r SoPEC. 

In general tho ISIMast e r may ne e d to b e ab l e to: 
— Send mooaagco to the ISIClavoo which will oauoo the ISIClavoo to ocnd 

30 their otatuo to the ISIMaotcr. 

-* — InotruGt the ISISlavca to perform ocrtain oporationa. 

As th e IS I is an i nsecur e int e rface commands issu e d over tho IS I are r e garded as ueor mode 
commands. Sup e rvisor mod e codo running on th e SoPEC CPUs wil l al l ow or disa ll ow these 
commands. Tho software protoco l n ee ds to bo constructed with this in m i nd. 

35 Th e I S I Master w i ll i n i t i ate a ll commun i cation with th e ISISIavos. 

SoPEC operation is brok e n up into a number of s e ctions wh i ch aro out l in e d be l ow. 
10.3.1 Pow e rup 
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Poworup doscr i b e s SoPEC init i a l isation following an e xt e rna l resot or tho watchdog t i mor syst e m 
reset 

4^ Exoouto rosot soquonoo for oomploto SoPEC. 

2) CPU boot from ROM. 

5 3) Bas i c configurat i on of CPU p e ripherals, SCB and D I U. DRAM i nit i alisat i on USB Wak e up 

4) SoPEC identification by act i v i ty on USB ond points 2 A I ndicatos it is tho I S I Mastor (un l ess 

tho SoPEC CPU has oxpl i c i tly disab l ed th i s funct i on), 

§) Down l oad and auth e nt i cation of program (soe Section 10.5.3). 

§) Execut i on of program from DRAM. 

10 7) R e tr ie v e op e rating param e t e rs from PR I NTER_QA and auth e nt i cate operating paramotors. 

5) Download and auth e nt i cate any further datas e ts (programs). 

8) Th e in i tia l dataeot may b e broadcast to all the I S I S I aves. 

40) — I S I Mast e r master SoPEC then wa i ts for a short t i m e to al l ow tho auth e nt i cation to take plac e 
en tho IS I SIavo SoPECs. 

15 44^ — Each IS I SIav e SoPEC i s poll e d for th e result of its program cod e auth e nticat i on proc e ss. 

42) — I f a ll I S I SIaves report successfu l auth e nticat i on th e OEM cod e module can be d i str i but e d and 
authenticated. OEM code wi ll most l ik e ly r e sid e on on e SoPEC. 

10.3.2 USB wak e up 

Tho CPU can put different sect i ons of SoPEC i nto sloop mode by wr i t i ng to reg i sters in the CPR 
20 block [16], Norma l ly th e CPU sub system and tho DRAM wil l bo put i n s l eep modo but the SCB and 
power safe storage (PSS) will st i ll be enabled. 

Wak e up d e scr i b e s SoPEC r e cov e ry from sl ee p mod e w i th tho SCB and power safe storage (PSS) 
sti ll e nab le d. For an I S I Master SoPEC connect e d to the host v i a USB, wak e up can b e i nit i at e d 
fol l owing a USB reset from the SCB. 
25 A typ i ca l USB wak e up sequonoe is: 

4^ Ex e cut e res e t s e quenc e for s e ctions of SoPEC in sle e p mode. 

2) CPU beet from ROM, i f CPU subsyst e m was in s l eep mode. 

3) Basic configuration of CPU p e r i ph e ra l s and D I U, and DRAM i nitia l isation, i f required. 

4) SoPEC id e ntification by activ i ty on USB e nd points 2 -4 indicat e s it is the ISIMast e r (unl e ss 

30 th e SoPEC CPU has exp li c i t l y d i sabled this funct i on). 

§) Download and authenticat i on of program using r e sults in Pow e r - Saf e Storag e (PSS) (s ee 

Sect i on 10.5.3). 
§) Execution of program from DRAM. 

7) Retr i eve operat i ng paramotors from PRINTER_QA and authenticat e op e rat i ng param e ters. 

35 8) Down l oad and authenticat e any further dataeote (programs) us i ng r e su l ts i n Pow e r - Saf e 

Storag e (PSS) (soe Section 10.5.3). 

9) Fo l low i ng steps as per Poworup. 

10.3.3 Print i n i tia li zation 

Th i s sequenc e is typica l ly p e rform e d at the start of a print job fo l low i ng pow e rup or wakoup: 
40 4) Check amount of i nk remaining via OA ch i ps wh i ch may bo present on a I S I S I ave SoPEC. 
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2) Down l oad static data o.g. d i thor matric e s, d e ad nozzio tabl e s from host to DRAM. 

3) Chock printhoad tomporaturo, if roqulrod, and configure pr i nthoad with f i r i ng puloo profile oto. 

accord i ngly. I nstruct I S I S I av e s to also perform this operation. 

4) I nit i ate pr i nthead pre - h e at sequence, if r e qu i r e d. I nstruct ISIS I aves to a l so perform th i s 

5 op e ration 

10.3. 4 First pag e download 

Buffer managem e nt in a SoPEC system is normally porformod by tho host. 

4^ Th e host commun i cat e s to th e SoPEC CPU ovor tho USB to ch e ck that DRAM spac e 

r e main i ng i s suffici e nt to down l oad th e first band. 
10 2) Th e host down l oads the first band (w i th tho page h e ad e r) to DRAM. 

3) Wh e n th e comp le t e page header has boon download e d th e SoPEC CPU process e s th e pag e 

h e ad e r, ca l cu l at e s PEP reg i ster commands and wr i t e dir e ctly to PEP registers or to DRAM. 

4) I f PEP register commands have boon written to DRAM, oxocuto PEP commands from DRAM 

via PCU. 

15 Po ll IS I SIaves for DRAM status and down l oad comprossod data to ISISIavos. 
R e ma i ning f i rst pag e bands download and proc e ss i ng: 
4") Chock DRAM s pac e r e maining is suffici e nt to download tho next band. 

2) Download th e n e xt band with th e band h e ad e r to DRAM. 

3) Wh e n th e comp le t e band h e ad e r has b e en download e d, proc e ss th e band h e ad e r according 

20 to which e v e r band r el at e d r e gist e r updat i ng mechan i sm is boing usod. 

Poll I SISIaves for DRAM status and download comprossod data to I S I SIav e s. 

10.3.5 Start printing 

4-) Wait unt il at le ast one band of the f i rst pag e has be e n download e d. 

2) Start a l l the PEP Un i ts by wr i ting to tho i r Go rogistors, via PCU commands e x e cut e d from 

25 DRAM or d i r e ct CPU writes, i n tho suggested order dofinod in Tab le . 

3) Pr i nt ready interrupt occurs (from PH I ). Poll I SIS I avos until pr i nt ready interrupt. 

4) Start motor contro l (which may bo on an I S I S I avo SoPEC), i f first pag e , oth e rwise food tho 

n e xt pag e . Th i s step cou l d occur b e for e tho pr i nt ready int e rrupt. 

Dr i v e LEDS, monitor paper status (wh i ch may bo on an iSISIav e SoPEC). 

30 §) Wa i t for pag e a l ignment via pag e s e nsor(s) GP i O interrupt (which may b e on an IS I SIav e 

SoPEC). 

7) If th e L i neSyncMaster i s a SoPEC i ts CPU i nstructs PH I to start producing master l i no syncs. 

Oth e rw i s e wa i t for an e xt e rna l d e vic e to produc e l in e syncs. 

3) Cont i nue to down l oad bands and proc e ss pag e and band h e ad e rs for next pag e . 

35 10.3.6 Next pago(s) download 

As for first page down l oad, performed during pr i nting of curr e nt pag e . 
10.3.7 B e tw e en bands , 

Wh e n th e f i n i sh e d band flags ar e ass e rt e d band re l ated rog i stors i n the CDU, LBD and TE ne e d to 
be r e programm e d. Th i s can b e via PCU commands from DRAM. Typical l y only 3 5 commands p e r 
40 decomprossion un i t n ee d to b e e x ec ut e d. These regist e rs can also bo roprogrammed directly by th e 
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CPU or by updat i ng from shadow r e gist e rG. The fin i shod band flag int e rrupts to th e CPU, to l l tho 
CPU that the oroa of momory ossooiatod w i th th e band i s now froo. 

10.3.8 During pago print 

Typica l ly during pago pr i nting Ink usage Is oommunicated to th e QA chips. 
5 4^ Ca l culat e Ink printed (from PH I ). 

2) Docromont ink remain i ng (v i a QA chips). 

3) Ch e ck amount of i nk romalning (v i a QA chips). This op e rat i on may b e b e tt e r p e rformed whi l e 

the pag e is b e ing pr i nted rather than at th e e nd of tho pago. 

10.3.9 Pag e finish 

10 Th e s e op e rat i ons arc typical l y p e rform e d wh e n the page i s finish e d: 

4^ Pag e finish e d interrupt occurs from PH I . Poll IS I SIav e s for pag e fin i shed interrupts. 

2) Shutdown th e PEP blocks by d e - ass e rt i ng the i r Go regist e rs In th e sugg e sted ord e r i n Tab le 

. Th i s wi ll sot tho PEP Unit stato machines to thoir startup statos. 

3) Commun i cate i nk usag e to QA ch i ps, If r e quired. 

15 10.3.10 — Start of n e xt pago 

Thoso operations are typica ll y performed b e for e pr i nting th e next pago: 

4^ Ro program th e PEP Units via PCU command proc e ss i ng from DRAM bas e d on pago 

h e ad e r. 

2) Go to Start printing. 

20 10.3.11 — End of document 

4^ Stop motor control. Th i s may b e on an I S I S I avo SoPEC. 

10.3.12 — Sl ee p mod e 

Tho CPU can put d i fferent soctlons of SoPEC Into sleep mode by wr i ting to reg i sters I n th e CPR 
block [16]. Th i s may be as a result of a command from tho host or as a r e su l t of a t i meout. 
25 4^ I nform host PC of which parts of SoPEC system aro about to s l oop. 

2) I nstruct ISISIav e s to enter sloop mode. 

3) Storo reusable cryptographic results in Pow e r Safe Storage (PSS). 

4) Put I SIMast e r SoPEC i nto defined s l oop mod e . 

40t4 — Normal operat i on i n a Mult i - SoPEC System IS I Slave SoPEC 
30 This s e ct i on the outline typ i ca l op e ration of an IS I SIavo SoPEC i n a mult i SoPEC system. Tho 

I S I Mast e r can bo another SoPEC or an I S I Bridge ch i p. Tho I S I S l ave communicates w i th tho host 
e ither via tho IS I Mast e r or us i ng a d i rect connect i on such as USB. For this use case wo consider 
only an I S I S l av e that do e s not have a d i rect host connection. Buff e r manag e m e nt i n a SoPEC 
syst e m Is normal l y performed by the host. 

35 10.^.1 Poworup 

Pow e rup descr i b e s SoPEC init i alisat i on fo l lowing an externa l r e set or tho watchdog tim e r syst e m 

A typ i ca l powerup sequence is: 

4^ Execut e r e s e t s e quenc e for comploto SoPEC. 

40 2) CPU boot from ROM. 
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3) Bas i c configuration of CPU periph e rals, SCB and D I U. DRAM i n i tialisat i on. 

4) Download and authonticat i on of program (soo Sootion 10.5.3). 

Execut i on of program from DRAM. 

§) Rotriovo operat i ng paramotors from PR I NTER_QA and authonticato operat i ng paramotors. 

5 7) SoPEC i dentificat i on by samp l ing GP I O p i ns to determine IS II d. Commun i cat e iS ll d to 

I S I Mast e r. 

8) Down l oad and auth e nticat e any furth e r datae e te. 

10. 4 .2 ISI wakoup 

Th e CPU can put different sect i ons of SoPEC i nto s l e e p mod e by writ i ng to r e gist e rs in tho CPR 
10 block [16]. Normal l y th e CPU sub syst e m and the DRAM will be put i n sleep mode but tho SCB and 
powo r s a f o storag e (PSS) wi ll sti ll b e e nab le d. 

Wakoup descr i b e s SoPEC r e cov e ry from sl ee p mod e with th e SCB and power safe storage (PSS) 
sti ll e nabl e d. I n an ISIS I avo SoPEC, wakoup can bo i n i t i ated fo l lowing an I S I rooot from tho SCB. 
A typical I S I wak e up s e qu e nc e i s: 
15 4^ Execute reset sequ e nc e for s e ct i ons of SoPEC in sloop mode. 

2) CPU boot from ROM, i f CPU subsystem was i n sleep mode. 

5) Basic conf i guration of CPU per i ph e ra l s and D I U, and DRAM init i alisation, if required. 

4) Download and authent i cation of program using r e sults in Power - Saf e Storag e (PSS) (see 

S e ction 10.5.3). 
20 §) Execution of program from DRAM. 

6) R e tr ie v e op e rat i ng param e t e rs from PRINTER_QA and auth e nticat e operat i ng parameters. 

7) SoPEC i d e ntification by samp l ing GPIO pins to d e t e rmin e IS I Id. Commun i cat e I S I Id to 

I SIMast e r. 

8) Down l oad and auth e nticat e any furth e r datae e tG. 

25 10. 4 .3 Pr i nt initializat i on 

Th i s s e qu e nc e is typica ll y perform e d at th e start of a print job fo ll owing pow e rup or wak e up: 
4) — Ch e ck amount of i nk remaining v i a QA ch i ps. 

2) — Download static data o.g. d i thor matr i ces, d e ad nozzl e tab le s from I SI to DRAM. 
^) — Check pr i nth oa d te mperature, if required, and configure printhoad with f i ring pu l se profile etc. 
30 according l y. 

4) — In i tiat e printhoad pre heat sequenc e , if r e quired. 
10. 4 . 4 F i rst page download 

Buffer management in a SoPEC system is norma ll y performed by tho host v i a tho IS I . 

4) Ch e ck DRAM spac e r e main i ng is suffic ie nt to down l oad tho first band. 

35 2) Tho host down l oads tho first band (with tho page header) to DRAM v i a tho IS I . 

3) When tho complete pago head e r has b ee n download e d, proc e ss the pag e h e ad e r, ca l culate 

PEP r e gist e r commands and write directly to PEP r e g i st e rs or to DRAM. 

4) I f PEP register commands have boon wr i tt e n to DRAM, e xecut e PEP commands from DRAM 

via PCU. 

40 R e maining first pago bands down l oad and process i ng: 
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4^ Ch e ck DRAM spaco rema i ning i s suffic ie nt to download th e n e xt band. 

2) Tho host downloads th e first band (with th e pag e h e ad e r) to DRAM v i a the iSI. 

3) Whon tho oomp l oto band head e r has b ee n downloaded, process tho band hoador according 

to whichovor band - r el at e d reg i ster updat i ng m e chanism i s b e ing us e d. 

5 10.4.5 Start print i ng 

4^ Walt unti l at l e ast on e band of th e first page has been downloaded. 

2) Start a ll th e PEP Units by writing to their Go r e g i sters, via PCU commands e x e cut e d from 

DRAM or diroot CPU wr i tos, i n tho ordor defined i n Table . 

^ Print ready i nterrupt occ u rs ( from PHI). Communicat e to Pr i ntMaster v i a IS I . 

10 4) Start motor contro l , if attached to this I SIS I ovo, whon roquostod by Pr i ntMastor, i f f i rst page, 

oth e rw i se feed next pago. This step cou l d occur before tho pr i nt r e ady i nt e rrupt 

5) Dr i v e LEDS, monitor paper status, if on this I S I SIavo SoPEC, wh e n r e qu e sted by Pr I ntMastor 

6) Wa i t for pag e a l ignm e nt v i a pag e s e nsor(s) GP I O int e rrupt, if on this I S I S I avo SoPEC, and 

s e nd to Pr i ntMast e r. 

15 7) Wait for l i no sync and commence pr i nt i ng. 

8) Cont i nue to download bands and proc e ss pag e and band headers for n e xt pag e . 

10. 4 .6 N e xt pag e (s) download 

As for first band download, p e rform e d during pr i nting of current pago. 

10. 4 .7 Botwoon bands 

20 Wh e n tho finished band flags ar e ass e rt e d band r el ated registers i n th e CDU, LBD and TE nood to 
b e r e- programm e d. This can b e via PCU commands from DRAM. Typ i cal l y only 3 5 commands per 
decompression un i t nood to bo executed. Those rog i stors can also be roprogrammod direct l y by the 
CPU or by updat i ng from shadow r e gist e rs. The finished band flag int e rrupts to the CPU t e ll th e 
CPU that tho area of memory assoc i ated w i th the bond I s now free. 

25 10. 4 .8 During pag e print 

Typically dur i ng pago pr i nt i ng ink usag e i s commun i cat e d to tho QA ch i ps. 

4^ Calculate ink pr i nted (from PHI). 

2) D e cr e m e nt ink remaining (via OA chips). 

8) Check amount of ink r e main i ng (via QA chips). This op e rat i on may b e b e tt e r p e rform e d while 

30 th e pag o i s b e ing pr i nt e d rath e r than at th e e nd of tho page. 
10. 4 .9 Pago finish 

Th e s e operat i ons are typica l ly p e rform e d wh e n th e pago is fin i shed: 

4-) Pag e fin i shed i nterrupt occurs from PH I . Commun i cat e pago fin i shed interrupt to Pr i ntMa s t e r. 

2) Shutdown th e PEP b l ocks by do assorting th e ir Go r e gisters I n the suggested ordor in Table 

35 . This w i l l s e t th e PEP Unit state mach i nos to their startup states. 

8) Commun i cate i nk usage to QA ch i ps. I f requ i red. 

10. 4 .10 Start of next pago 

Th e s e operations are typica ll y p e rform e d before pr i nt i ng th e n e xt pag e : 

4-) Ro program the PEP Units via PCU command processing from DRAM based on pag e 

40 h e ad e r. 
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2) Go to Start pr i nt i ng. 

10. 4 .11 — End of document 

Stop motor contro l , if attached to th i s I S i Slavo, whon roquostod by PrintMastor. 

10. 4 .12 — Pow e rdown 

5 I n th i s modo SoPEC is no l ong e r powered. 

4^ Powordown I S I SIovo SoPEC wh e n instruct e d by I SIMaster. 

10. ^1 .13 S l oop 

Th e CPU can put d i fforont soct l ons of SoPEC i nto sleep modo by writing to r e gist e rs in the CPR 
b l ock [16]. This may b e as a r e su l t of a command from the host or ISIMast e r or as a result of a 
10 t i moout. 

4) Store reusable cryptographic resu l ts in Power Safe Storag e (PSS). 

2) Put SoPEC into defined s l oop modo. 

1 0.5 Secur i ty U s e Ca s e s 

P le as e se e tho 'SoPEC Security Ov e rvi e w' [9] document for a more comp le t e d e scr i ption of SoPEC 
15 security i ssu e s. Th e SoPEC boot operat i on Is d e scr i b e d in th e ROM chapt e r of th e SoPEC 
hardwar e d e sign spocif i cation, Sect i on 1 7.2. 
10.5.1 Communicat i on w i th th e OA chips 

Communication botwoon SoPEC and tho OA chips (i.e. I NK_QA and PR I NTER_QA) w i ll tak e p l ac e 
on at least a por power cyc le and p e r page basis. Communication w i th tho QA chips has thr ee 

20 pr i ncipal purpos e s: va li dat i ng th e pr e s e nce of genu i n e QA ch i ps ( i . e th e pr i nter i s using approved 
consumabl e s), va l idation of the amount of ink r e ma i ning in th e cartridg e and authenticat i ng tho 
op e rat i ng param e t e rs for th e print e r. After each page has b ee n pr i nt e d, SoPEC is e xpect e d to 
communicate the number of dots fired por Ink plane to th e QA chips e t. SoPEC may a l so i n i t i at e 
d e coy commun i cat i ons w i th th e QA ch i ps from time to timo. 

25 Process: 

« When val i dating ink consumption SoPEC is expect e d to principa l ly act as a conduit b e tw ee n 

th e PRINTER_QA and I NK_QA ch i ps and to take certain actions (basically enabl e or disabl e 
printing and report status to host PC) bas e d on the resu l t. Th e commun i cation channe l s ar e 
ins e cure but a ll traffic is sign e d to guarantee auth e ntic i ty. 

30 Known W e akness e s 

* A l l communication to the QA chips i s ov e r the LSS i nt e rfac e s us i ng a seria l communication 

protocol. Th i s i s op e n to obs e rvation and so th e communication protoco l cou l d be reverse 
e ngin ee r e d. I n this case both th e PR I NTER__QA and ! NK_QA ch i ps cou l d b e r e p l ac e d by 
i mpostor devices (e.g. a s i ng l e FPGA) that succ e ssfu l ly emu l at e d th e commun i cation 

35 protoco l . As th i s would r e quire physica l modification of each pr i nt e r this i s cons i d e r e d to b e 
an acceptably l ow risk. Any messages that are not signed by one of th e symm e tric k e ys 
(such as tho SoPECJd_k e y) could bo r e vers e e ngin ee red. The Impost e r d e v i ce must a l so 
hav e acc e ss to the appropriat e keys to crack th e syst e m. 
* I f th e s e cret koys i n th e QA chips are expos e d or crack e d then tho syst e m, or parts of i t, is 

40 compromised. 
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Assumpt i ons: 

[1] Tho QA ch i ps ar e not i nvo l ved in the auth e ntication of download e d SoPEC cod e 
[2] The OA ch i p in tho i nk cartridge ( I NK_QA) do e s not dir e ctly affect tho operation of tho cartridge 
i n any way i. e . i t does not I nh i bit the flow of I nk etc. 
5 [3] Tho I NK__QA and PR I NTER_QA chips ar e I d e ntica l i n tho i r v i rgin stat e . They only becom e a 
I NK_QA or PR I NTER_QA after th ei r F l ashROM has b ee n programmed. 
10.5.2 — Authent i cat i on of downloaded code in a s i ng le SoPEC system 
Process: 

4^ SoPEC identificat i on by activity on USB o nd points 2 A indicat e s i t is tho I S I Mastor (un l ess 

10 tho SoPEC CPU has oxpl i c l t i y disabled th i s funct i on). 

2) Tho program i s downloaded to tho ombodd e d DRAM. 

3) Tho CPU ca l cu l at e s a SHA - 1 hash digest of th e download e d program. 

4) Th e R e e e tSrc r e gist e r in th e CPR b l ock i s r e ad to d e t e nmine whether or not a power on reset 

occurr e d. 

15 §) I f a power on reset occurred tho signatur e of th e downloaded codo (which needs to bo I n a 

known l ocat i on such as th e first or last N bytes of the download e d code) is decrypted using 
th e Silv e rbrook public bootOkoy stored in ROM. This decrypted s i gnatur e is the expected 
SHA 1 hash of the accompanying program. Tho encryption algorithm i s likoly to bo a publ i c 
koy algorithm such as RSA . I f a power on rosot did not occur thon tho oxpoctod SHA 1 hash 
20 i s retr i ovod from tho PSS and th e comput e int e nsiv e decrypt i on is not r e qu i r e d. 

§) Th e ca l cu l at e d and expect e d hash va l u e s ar e compared and if they match thon tho programs 

authenticity has been vorifiod. 

7) If tho hash valu e s do not match th e n th e host PC is notifi e d of the fa i lur e and th e SoPEC w i l l 

awa i t a now program down l oad. 

25 S) If th e hash va l u e s match th e n th e CPU starts e x e cuting th e download e d program. 

9) I f, as is v e ry li koly, tho down l oaded program wish e s to download subsequent programs (such 

as OEM code) i t is r e sponsible for e nsuring the authenticity of e v e rything it down l oads. The 
downloaded program may conta i n pub li c keys that ar e us e d to auth e nticat e subs e qu e nt 
down l oads, thus form i ng a h i erarchy of authentication. Th e SoPEC ROM does not control 
30 th e s e a uth en ticat i ons — it i s s o lel y concerned w i th verifying that th e f i rst program down l oaded 

has com e from a trusted sourc e . 
40) — At som e subs e quent po i nt OEM cod e starts e x e cut i ng. Th e S i lverbrook sup e rv i sor codo acts 
as an O/S to the OEM user mode code. Th e OEM cod e must acc e ss most SoPEC 
funct i ona li ty via syst e m calls to the S il v e rbrook code. 
35 44-) — Th e OEM cod e is e xp e ct e d to p e rform som e simpl e 'turn on th e li ghts' tasks aft e r wh i ch th e 
host PC Is inform e d that th e pr i nt e r I s ready to pr i nt ond tho Start Printing use case comes 
I nto p l ay. 
Known Weakness e s: 

' I f the Si l verbrook privat e bootOk e y is exposed or crackod th e n th e system is seriously 

40 comprom i sed. A ROM mask change would be requ i red to roprogram th e bootOkoy. 
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10.5.3 — Auth e nt i cat i on of downloaded cod e i n a mult i SoPEC systom 
10.6.3. 1 ISIMaetor SoPEC Process: 

4) SoPEC idontificat i on by activity on USB e nd - po i nts 2 - 4 ind i cat e s it i s the IS I Mast e r. 

5) The SCB is configur e d to broadcast th e data rec ei v e d from th e host PC. 

5 3) Tho program i s downloaded to the ombodd e d DRAM and broadcastod to a l l I S I SIav e 

SoPECo ovor tho I S I. 
4) Tho CPU calcu l ates a SHA 1 hash digest of the down l oad e d program. 

6) Tho RoGotSrc rogistor in tho CPR b l ock i o road to dotorm i n e whether or not a pow e r - on r e s e t 

ocGurrod. 

10 6) I f a pow e r on res e t occurrod th e signaturo of tho down l oad e d cod e (which noods to bo i n a 

known location such as tho first or last N bytos of tho down l oad e d cod e ) is d e crypt e d using 
th e Silv e rbrook publ i c bootOk e y stor e d i n ROM. Th i s d e crypt e d signatur e is th e e xp e ct e d 
SHA - 1 hash of th e accompanying program. Tho encrypt i on a l gor i thm is li ke l y to bo a pub li c 
key algorithm such as RSA. I f a power on rosot d i d not occur then tho oxpoctod SHA 1 hash 

15 is r e tr ie v e d from tho PSS and th e comput e int e nsiv e d e crypt i on i s not r e qu i r e d. 

7) Th e ca l culatod and e xp e cted hash va l ues are compared and if they match th e n the programs 

authenticity has boon vorlfiod. 

8) I f th e hash valu e s do not match thon th e host PC is notifi e d of th e failure and tho SoPEC wi ll 

awa i t a n e w program down l oad. 

20 9) I f th e hash valu e s match th e n th e CPU starts e x e cut i ng th e down l oad e d program. 

40) — It is li ke l y that th e download e d program wil l poll e ach I S I S I ave SoPEC for tho result of its 

authent i cation procoss and to determ i ne tho number of slaves present and their I S I Ids. 
44^ — I f any IS I S I av e SoPEC r e ports a fa ile d auth e nt i cation thon tho I S I Master commun i cat e s this 
to th e host PC and th e SoPEC w il l await a n e w program download. 
25 42) — I f a ll I SIS I av e s r e port succ e ssfu l authent i cat i on th e n th e down l oad e d program i s responsibl e 
for th e down l oad i ng, auth e ntication and distr i bution of subsequ e nt programs within th e multi- 
SoPEC syst e m. 

43) — At som e subsequent point OEM cod e starts oxocut i ng. Tho S i lverbrook superv i sor code acts 

as an O/S to tho OEM usor mod e cod e . Th e OEM cod e must access most SoPEC 
30 functiona li ty via systom ca ll s to th e S il v e rbrook cod e . 

44) — Tho OEM code is oxpoctod to p e rform som e simp le 'turn on th e li ghts' tasks after wh i ch the 

master SoPEC d e t e rmin e s that a ll SoPECs aro r e ady to pr i nt. Tho host PC i s informed that 
th e pr i nter i s ready to print and th e Start Printing use caso comes i nto play. 

35 10,5.3.2 iSiSfQvo SoPEC ProGOse: 

4) When tho CPU comes out of r e s e t th e SCB wi l l b e i n slav e mode, and the SCB i s a l r e ady 

conf i gured to rec e ive data from both the IS I and USB. 

2) Tho program is down l oaded (via I S I or USB) to omboddod DRAM. 

3) Tho CPU calculates a SHA - 1 hash d i gest of tho down l oaded program. 
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4) The Ree e tSro rogioter i n th e CPR b l ock i s read to d e termino wh e ther or not a pow e r on roGot 

OGGurrod. 

If a pow e r on reset occurr e d the signatur e of th e down l oad e d oodo (wh i ch n ee ds to bo in a 

known locat i on such as the first or last N bytos of tho download e d cod e ) i s decrypted using 
5 th e Si l v e rbrook publ i c bootOk e y stor e d in ROM. Th i s decrypted signatur e i s tho expoctod 

SHA 1 hash of the accompany i ng program. Th e e ncryption algor i thm i s li k el y to b e a pub li c 
k e y algor i thm such as RSA. I f a power on res e t did not occur th e n th e e xp e ct e d SHA 1 hash 
i s r e tri e ved from tho PSS and th e computo int e ns i v e decryption i s not roquirod. 

Tho ca l cu l at e d and e xp e ct e d hash values are compared and if th e y match then tho programs 

10 auth e nticity has b ee n v e r i fied. 

7) If th e hash valu e s do not match, thon the I S I S I av e dovico w i l l awa i t a n e w program again 

5) If th e hash va l u e s match then tho CPU starts e x e cuting the down l oaded program. 

8) I t is l ikely that tho downloaded program w ill communicate th e r e su l t of i ts auth e ntication 

proc e ss to th e I S I Mast e r Tho down l oadod program is r e sponsibl e for d e t e rmin i ng the 

15 SoPECs I S II d, roGoiv i ng and authent i cat i ng any subsoquont programs. 

40) — At som e subsoquont po i nt OEM cod e starts e xecut i ng. Th e S il v e rbrook superv i sor cod e acts 
as an O/S to tho OEM user mod e cod e . Th e OEM code must acc e ss most SoPEC 
funct i ona l ity via system col l s to tho Si l verbrook cod e . 

44^ Th e OEM cod e i s exp e ct e d to perform som e simpl e 'turn on tho lights' tasks aft e r wh i ch th e 

20 master SoPEC is informed that this slave i s ready to pr i nt. Tho Start Printing uso case thon 

comes i nto p l ay. 
Known Weakn e ss e s 

* If the Si l verbrook privat e bootOkey i s exposed or crack e d th e n tho sy s t e m is s e r i ously 

comprom i sed. 

25 ' ISI is an op e n i nt e rfac e i.e. messages sent over th e IS I are in tho c l ear. Th e communicat i on 

channels are insecure but a ll traffic is s i gned to guarantee authenticity. As al l communicat i on 
ov e r th e I S I is control l ed by Supervisor code on both th e I SIMaster and I SIS I av e then th i s 
a l so provides some prot e ction against software attacks. 
10.5. 4 Authentication and upgrade of operating paramet e rs for a printer 

30 Th e SoPEC IC w i l l bo used i n a rango of pr i nters with different capabil i t l oG (o.g. A3/A 4 print i ng. 

printing speed, resolut i on etc.). I t i s expoctod that some print e rs wi l l a l so have a softwar e upgrade 
capability which wou l d a l low a user to purchas e a li oons e that e nab le s an upgrad e in th e ir pr i nt e r's 
capab ili ti e s (such as print spood). To faci li tate th i s it must b e poss i bl e to s e cur el y stor e the 
operating parameters in the PR I NTER_QA ch i p, to securely communicat e th e s e param e ters to th e 

35 SoPEC and to s e cure l y r e program tho parameters in tho ovont of an upgrade. Note that oach 

pr i nting SoPEC (as oppos e d to a SoPEC that is on l y used for th e storag e of data) wi l l hav e its own 
PR I NTER_QA ch i p (or at l east access to a PR I NTER_QA that contains th e SoPEC's 
SoPECJd_koy). Therefore both I S I Master and I SISIave SoPECs w il l need to auth e nt i cate op e rating 
parameters. 

40 Process: 
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4-) Program cod e is down l oadod and authent i cat e d as d e scr i bed i n s e ctions 10.5.2 and 10.6.3 

abov e . 

2) Tho program code has a function to cr e at e th e SoPECJd_k e y from th e unique SoPECJd 

that was programmed whon th o SoPEC was manufactur e d. 

5 3) Tho SoPEC rotr i ovos tho s i gned op e rating param e t e rs from i ts PRINTER_QA ch i p. Tho 

PR I NTER_QA ch i p uses tho SoPECJd_ l <ey (which is stor e d as port of the pair i ng process 
e xecut e d during printhoad assombly manufactur e & test) to s i gn tho operating parameters 
wh i ch ar e appended with a random number to thwart rep l ay attacks. 

4) The SoPEC ch e cks the s i gnature of the op o rating parameters us i ng i ts SoPEC_id_koy. If this 

10 signatur e auth e nt i cat i on proc e ss is succ e ssful th e n th e op e rating param e t e rs ar e considorod 

va li d and the ov e rall boot proc e ss cont i nu e s. If not th e e rror i s report e d to tho host PC. 

6) Oporat i ng parameters may also bo sot or upgraded using a second koy, tho 

PrintEngin e LiGens e Jkey, which is stor e d on tho PR I NTER_QA and us e d to authent i cate th e 
change in oporating param e t e rs. 
15 Known W e aknesses: 

* I t may b e possible to retr i eve the uniqu e SoPECJd by placing tho SoPEC in t e st mod e and 

scann i ng it out. It is certa i n l y poss i bl e to obta i n it by rev e rse e ngin ee ring tho dev i ce. E i ther 
way th e SoPECJd (and by extens i on th o SoPEC_id_koy) so obtained is valid only for that 
sp e cific SoPEC and so printers may only b e compromis e d on e at a t i m e by part ie s with th e 
20 appropr i at e specialised equipment. Furthermore oven i f tho SoPECJd is comprom i sed, tho 

other keys in th e syst e m, wh i ch prot e ct th e auth e nt i cation of consumab le s and of program 
code, ar e unaffected. 

1 0.6 M i scellaneous Use Cases 

Ther e ar e many m i scel l aneous use cas e s such as tho fo l lowing e xamp le s. Softworo running on tho 
25 SoPEC CPU or host will dec i de on what actions to tak e i n th e s e sc e nar i os. 
10.6.1 D i sconn e ct / Re connect of OA chips. 

4^ Disconn e ct of a OA chip between documents or if ink runs out mid document. 

2) R e- conn e ct of a OA chip onc e auth e nticat e d e .g. ink cartridge replacement should a l low tho 

syst e m to resume and pr i nt tho n e xt document 

30 10.6.2 Page arr i ves before print ready interrupt. 

4^ Engage clutch to stop pap e r unt il print ready i nterrupt occurs. 

10.6.3 Doad nozzle tab l e upgrad e 

This sequenc e is typ i cal l y perform e d wh e n d e ad nozz le information n ee ds to be updat e d by 
performing a printhoad dead nozz l e tost. 
35 4-) Run printh o ad nozzl e t e st s e qu e nc e 

2) E i th e r host or SoPEC CPU converts doad nozzle information I nto d e ad nozzle tabl e . 

3) Stor e d e ad nozzl e tabl e on host. 

4) Wr i te doad nozzl e tab l e to SoPEC DRAM. 

40^? Fa i lure Mode Use Cases 

40 10.7.1 — System errors and s e cur i ty v i olat i ons 
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Syst e m e rrors and s e cur i ty v i o l ations aro roportod to the SoPEC CPU and host> Softwaro runn i ng 

on the SoPEC CPU or host w i l l th e n decide what actions to tako. 

Si l verbrook code authenticat i on fa il ure. 

4^ Notify host PC of auth e ntication failur e . 

5 3) Abort pr i nt run. 

OEM cod e auth e nticat i on failuro. 

4^ Not i fy host PC of auth e ntication fai l ur e . 

2) Abort pr i nt run. 

I nvalid QA Gh i p(s). 
10 4)- Report to host PC. 

2) Abort print run. 

MMU security vio l at i on i nt e rrupt. 

4^ Th i s is hand l ed by exc e pt i on hand le r. 

2) R e port to host PC 

15 3) Abort print run. 

I nvalid addr e ss interrupt from PCU. 

4^ Th i s is handl e d by e xcoption handler. 

2) — Report to host PC. 

2) Abort print run. 

20 Watchdog t i mer interrupt. 

4^ Th i s is handl e d by e xc e ption handl e r. 

2) R e port to host PC. 

3) Abort pr i nt run. 

Host PC doos not acknowledge message that SoPEC i s about to power down. 

25 Pow e r down anyway. 

10.7.2 Printing errors 

Printing errors aro roportod to the SoPEC CPU and host. Softwaro runn i ng on tho host or SoPEC 
CPU wi ll th e n d e cid e what actions to tak e . 

I nsufficient space ava i lab l e in SoPEC compr e ss e d band store to down l oad a band. 
30 4) Report to the host PC. 

Insuffic ie nt ink to pr i nt. 

4^ R e port to host PC. 

Pago not down l oaded i n t i mo wh il e pr i nt i ng. 

4-) Buff e r underrun i nt e rrupt w ill occur. 

35 2) Report to host PC and abort print run. 

JPEG d e coder error i nterrupt. 

4^ R e port to host PC. 

C PU Su bsys tem 
40 44 Central Proc e ssing Unit (CPU) 
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44t4 — Overv i ew 

The CPU b l ock oonoists of the CPU cor e , MMU, cach e and associated log i c. Tho pr i ncipa l tasks for 

the program running on tho CPU to fulfil l in tho systom oro: 

Communications: 

5 * Contro l the flow of data from tho USB i ntorfaco to tho DRAM and i SI 

* Communication with tho host via USB or I SI 

Runn i ng the USB dov i co dr i ver 

PEP Subsystem Contro l : 

Pag e a nd band head e r process i ng (may poss i b l y b e p e rform e d on host PC) 

10 * Configure print i ng options on a per band, por pogo, por job or por powor cycio bas i s 

^ I n i tiate pago printing operation in th e PEP subsystem 

^ R e tr ie v e d e ad nozzl e i nformation from the printh e ad interface (PH I ) and forward to th e host 

PG 

* S e l e ct th e appropriat e firing pu l s e profi le from a s e t of prodofln e d profi l es bas e d on tho 

15 printhead charactor l stics 

R e tr ie ve pr i nth e ad temperature via th e PH I 

Security: 

* Authenticate down l oad e d program cod e 

* Authent i cate printer op e r a t i ng param e t e rs 

20 ^ Authenticate consumab l es via tho PR I NTER_QA and I NK_QA chips 

« Monitor ink usag e 

^ I so l at i on of OEM cod e from dir e ct acc e ss to th e syst e m resources 

Other* 

* Dr i v e the printer motors us i ng th e GP I O pins 

25 ' Monitoring tho status of tho printer (paper jam, tray empty oto.) 

* Driving front pane l LEDs 

' P e rform post boot initialisat i on of tho SoPEC dovico 

Memory manag e m e nt (lik e ly to bo i n conjunct i on with tho host PC) 

Miscellaneous housokooping tasks 

30 

To contro l tho Print Eng i n e P i p eli n e th e CPU is r e qu i red to prov i d e a le v e l of p e rformance at l east 
e qu i va l ent to a 16 bit H i tach i H8 - 3664 microcontro l l e r running at 16 MHz. An as yet undotorminod 
amount of add i t i ona l CPU performance i s needed to perform tho other tasks, as well as to provide 
th e pot e nt i al for such act i v i ty as N e tpag e pag e assembly and proc e ss i ng, R I P i ng e tc. Th e e xtra 

35 performance required is dominated by tho signature verif i cation task and tho SCB (inc l ud i ng tho 
USB) managomont task. An op e rat i ng system i s not required at pr e sent. A numb e r of CPU cores 
hav e b e en eva l uat e d and the LEON P175 4 is considered to bo tho most appropr i ate so l ution. A 
diagram of the CPU b l ock i s shown i n Figur e 15 b el ow. 
1 1 .2 Def i n i t i ons of I/Os 

40 Table 1^. CPU Subsystem l /Os 
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Port nam e 



I It 19 If 



Doscription 



C l ocks and R e s e ts 



prst_n 



In 



Global r e s e t. Synchronous to po l k, aot i vo low. 



Pdk 



In 



Global clock 



CPU to D I U DRAM i ntorfaco 



cpu_adr[21 :2] 



2Q Out 



Address bus for both DRAM and p e r i ph e ra l 



access 



opu_dataout[31 :0] 



32 



Data out to both DRAM and por i phoral dev i ces. 



Th i s shou l d bo driven at tho samo t i me as tho 



cpujadr and r e quest s i gna l s. 



drom_cpu_data[255:Q] 



Road data from tho DRAM 



cpu_diu_rroq 



Oi it 



Road roquost to tho D I U DRAM 



Acknow l odgo from D I U that read roquost has 



d i u_cpu_rack 



In 



boon aoc e ptod. 



diu_cpu_rva li d 



S i gnal from D I U tolling SoPEC Un i t that valid road 



data is on th e dramjcpajdata bus 



cpu_diu_wdataval i d 



Out 



Signal from tho CPU to th e D I U i nd i cat i ng that tho 
data current l y on tho cpu^diu^wdata bus i s va li d 



and shou l d bo committ e d to th e D I U posted wr i te 

buffer 



d i u_cpu_writo_rdy 



In 



Signal from th e D i U i nd i cat i ng that tho posted 
wr i to buff e r i s e mpty 



cpu_diu_wdadr[21 : 4 ] 



4^ 



Out 



Wr i t e addr e ss bus to the D I U 



cpu_diu_wdata[1 27:0] 



Out 



Wr i t e data bus to tho D I U 



cpu_diu_wmask[1 5:0] 



4€ 



Out 



Wr i t e mask for the cpu_diu_wdatQ bus. Each bit 



Gorrosponds to a byt e of th e 1 28 b i t 



cpu_diu_wdoto buc 



CPU to periphera l b l ocks 



cpu_rwn 



Out 



Common r e ad/not-wr i t e signa l from th e CPU 



Gpu_acodo[1 :0] 



Out 



CPU access cod e s i gna l s. 

cpu_acodo[0] — Program (0) / Data (1 ) acc e ss 



cpu_acede[1] — User (0) / Supervisor (1) acc e ss 



cpu_cpr_s el 



Oi it 



CPR block select 



cpr_cpu_rdy 



In 



Ready s i gnal to tho CPU. When oprjDpujrdy is 



high it ind i cat e s th e l ast cyc le of the acc e ss. For a 
wr i t e cycle th i s m e ans cpujdataout has b ee n 



reg i stered by th e CPR b l ock and for a road cyc l e 



th i s means the data on cpr_cpu_data is va l id. 



cpr_cpu_b e rr 



4- In CPR bus error signal to the CPU. 
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cpr_cpu_data[31 :0] 



32 



R o ad data bus from tho CPR b l ock 



Oi it 



GP I O block select. 



gp i o_cpu_rdy 



GP I O r e ady s i gnal to tho CPU. 



gp i o_cpu_berr 



GP I O bus error signa l to tho CPU. 



gpio_cpu_data[31 :0] 



22 



Read data bus from the GP I O block 



cpujcu_s e l 



Out 



I CU block select. 



rcu_cpu_rdy 



I CU r e ady s i gnal to tho CPU. 



icu_cpu_b e rr 



I CU bus error signa l to tho CPU. 



icu_cpu_data[31 :0] 



32 



R e ad data bus from th e I CU b l ock 



opuJss_s e l 



Out 



LSS b l ock s e l e ct. 



ss_cpu_rdy 



LSS r e ady signal to tho CPU. 



lss_cpu_borr 



l« 



LSS bus o rror s i gna l to tho CPU. 



_cpu_data[31 :0] 



32 



[ft 



R e ad d a ta bus from tho LSS b l ock 



cpu_pcu_s e l 



Out 



PCU b l ock Go l oct. 



pcu_cpu_rdy 



PCU r e ady signa l to the CPU. 



pcu_opu_b e rr 



l« 



PCU bus e rror s i gnal to the CPU. 



pcu_cpu_data[31 :0] 



32 



[n 



R e ad data bus from th e PCU b l ock 



cpu_scb_s el 



Out 



SCB block so l oct. 



i cb_cpu_rdy 



SCB r e ady signa l to th e CPU. 



i cb_cpu_borr 



SCB bus e rror signa l to th e CPU. 



scb_cpu_data[31 :0] 



32 



Read data bus from the SCB block 



opu_tlm_sol 



Out 



Timers block soloct. 



t i m_cpu_rdy 



Tim e rs block ready signal to tho CPU. 



t l m_cpu_b e rr 



Tim e rs bus e rror s i gna l to th e CPU. 



t i m_cpu_data[31 :0] 



32 



R e ad data bus from th e Tim e rs block 



opu_rom_sol 



Out 



ROM b l ock s el ect. 



rom_cpu_rdy 



ROM block r e ady signal to th e CPU. 



rom_cpu_borr 



ROM bus orror s i gna l to tho CPU. 



rom_cpu_data[31 :0] 



32 



R e ad data bus from th e ROM b l ock 



cpu_pss_so l 



Out 



PSS b l ock soloct. 



pss_opu_rdy 



k4 



PSS b l ock r e ady s i gnal to th e CPU. 



pss_cpu_borr 



PSS bus error s i gna l t o the CPU . 



pss_cpu_data[31 :0] 



32 



R e ad data bus from th e PSS block 



cpu_diu_sol 



Out 



D I U r e gister b l ock s e l e ct. 



diu_cpu_rdy 



D I U register block ready s i gna l to tho CPU. 



d i u_cpu_borr 



D I U bus error signa l to the CPU. 



diu_cpu_data[31 :0] 



32 



Read data bus from the D I U b l ock 



I nterrupt signa l s 



PEA23US 



66 



lGu_cpuJlovol[3:0] 


3 








An interrupt is asserted by driving the appropriato 


priority level on icu_cpu_il&v&L These signals 
must remain asserted until the CPU executes an 


interrupt acknowlodgo cyclo. 








acknowledging when cpujack is high 








if 


inierrupi ucKnowioogo signal, i ne exaoi umtHg 


depends on the CPU coro implomontation 


uepuy Signals 








diu_cpu_debug_valid 


4- 


In 


Signal indicating tho data on tho diu_cpu_data 

BUS IS vuiiq QBDug uaia. 


tim_cpu_dobug_valid 


1- 


In 


Signal indicating tho data on the UmjGpujdlQtQ 
bus is valid debug data. 


scb_cpu_dobug_valid 


4- 


In 


Signal indicating the data on the scb_opu_data 
BUS IS vaiiQ oepug oaia. 


pcu_cpu_debug_valid 


4- 


In 


Signal indicating the data on the pcujopujdiata 


lss_Gpu_debug_valid 


4- 


In 






Signal indicating tho data on tho lBG_opu_data bus 

ts vaHO oeDUy Qaia. 


lcu_opu_debug_vaiid 


4- 


In 


Signal indicating the data on the icu_cpu_data bus 
IS vaiiQ ueoug oaia. 


gpio_cpu_debug_valid 


4- 


In 


Signal indicating tho data on the gpiojopujdata 
BUS IS vaiic QeBug oaxa. 


cpr_cpu_debug_valid 


4- 


In 


Signal indicating the data on tho cprjcpajdata 
bus is valid debug data. 


debug_data_out 






Output dobug data to bo muxed on to the GkIQ & 
PHI pins 


debug_data_vaiid 


4- 


Otrt 


Debug valid signal indicating the validity of the 
data on debug_jdata_out. This signal is used in all 


debug configurations 


debug_cntrl 


33 


Out 


Control signal for each PHI bound dobug data lino 


indicating whether or not tho dobug data should 
be selected by the pin mux 



44t3 Realt i me requiriimentg 

The SoPEC r e altim e requirem e nts have yot to b e fu ll y d e term i ned but th e y may bo split into throo 
cat e gori e s: hard, f i rm and soft 
11.3a1 Hard realtim e r e qu i r e m e nts 
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Hard roquirem e nt s aro tasks that must b e complotQd b e fore a c e rta i n d e ad l ine or fai l uro to do so 
w i l l result in an orror porooptib l e to tlio user (print i ng stops or funct i ons i ncorr e otly). Th e r e oro throo 
hard r e a l time tasks: 

* Motor control: Tho motors wh i ch food tho pap e r through the pr i nter at a constant spood 

5 during print i ng ar e driven dir e ct l y by tho SoPEC dev i c e . Four periodic signa l s with d i fforont 

phase ro l ationsh i ps ne e d to bo generated to onsuro tho papor travels smoothly through tho 
printer. Tho gonoration of thes e signals i s handled by tho GPIO hardware (see section 13.2 
for more details) but tho CPU is rospons i b l o for enab l ing th e se signa l s (i. o . to start or stop tho 
motors) and coord i nat i ng tho movement of the paper w i th the pr i nt i ng op e ration of tho 
10 pr i nth e ad. 

* Buff e r management: Data e nt e rs th e SoPEC v i a tho SCB at an un e v e n rate and i s consum e d 

by th e PEP subsystem at a diff e r e nt rate. Tho CPU is rosponsib l e for managing the DRAM 
buffers to ensur e that n e ith e r ov e rrun nor und e rrun occur. Th i s buff e r management i s l ik e ly to 
bo performed under th e d i r e ction of the host. 

15 * Band process i ng: !n c e rtain cas e s PEP r e gist e rs may need to bo updated between bands. As 

the timing requirem e nts ar e most lik el y too string e nt to b e met by direct CPU wr i tes to tho 
PCU a more likely sc e nario is that a sot of shadow registers w i l l programm e d in the 
compr e ss e d pag e un i ts b e for e tho current band Is finished, copied to band related registers 
by tho finished band signals and th e proc e ssing of th e next band w il l cont i nu e Immediat e ly. 
20 An alternative solution i s that the CPU w ill construct a DRAM based s e t of commands (see 

section 21 .8.5 for more d e tai l s) that can b e e x e cuted by th e PCU. Th e task for th e CPU. h e r e 
i s to parse the band headers stored in DRAM and g e nerat e a DRAM bas e d set of commands 
for the next number of bands. Tho l ocation of tho DRAM bas e d set of commando must thon 
be written to the PCU b e fore tho curr e nt band has b ee n processod by th e PEP subsystem. I t 
25 Is al s o conc e ivab le (but currently cons i d e r e d unl i k e ly) that the host PC could croato tho 

DRAM based commands. In this cas e th e CPU wi l l on l y b e requ i red to point th e PCU to the 
correct l ocat i on i n DRAM to oxocut e commands from. 

11.3.2 Firm r e quirements 

F i rm r e qu i r e ments ar o tasks that should bo comp le t e d by a c e rtain t i me or failur e to do s o w i l l 
30 r e sult i n a d e gradation of p e rformance but not an e rror. Th e majority of th e CPU tasks for SoPEC 
fa l l into this category inc l uding all i nteractions w i th tho OA ch i ps, program authent i cation, page 
feed i ng, configuring PEP r e g i sters for a page or job, determining the firing pu l s e prof ile , 
commun i cat i on of pr i nter status to tho host ov e r th e USB and th e mon i toring of i nk usage. Tho 
authent i cation of down l oaded programs and messages wi ll bo the most compute intons i vo 
35 op e ration th e CPU wil l b e required to perform. In i tia l i nv e st i gat i ons i nd i cat e that the LEON 
processor, running at 160 MHz, wi l l easi l y perform throe authent i cations i n under a second. 
Table 15. Expect e d firm roqu i rements 



Requirement 


Duration 


Power on to start of printing first page [USB and slave SoPEC 


- 8 sees ?? 



PEA23US 



68 



enumeration, 3 or moro RSA signature verifications, oodo and 




Gompressod page data download and chip initialisation] 


Wako up fronn sloop mode to start printing [3 or more SHA-1 / RSA 


^ 2 sees 


I *^ 1 1 ! 1 i o ^3 1 ■ 


Authenticate ink usago in the printer 


^ 0.5 sees 


Determining firing pulse profile 


^0.1 sees 


Pago fooding, gap botwoon pagos 


OEM dependent 


Communication of printer status to host PC 


^ 10 ms 


Configuring PEP rogistors 





11.3.3 Soft r e quirements 

Soft requ i rements ar e tasks that need to b e don e but there aro only li ght t i me constra i nts on when 
thoy nood to b e dono. Thoso tasks ar e p e rformed by the CPU whon thoro aro no pending higher 
5 prior i ty tasks. As the SoPEC CPU i s e xp e ct e d to b e li ghtly loaded thoso tasks w i l l mostly bo 
executed soon aft e r th e y ar e scheduled. 
44r4 Bu s Protocols 

As can bo soon from F i gure 1 5 above ther e ar e diff e r e nt bus e s i n the CPU block and diff e r e nt 
protoco l s are used for each bus. Thoro are thre e buses i n operat i on: 

10 44.4.^1 AHB bus 

Th e LEON CPU coro us e s an AMBA2.0 AHB bu s to commun i cat e with m e mory and p e r i ph e rals 
(usually via an ARB br i dge). S e c the AMBA sp e cification [38], sect i on 5 of th e LEON us e rs manual 
[37] and s e ction 1 1 .6.6.1 of this document for mor e details. 
44.4.3 CPU to DIU bus 

15 Th i s bu s conforms to the D I U bus protoco l d e scribed i n Section 20.1 4 .8. Not e that th e addr e ss bus 
used for DIU roads (i.e. cpujadr(21:2)) is also that us e d for CPU subsyst e m w i th bus acc e ss e s 
whi le th e writ e address bus {cpu_diu_wQdr) and the r e ad and writ e data buses {dram^cpu^data and 
cpu_diu_wdQtQ) are pr i vat e bus e s b e twe e n th e CPU and th e D I U. Th e e ffect i v e bus w i dth diff e rs 
botwoon a road (256 bits) and a wr i te (128 bits). As certain CPU instruct i ons may requ i re byto write 

20 access this wil l n e ed to bo support e d by both th e DRAM write buff e r (in th e AHB br i dg e ) and the 
D I U. See sect i on 1 1 .6.6.1 for moro details. 
11.4.3 CPU Subsyst e m Bus 

For acc e ss to the on chip per i phera l s o s i mple bus protoco l i s used. Tho MMU must first determin e 
which part i cular block is b e ing addressed (and that the access is a valid on e ) so that th e 

25 appropriat e b l ock se l ect s i gnal can b e g e nerat e d. During a writ e acc e ss CPU wr i t e data i s dr i v e n 
out w i th th e addr e ss and block se le ct signals i n tho first cycle of on access. The addressed slave 
p e r i pheral responds by ass e rt i ng i ts ready s i gnal ind i cating that it has r e gistered the wr i te data and 
th e acc e ss can comp l ete. Tho wr i to data bus i s common to a ll p e r i phera l s and is a l so usod for CPU 
wr i t e s to tho embedded DRAM. A read acc e ss i s i nitiat e d by driv i ng tho addr e ss and s e l e ct s i gna l s 

30 during tho first cyc l e of an access. Tho addressed slav e responds by p l acing th e r e ad data on i ts 
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bus and asG e rting its ready signal to i nd i cato to tho CPU that th e r e ad data is valid. Each b l ock has 
a Goparato po i nt to point data bus for r e ad accesses to avo i d tho nood for a tr i statoablo bus. 
A ll poriphora l acc e ss e s ar e 32 - b i t (Programm i ng noto: char or short C typ e s shou l d not bo usod to 
acc e ss p e ripheral reg i st e rs). Tho us e of th e r e ady s i gnal a l lows th e access e s to b e of var i ab l e 
5 le ngth. I n most cases acc e ss e s w ill comp le t e in two cyc le s but thr e e or four (or mor e ) cycl e s 

accesses ar e li k e ly for PEP b l ocks or I P b l ocks with a diff e r e nt nat i v e bus interfac e . A ll PEP b l ocks 
aro accoGSod v i a tho PCU wh i ch acts as a bridge. Th e PCU bus us e s a simi l ar protoco l to the CPU 
subsystem bus but w i th tho PCU as tho bus master. 

Tho durat i on of acc e ss e s to th e PEP blocks i s i nfluenc e d by whether or not th e PCU is e x e cuting 
10 commands from DRAM. As these commands aro essent i ally rogistor wr i tes tho CPU access will 
nood to wait until tho PCU bus b e comes availab l o when a r e gist e r access has been compl e t e d. 
This cou l d le ad to th e CPU b e ing sta l led for up to 4 cycl e s if i t att e mpts to access PEP blocks whi l e 
th e PCU Is e x e cut i ng a command. Th e size and probab il ity of this p e na l ty i s suffici e ntly sma l l to 
hav e any signif i cant i mpact on porformanco. 
15 I n ord e r to support user mod e ( i . e . OEM code) acc e ss to c e rtain p e riph e ra l s th e CPU subsystem 

bus propagat e s th e CPU function code signa l s {cpu_aood e [1 :0]). Th e se signa l s indicat e th e typ e of 
addr e ss space (i.e. Us e r/Sup e rvisor and Program/Data) being accessed by tho CPU for oach 
acc e ss. Each por i phora l must dotormino whether or not tho CPU is i n the corr e ct modo to be 
grant e d acc e ss to its r e gist e rs and in some cas e s (e.g. Timers and GPIO b l ocks) difforont a cc o sG 
20 permissions can apply to d i ff e r e nt r e gisters w i thin tho block. I f th e CPU i s not in th e corr e ct mod o 

th e n the violation i s flagg e d by ass e rting th e b l ock's bus e rror signa l {block_cpu_b e rr) with the same 
t i ming as i ts r e ady s i gnal (block_cpu_rdy) which r e ma i ns d e ass e rted. When this occurs i nva l id read 
acc e ss e s shou l d r e turn 0 and wr i t e accesses shou l d have no offoct. 

F i gur e 16 shows two e xamp le s of th e p e r i ph e ral bus protocol In act i on. A wr i t e to th e LSS b l ock 
25 from code runn i ng i n supervisor mode is successful l y compl e t e d. Th i s is i mmed i at el y fol l owed by a 

r e ad from a PEP block v i a th e PCU from cod e running i n user modo. As th i s typ e of acc e ss i s not 

permitted th e acc e ss is term i nat e d with a bus e rror. Th e bus error exc e pt i on proc e ssing then starts 

direct l y after this — no further acc e ss e s to th e p e riph e ral shou l d bo requ i red as th e exc e pt i on handl e r 

should be located in the DRAM. 
30 Each p e r i ph e ra l acts as a s l avo on tho CPU subsystom bus and its b e havior is d e scr i bed by the 

state mach i n e in s e ct i on 1 1 . 4 .3.1 

11.4.3.1 CPU eubeyctem bus sl a v e stat e machin e 

CPU subsystom buG olavo operation is described by the state machine in F i gure 1 7.Th i s stat e 
mach i n e w ill be imp l emented in oach CPU subsystem bus slav e . Th e only new s i gna l s ment i on e d 

35 horo aro tho validjacGOGS and rogjoivailablo signals. Tho valldjaccesG is d e t e rmin e d by comparing 
th e GpujQGOdo va l ue w i th tho block or r e g i ster ( i n the case of a block that a ll ow user acc e ss on a 
per rogistor basis such as tho GP I O block) accoss permissions and ass e rting validjaccoeG if tho 
perm i ssions agroo with th e CPU mod e . Tho rog_avQilQblo s i gnal i s only requ i red i n the PCU or i n 
b l ocks that ar e not capable of two - cycl e access (e.g. blocks containing imported IP with d i fferent 

40 bus protoco l s). I n thoGO blocks the reg^availabio signa l is an int e rna l signal usod to insert wa i t 
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stat e s (by dolaying th e ass e rtion of block_cpu_rdy) unt il the CPU bus slav e i nterfac e can ga i n 
acc e ss to tho rogistor. 

Wh e n r e ad i ng from a reg i ster that is l oss than 32 b i ts w i d e th e CPU subsystoms bus siavo should 
r e turn zeroes on the unus e d upper b i ts of th e block_cpu_data bus. 
5 To support debug mode th e contents of th e reg i st e r s e l e ct e d for d e bug observat i on, dpbugjrog, are 
a l ways output on tho blookjopujdlQtQ bus whonovor a read access i s not tak i ng plaoo. Soo soction 
1 1 .8 for moro deta il s of d e bug op e rat i on. 
11.5 LEON CPU 

Tho LEON procossor is an open souroo i mplomontation of tho I EEE 175^ standard (SPARC V8) 
10 instruct i on set. LEON Is available from and active l y supported by Gaislor Rosoarch 
(www.gais l or.com). 

Th e fol l owing f e atures of th e LEON 2 proc e ssor will b e ut ili s e d on SoPEC: 

^ I EEE 1751 (SPARC V8) compatibl e i nt e g e r un i t w i th 5 - stag e p i p e lin e 

15 Separat e instruct i on and data cach e (Harvard arch i t e cture). 1 kbyt e d i rect mapped caches 

wil l be used for both. 
Fu ll i mp l em e ntation of AMBA 2.0 AHB on chip bus 

The standard roloaso of LEON incorporat e s a numb e r of poriphorals and support b l ocks which will 
not b e inc l ud e d on SoPEC. Th e LEON cor e as us e d on SoPEC wil l consist of: 1) th e LEON i nt e g e r 
20 un i t, 2) th e i nstruction and data cach e s (curr e ntly 1kB e ach), 3) th e cach e control log i c, 4 ) th e AHB 
i nt e rfac e and 5) possibly tho AHB contro l ler (although this funct i onal i ty may bo i mplomontod i n tho 
LEON AHB bridg e ). 

Tho version of tho LEON database that tho SoPEC LEON components will bo sourcod from is 

LEON2 1 .0.7 although l at e r v e rsions may b e us e d i f th e y off e r worthwhi le functionality or bug fix e s 
25 that affoct th e SoPEC d e s i gn. 

Th e LEON core w il l be clocked us i ng th e s ystem clock, pclk, and reset us i ng th e prBt_njBOCtion[1] 

signal. Th e I CU w i ll ass e rt a ll th e hardwar e int e rrupts us i ng th e protoco l d e scr i b e d in s e ction 1 1 .9. 

Th e LEON hardwar e multip l i e rs and floating po i nt unit are not required. SoPEC wi l l use tho 

recommended 8 r e gist e r window conf i guration. 
30 Further detai l s of the SPARC V8 instruct i on s e t and tho LEON procossor can b e found i n [36] and 

[37] r e sp e ctive l y. 

44T^r1 LEON R e g i sters 

On l y two of th e registers descr i bed i n tho LEON manua l aro i mplomontod on SoPEC th e LEON 
conf i gurat i on r e gister and th e Cach e Contro l R e g i st e r (OCR). Th e addr e ss e s of th e se r e gist e rs ar e 
35 shown i n Tab l e 16. Tho configurat i on r e g i st e r bit fie l ds are d e scr i b e d be l ow and tho OCR i s 
d e scr i b e d in sect i on 1 1 .7.1 .1 . 
11.5.1.1 LEON configuration rogistor 

Tho LEON configurat i on r e gist e r al l ows runtim e software to determ i n e th e s e ttings of LEONs 
var i ous configurat i on opt i ons. Th i s i s a r e ad on l y register whoso valu e for th e SoPEC ASIC w i ll b e 
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Ox1071_8COO. Further descript i ons of many of tho bitfields can bo found in th e LEON manua l . Tho 
valu e s usod for SoPEC ar e high li ghted in bo l d for c l arity. 
Table 16. LEON Conf i guration R e g i st e r 



Field Name 



Descr i pt i on 



Wr i toProtoction 



Wr i t e protect i on type. 
80 — non e 



OA — standard 



PCICor e 



PC I cor e typ e 
00 — non e 



0^ — I nSil i con 



1 0 ESA 



1 Other 



FPWype 



FPU typo. 
00 — Rene 



01 — ^4eike 



M e mStatus 



6 



0 - No m e mory status and fa i l i ng addr e ss r e gist e r pr e s e nt 
1 — M e mory status and fa il ing addr e ss r e gist e r pr e s e nt 



Watchdog 



0 - Watchdog tim e r not pr e s e nt (Not e this r e f e rs to tho LEON 
watchdog timor i n th e LEON tim e r b l ock). 



Watchdog t i m e r pr e sent 



UMUL/SMUL 



0 — UMUL/SMUL i nstruct i ons are not i mplomontod 



UMUL/SMUL instructions ar e impl e m e nt e d 



UD I V/SDIV 



9 



0 — UMUL/SMUL instruct i ons ar e not imp l emented 

1 — UMUL/SMUL instructions are Imp le m e nt e d 



11:10 Data cach e l in e s i z e i n 32 bit words: 



00 1 word 



01 — 2 words 



10 4 words 



4-1 — 8 words 



Data cach e size in kBbytos - 2^ ^ ^ SoPEC DCSZ - 0 



DQSZ 



44^42 



I nstruct i on cach e l i n e s i ze in 32 b i t words: 



00 — 1 word 



0^1 — 2 words 



40 — 4 words 



4-1 — 8 words 



I nstruct i on cache s i ze i n kBbyt e & ^*^T ^PEC ICSZ - 0. 



R e gW i n 



2 4 :20 Th e i mp le m e nt e d numb e r of SPARC reg i st e r w i ndows — 4-= 



SoPEC va l u e - 7. 
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UMAC/SMAC 



2§ 



0 — UMAC/SMAC instructions aro not i mp l omontod 



A — UMAC/SMAC instruct i ons ar e impiomontod 



Watchpo i nts 



2Sm 



Tho imp l em e nt e d number of hardware watchpoints. SoPEC va l u e 



SDRAM 



29 



0 - SDRAM contro l ler not prosont 



1 — SDRAM control l or prosont 



Dsy 



30 0 — Debug Support Unit not pr e sent 



Debug Support Un i t pr e s e nt 



Rosorvod 



34- Res e rved. SoPEC va l u e - 0. 



^AS Memory Management Unit (MMU) 

Memory Managem e nt Units ar e typ i ca ll y used to prot e ct c e rta i n r e gions of memory from invalid 
acc e sses, to p e rform addr e ss translat i on for a virtua l memory syst e m and to maintain memory page 
5 status (swapped in, swapp e d - out or unmapped) 

Th e SoPEC MMU is a much s i mp le r affair whos e function is to e nsur e that a ll r e gions of th e SoPEC 
m e mory map aro adequat e ly prot e ct e d. Th e MMU do e s not support v i rtual m e mory and physical 
addr e ss e s aro used at a l l times. Th e SoPEC MMU supports a fu l l 32 - b i t addr e ss space. Th e 
SoPEC m e mory map i s d e picted i n F i gur e 1 8 b e low. 

10 Th e MMU selects th e rel e vant bus protoco l and g e n e rates the appropr i ate contro l signals 

depend i ng on tho area of m e mory be i ng acc e ss e d. Th e MMU is r e sponsible for performing the 
addr e ss d e cod e and g e n e rat i on of th e appropr i at e b l ock se le ct sign a l as w el l as the select i on of th e 
correct b l ock road bus during a r e ad acc e ss. The MMU wil l need to support al l of th e bus 
transactions tho CPU can produce i ncluding i nterrupt acknowledge cycles, aborted transact i ons etc. 

15 Whon an MMU orror occurs (such as an attempt to acc e ss a sup e rv i sor mod e on l y reg i on when i n 
us e r modo) a bus e rror is g e n e rat e d. Wh ile the LEON can r e cognis e diff e r e nt typ e s of bus e rror 
(e.g. data store orror, instruction access e rror) i t handl e s th e m in th e sam e mann e r as it handl e s a ll 
traps i . e it w ill transf e r control to a trap handler. No extra stat e informat i on is b e stor e d b e caus e of 
tho nature of th e trap. Th e l ocat i on of th e trap handler i s conta i n e d i n th e TBR (Trap Bas e R e gist e r). 

20 This i s th e same mechanism as is us e d to handle interrupts. 
11.6.1 CPU bus periph e rals address map 

Th e address mapping for tho per i ph e rals attached to the CPU bus i s shown i n Tab l e 1 7 b e low> The 
MMU performs tho decod e of th e high order b i ts to generat e th e r e l e vant cpu_block_s e l e ct signa l . 
Apart from tho PCU, wh i ch decod e s th e addr e ss space for the PEP blocks, e ach block on l y n ee ds 
25 to d e cod e as many b i ts of cpu_Qdr[11:2] as requ i red to addr e ss all tho registers w i thin th e b l ock. 
Tabl e 17. CPU bus poriphorals addroso map 



Block_base 


Address 


ROM base 


0x0000^0000 


MMU boGO 


lOxOOOl 0000 
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UXUUU 1 _ 1 UllVJ 


Loo_Daso 


UXUUU 1 _JtiUUU 




UXUUU 1 _aUUU 


oop_Dase 


HvAAA-L VlAAA 

UXUUU 1 _4UUU 


loU DuSS 


AvAAAi GAAA 

UXUUU 1 __ouuu 




AwAAA-l CAAA 


DiU_baso 


0x0001 7000 


PSS_baGO 


0x0001 8000 


Reserved 






0x0001,9000 to 0x0001 _FFFF 


PCU boso 


0x0002_0000 



11.6.2 DRAM Reg i on Mapping 

The e mboddod DRAM is broken i nto 8 reg i ons, with e ach r e g i on d e f i ned by a lower and uppor 
bound addr e ss and with i ts own acc e ss p e rm i ssions. 

The assoc i ation of an ar e a i n th e DRAM address space w i th a MMU reg i on i s comp i ot e ly und e r 
5 software control. Tab l o 18 b el ow giv e s on e possib l e region mapping. R e g i ons should be defined 
accord i ng to the i r acc e ss r e qu i r e m e nts and posit i on i n m e mory. Regions that shar e th e some 
access roquiromonts and that ore contiguous i n memory may bo comb i ned i nto a s i ngle region. The 
e xamp l e b e low is pur e ly for i ndicat i ve purpos e s — r e a l mappings ar e l il < e ly to diff e r sign i ficantly from 
th i s. Not e that th e R e gienBottom and R e g i onTop fi el ds in this example i nclude tho DRAM base 
10 address offset (Ox^OOO_0000) wh i ch i s net r e quired wh e n programm i ng tho R e gionNTop and 
RegionNBottom registers. For more deta i ls, see 11.6.5.1 and 11.6.5.2. 
Table 18. Exampl e r e gion mapping 



RegioB 



R e g i onBottom 



0x1000 OOQQ 



0x^000 1000 



0x1000 COGO 



0x1000 CIOO 



§ 



6 



0x1000 OFFF 



0x1000 BFFF 



0x1000 C3FF 



0x1000 CFFF 



0x1026 DOOO 



0x1026 D100 



0x1027 EOOO 0x1027 FFFF 



0x1000 DOOO 



R e g i onTop 



S il v e rbreok OS (sup e rv i sor) data 



Si l vorbroek OS (sup e rv i sor) cod e 



S il verbrook (superv i sor/user) data 



S i lverbrook (superv i sor/user) code 



0x1026 D3FF 



0x4026_DFFF OEM (user) code 



Descr i ption 



OEM (user) data 



Shared S il verbrook/OEM space 



Ox1026_CFFF Compressed — pag e — stor e — (sup e rvisor 



data) 



11.6.3 Non DRAM regions 

15 As shown I n Figure 18 the DRAM occup i es on l y 2.5 MBytes of th o total 1 GB SoPEC addroco 
space. The non DRAM r e g i ons of SoPEC ar e hand le d by tho MMU as fol l ows: 
ROM (OxOOOO_OOOQ to OxOOOO_FFFF): The ROM block wi ll control th e acc e ss typ e s al l owed. The 
cpujacod e [1:0] signals w ill i nd i cate tho CPU mode and access typ e and the ROM block w ill ass e rt 
romjopujborr s^ckn attempted access is forbidden. Th e protoco l is d e scribed I n more detai l in 
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soGtion 1 1 . 4 .3. Tho ROM b l ock aocoso perm i ssions arc hard w i red to a ll ow a ll road acGOSSOs 
oxGopt to tho FuGoChipID rog i stors which may on l y be r e ad i n sup e rvisor mod e . 
MMU I ntornal R e gisters (Ox0001_0000 to Ox0001_OFFF): The MMU is respons i bl e for contro l l i ng 
tho aoGOSQos to i ts own intornal rog i stors and wil l on l y allow data roads and wr i tes (no i nstruct i on 
5 f e tches) from superv i sor data spac e . A ll othor accesses wil l resu l t i n the mmujopujyerr signal 
. boing assert e d in accordanc e with th e CPU nat i ve bus protocol. 

CPU Subsystem Poriphoral Regist e rs (Ox0001_1000 to OxOOQ1_FFFF): Each p e r i ph e ra l block wil l 
control th e acc e ss types a l low e d. Every p e riph e ral w i ll a ll ow sup e rv i sor data acc e ss e s (both r e ad 
and wr i te) and some b l ocks (e.g. Timers and GP I Q) w ill also al l ow user data space aocossos as 
10 outlin e d i n the relevant chapt e rs of th i s sp e cificat i on. Ne i ther superv i sor nor us e r i nstruct i on f e tch 
acGessos ore a l lowed to any block as it i s not poss i ble to execute code from periphera l regist e rs. 
Th e bus protocol is described i n s e ction 1 1 . 4 .3. 

PCU Moppod Rogistors (0x0002_0000 to 0x0002_BFFF): All of tho PEP blocks rogistors wh i ch are 
access e d by the CPU via th e PCU w ill i nh e rit th e acc e ss p e rmissions of th e PCU. Th e s e acc e ss 
15 permissions aro hard wired to a ll ow supervisor data accesses only and tho protoco l usod i s tho 
sam e as for th e CPU p e r i ph e rals. 

Unused address space (0x0002_C000 to Qx3FFF_FFFF and 0x^028_0000 to OxFFFF_FFFF): All 
accesses to the unus e d portion of th e addr e ss spac e w i ll r e sult I n th e mmu_cpu_borr B\gx\o\ b e ing 
ass e rted i n accordance with the CPU native bus protocol. These accesses wil l not propagate 
20 outside of the MMU i .e. no e xterna l access w il l be initiated. 

11.6. 4 R e set except i on vector and reforonco zero traps 

Wh e n a res e t occurs tho LEON proc e ssor starts e xecut i ng code from addr e ss OxOOOO_0000. A 
common softwar e bug is zero referencing or null po i nter de referenc i ng (where the program 
att e mpts to acc e ss tho contents of address OxOOOO__0000). To assist softwar e debug th e MMU w il l 
25 assert a bus e rror every tim e th e l ocat i ons OxOOOO_0000 to OxOOOO_OOOF (I.e. tho first 4 words of 
th e r e s e t trap) ar e accessed after the res e t trap handl e r has l e g i timately b e en retrieved i mm e d i at el y 
aft e r r e s e t. 

11.6.5 MMU Configuration Regist e rs 

Th e MMU configuration r e gist e rs include the RDU configurat i on registers and two LEON reg i st e rs. 
30 Not e that al l the MMU configuration r e g i sters may only be accessed when th e CPU i s runn i ng i n 
supervisor mode. 

Tab l e 10. MMU Configuration R e gist e rs 





Ml .m\ A ,^.,miL 






QxQQ 



R e gionOBottom[21 :5 
\ 



4^ 



0x0 000 



0 



Th i s regist e r conta i ns tho physica l addr e ss that 
marks th e bottom of region 0 



R e glonOTop[21 :5] 



4^ 



OxF_FFF Th i s reg i ster contains the phys i ca l address that 



marks tho top of r e gion 0. Reg i on 0 covers the 
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entire address space after reset whereas all 




other roglons are zero sized initially. 


0x08 


Rogioni Bottom[21 :5 


47 


OxF-PFF 


This register contains tho physical address that 


] 




F 


marks the bottom of region 1 


QxOC 


Rogioni Top[21:5] 


47 


0x0 000 






0 


This rogistor contains the physical address that 

marks tho top of region 1 


0x40 


Rogion2Bottom[21 :5 


47 






} 






This register contains the physical address that 
marks tho bottom of region 2 


0x44 


Rogion3Top[21 :5] 


47 


OxO_000 






0 


This register contains the physical address that 
marks the top of region 2 


0x48 


Rogion3Bottom[21 :5 


47 


OxF FFF 


This register contains tho physical address that 


1 




c 






Rogion3Top[21:5] 


47 


0x0 000 






0 


This rogistor contains the physical address that 
marks tho top of region 3 


0x20 


Rogion4Bottom[21 :5 


47 


OxF FFF 


This register contains tho physical address that 


I 




F 


marks the bottom of region 4 


0x24 


Region4Top[21 :5] 


47 


0x0 000 
0 


This register contains the physical address that 
marks the top of region 4 


0x28 


Rogion5Bottom[21 :5 


47 


OxF FFF 




1 




F 


This register contains the physical address that 
marks the bottom of region 5 


0x2G 


Rogion5Top[21 :6] 


47 


0x0 000 








0 


This register contains tho physical address that 
marks the top of region 5 


0x30 


Region6Bottom[21 :5 


47 


OxF FFF 


This register contains the physical address that 


1 




F 


marks the bottom of region 6 


0x34 




47 


0x0 000 




RegiQn6Top[21 :5] 


0 


This register contains tho physical address that 
marks tho top of region 6 




Rogion7Bottom[21 :5 


47 


OxFJFF 




1 
\ 






This register contains tho physical addross that 


0x3C 


Region7Top[21 :5] 


47 




This register contains the physical address that 




0x0_000 
0 


marks the top of region 7 


0x^0 




a 

e 


UXu/ 




Kogiormuontroi 


Control register for region 0 




: j 

Rogioni Control 


e 




j ; ; 

Control register for region 1 








0x48 


Kegionzcontroi 


e 


UXW f 


Control register for region 2 


0x4G 




/> 
e 






Kegionouontroi 


Control register for region 3 


Ox§0 




ft 






r\tgy ivji iH-oijn irui 




0x§4 


RegionSControl 


g 


0xQ7 






Control register for region 5 


Ox§8 


Region6Control 


6 




Control register for region 6 






Ox§G 


Region7Control 


@ 


0x07 






Control register for region 7 


0x60 


RegionLock 


8 








Writing a 1 to a bit in the RegionLock rogistor 
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locl<s the value of tho corresponding Region 
Top, RegionBottom and ReglonControl regis 


ters. The lock oan only bo oloarod by a reset 


and any attempt to writo to a looked register will 


result in a bus orror. 




BusTimeout 


g 




This register should be set to the number of 




pclk cycles to wait after an access has started 


before aborting the access with a bus error. 




Writing 0 to this register disables the bus time 
out feature. 




ExceptionSource 


§ 




This register identifies the source of the last 






exception. See Section 1 1 .6.5.3 for details. 


QxQC 


DebugSeleot 




Q^QQ 






Contains address of the register selected for 


debug observation. It is expected that a number 
of pseudo-registers will be made available for 


debug obsorvatlon and those will bo outlined 


during the Implementation phase. 




0x80 to 








See Table — for details. 


UXIuo 


RDU Registers 




0^^440 


LEON Configuration 




0x1071 


The LEON configuration register is used by 








a-Goo 


software to determine the configuration of this 


Rogistor 




LEON implementation. See section 11.5.1.1 for 


details. This register is Readonly. 




0)(444 


LEON Cacho 


32 


0x0000 
0-060 


The LEON Cache Control Register is used to 


Control Register 




control the operation of the caches. See section 
1 1 .6 for details. 



11.6.6.1 Region Top and R e gionBottom regist e rs 

Tho 20 Mbit of embedded DRAM on SoPEC i s arrang e d as 81020 words of 256 bits each. A ll 
reg i on boundaries neod to align with a 256 bit word. Thus only 17 bits are required for the 
5 R e gionNTop and R e glonNBottom r e g i st e rs. Not e that tho bottom 5 bits of th e RegionNTop and 
R e gionNBottom r e g i st e rs cannot b e wr i tt e n to and read as '0' i.e. th e RegionNTop and 
R e gionNBottom r e gist e rs roprosont byt o a l igned DRAM addrosoes 

Both tho RegionNTop and RegionNBottom reg i st e rs ar e i nc l usiv e i.e. the addresses in the registers 
are included i n tho reg i on. Thus the s i ze of a region i s {R e gionNTop - RegionNBottom) +1 DRAM 
10 words. 

If DRAM reg i ons overlap (there i s no reason for th i s to b e th e case but there is nothing to prohibit i t 
ei ther) then only acc e sses a ll ow e d by a ll over l apping r e gions ar e p e rm i tted. That is if a DRAM 
address appears i n both Rog i oni and Reg i ons (for examp l e) tho cpujacode of an access i s 
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ch e cked against tho acc e ss pormissions of both r e g i ons. I f both r e gions pormit the access thon i t 
w i l l proc ee d but i f oithor or both regions do not permit th e access th e n i t w i ll not bo a l low e d. 
Tho MMU does not support nogativo l y sized regions i .e. tho value of th e RogionNTop register 
shou l d always be greater than or equal to tho value of th e R e gionNBottom register. I f RegionNTop 
5 i s lower i n tho address map than RogionNTop thon tho region I s oonsidorod to b e z e ro - s i z e d and i s 
i gnor e d. 

Whon both tho RogionNTop and R e gionNBottom registers for a region conta i n th e sam e va l u e th e 
region i s then simp l y on e 256 - bit word in l ength and this corresponds to th e smal l est poss i ble act i ve 
reg i on. 

10 11.6.6.2 R e gion Controi r e gisters 

Each memory region has a control rog i stor associated with i t. Tho RogionN Control reg i ster i s used 
to set the access cond i t i ons for the memory region bounded by th e R e gionNTop and 
RegionNBottom r e g i st e rs. Tab le 20 d e scribes the function of each bit f iel d in th e R e gionNControl 
regist e rs. Al l b i ts i n a R e gionNControl r e gist e r ar e both r e adab le and writable by design. However, 

15 lik e a ll r e gist e rs in th e MMU, the R e gionNControl registers can on l y bo accossod by code running in 
supervisor mode. 

Tab l e 20. Reg i on Contro l Rogistor 



SupervisorAccess 



Field Name . 



Us e rAcc e s 



240 



D e not e s th e typ e of acc e ss a ll owed whon tho CPU i s 
runn i ng i n Sup e rvisor mode. For e ach acc e ss typ e a 1 



acc e ss is not p e rmitt e d. 

bitQ — Data r e ad acc e ss p e rm i ss i on 



D e scr i [>tipn 



indicat e s th e access is permitted and a 0 i nd i cates the 



— Data write acc e ss p e rmission 

b4t2 — I nstruction f e tch acc e ss p e rm i ss i on 



Donotos tho typo of acc e ss a ll ow e d when th e CPU i s 



running in User mod e . For e ach acc e ss typo a 1 i ndicates 



the access is permitt e d and a 0 i ndicates tho access is not 



p e rm i tted. 

brt3 — Data road aoc o sG perm i ss i on 



b4t4 — Data writ e access permiss i on 



bits — I nstruct i on fetch access permiss i on 



11.6.6.3 Exo e ptionSourc e R e gister 

20 Th e SPARC V8 arch i tecture al l ows for a number of typ e s of m e mory acc e ss e rror to b e trapp e d. 

Th e s e trap typ e s and trap hand li ng in genera l ar e d e scrib e d i n chapt e r 7 of th e SPARC arch i tectur e 
manua l [36]. How e ver on the LEON procossor on l y dQtQ_ctoro_orror Qn6 datQ^QCcoccjoxooption 
trap typos wi l l result from an externa l (to LEON) bus error. Accord i ng to th e SPARC arch i tectur e 
manua l tho processor w i ll automatically movo to tho next rog i stor window ( i . e . i t docromonts th e 

25 current window po i nt e r) and copies tho program counters (PC and nPC) to two l oca l registers in th e 
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new w i ndow. Th e sup e rv i sor bit in th e PSR i s also s e t and th e PSR can b e sav e d to anoth e r l oca l 
r e g i ster by th e trap hand l er (this does not happen automat i caily in hardware). Tho ExcoptionSouroo 
r e gist e r a i ds th e trap handl e r by I d e ntify i ng th e sourc e of an e xception. Each bit i n the 
Exc e ptionSourc e reg i st e r i s s e t wh e n th e r el evant trap cond i t i on and shou l d bo cloorod by tho trap 
5 hand le r by wr i t i ng a '1' to that b i t pos i tion. 

Tabl e 21. Exc e pt i onSourc e R e gister 



P e riAccessExcptn 



Fie l d Nam e 



DramAcc e ssExoptn 



Q 



Unus e dAr e aExcptn 



LockodWritoExoptn 



Tim e outExcptn 



brt{s) 



Tho pormiss i ons of an oooeoG did not match thoso of tho DRAM 



r e g i on it was att e mpting to accoss. This bit w i ll also b e set if an 
att e mpt is mad e to access an undefined DRAM region (i.e. a loca 



tion that is not w i th i n tho bounds of any RogionTop/RogionBottom 



An access violat i on occurr e d wh e n acc e ss i ng a CPU subsystem 
block. Th i s occurs when tho access p e rmissions d i sagre e with 



thoso sot by tho block. 



3 



Doscr i pt i on 



An att e mpt was mad e to acc e ss an unus e d part of th e memory 



rvi «nr\ 



An attempt was mad e to writ e to a r e gions r e gisters (Rog i onTop/ 
Bottom/Control) aft e r th e y had boon l ock e d. 



R e setHandlorExcptn 4 An att e mpt was mad e to acc e ss a ROM l ocation b e tw e en 



0x0000 0000 and 0x0000 OOOF aft e r th e r e s e t hand le r was e x e- 



cuted. The most li kely cause of such an acc e ss i s the us e of an 
unin i tial i sed po i nter or structuro. 



5 A bus t i m e out condit i on occurr e d. 



11.6.6 MMU Sub block part i t i on 

As can be seen from F i gur e 19 and Figur e 20 th e MMU cons i sts of three princ i pa l sub b l ocks. For 
10 c l arity th e connoctions between thoso sub blocks and other SoPEC blocks and botwoon each of tho 
sub blocks ar e shown i n two s e parat e diagrams. 
11.6.6.1 LEON AHB Bridgo 

Th e LEON AHB bridge consists of an AHB br i dg e to DID and an AHB to CPU subsyst e m bus 
br i dg e . Th e AHB br i dge w i ll conv e rt b e tween the AHB and tho D I U and CPU subsystem bus 

1 5 protoco l s but tho addr e ss decoding and enab l ing of an acc e ss happ e ns e ls e wh e r e i n th e MMU. Th e 
AHB br i dg e will always be a slave on th e AHB. Note that tho AMBA s i gnals from tho LEON core aro 
conta i n e d w i th i n th e ahbso and ahbs l r e cords. Tho LEON records aro d e scr i b e d in more detai l i n 
s e ct i on 1 1.7. G l u e log i c may b e r e qu i r e d to assist w i th e nab li ng memory accesses, e nd i ann e ss 
coh e r e ncy, i nterrupts and oth e r m i scol l an e ous signal l ing. 

20 Tab l e 22. LEON AHB br i dgo I/Og 
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Port name 



D e scr i pt i on 



G l oba l SoPEC signals 



prst__n 



Global r e set. Synchronous to pclk, aot l vo l ow. 



Global c l ock 



LEON core to LEON AHB signa l s (ahbs i and ahbso rocords) 



ahbs i .haddr[31 :0] 



32 



AHB address bus 



ahbs l .hwdata[31:0] 



32 



AHB wr i te data bus 



ahbso.hrdata[31 :0] 



32 



Out 



AHB road data bus 



ahbs i .hs el 



AHB slovo soloct signa l 



ahbs i .hwrit e 



In 



AHB write s i gna l : 
1 — Writo OGCOSS 



0 — R o ad acc o GC 



ahbs l .htrons 



Ind i cates tho typo of tho curr e nt transfer: 
00 IDLE 



01 BUSY 



0 NQNSEQ 



1 SEQ 



ahbsi. hsizo 



In 



I ndicates tho size of tho current transfer: 



000 Byte transfer 



001 — Ha l fword transf e r 



010 ■ Word transfer 



04-1 — 6 4- blt transf e r (unsupported?) 

XX - Unsupported larger wordsiz e s 



ahbs i . hburst 



Indicat e s if th e curr e nt transfer forms part of a 
burst and the typo of burst: 
000 S I NGLE 



001 INCR 



010 WRAP^ 



011 I NCR1 



100 WRAPS 



101 INCR8 



110 WRAP16 



111 INCRie 



ahbs i .hprot 



If^ 



Prot e ction contro l s i gna l s perta i n i ng to tho 
curr e nt access: 



hprot[0] Opcode(O) / Data(1 ) acces 
hprot[1] — Usor(O) / Sup e rvisor acc e s 



hprot[2] Non - buff e rablo(O) / Buff e rab le (1 ) 
acc e ss (unsupported) 
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access 



hprot[3] — Non cacheab le (Q) / Caoheabl o 



ahbsi.hmast e r 



In 



Indicatos tho i dontity of tho curr e nt bus mastor. 



This w i l l a l ways bo th e LEON core. 



ahbs i .hmastlock 



Indicatos that th e curr e nt mastor i s p e rform i ng 
a l ooked s e qu e nc e of transfers. 



ahbso.hready 



Out 



Act i ve high ready signa l i ndicating tho accoos 



has compl e t e d 



ahbso.hr e sp 



Qiif 



I ndicatos th e status of tho transfer: 



09- 
M- 


OKAY 
ERROR 


W- 


RETRY 


44- 


SPLIT 



ahbso.hspl i t[1 5:0] 



4€ 



Out 



Th i s 16 bit sp l it bus i s us e d by a slav e to 
ind i cat e to th e arbiter which bus masters shou l d 



be allowed att e mpt a sp l it transact i on. Th i s 



f e ature wi l l b e unsupported on th e AHB bridge 



Topl e v e l/ Common LEON AHB bridg e s i gna l s 



cpu_dataout[31 :Q] 



3 2 Qui 



Data out bus to both DRAM and por i phora l 

d e vices. 



opu_rwn 



Oi it 



R e ad/NotWr l t e s i gna l . 1 ~ Current accoss i s a 



read acc e ss, 0 ~ Current access i s a write 



acc e ss 



icu_cpujlovol[3:0] 



An i nt e rrupt i s ass e rt e d by dr i v i ng th e 
appropriat e pr i ority l e ve l on icu_cpu_ilovoL 



Th e s e signals must r e main assorted unti l the 
CPU oxocutos an i nterrupt acknowlodgo cyc l e. 



I nd i catos tho l evel of tho interrupt tho CPU is 



cpujcuj l eve l [3:0] 



acknowl e dging wh e n cpu^iack i s h i gh 



opujack 



Out 



I nt e rrupt acknowl e dg e signa l . Th e e xact t i m i ng 



depends on tho CPU core i mp l ementation 



opu_start_acc e ss 



Out 



Start Acc e ss s i gnal i ndicating th e start of a data 



transf e r and that the cpu_ a dr, cpujdiataout, 
cpu_rwn and cpu_acodo s i gnals ar e a l l va l id. 



This s igna l is on l y ass e rt e d during th e first 
cycl e of an acc e s 



opu_b e n[1 :0] 



Out 



Byte enable signals. 



dram_cpu_data[255:0] 



255 



(n 



Road data from the DRAM. 



diu_cpu_rreq 



Out R e ad r e quest to th e D I U. 
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d i u_cpu_rack 



Acknowl e dg e from DIU that r e ad r e qu e st has 



boon aoooptod. 



d i u_Gpu_rva l id 



S i gnal from D I U i ndicat i ng that va li d r e ad data 



is on tho dramjcpujdata bus 



cpu_diu_wdatava l id 



S i gnal from the CPU to the D I U i ndicating that 
th e data curr e nt l y on th e cpu_diu_wdat a bus Is 



valid and shou l d b e committ e d to th e D I U 



posted writ e buff e r 



diu_cpu_writo_rdy 



S i gnal from tho D I U i nd i cat i ng that tho postod 



write buffer i s ompty 



cpu_dlu_wdadr[21 : 4 ] 



Out 



Writ e address bus to tho DIU 



Gpu_diu_wdata[1 27:0] 



Hi it 



Wr i t e data bus to tho D I U 



cpu_diu_wmask[1 5:0] 



4€ 



Out 



Wr i t e mask for the cpu_diu_wdata bus. Each 



bit corr e sponds to a byt e of the 1 28 bit 
cpu_jdiu_wdQtQ bus. 



LEON AHB br i dg e to MMU Contro l Block s i gnals 



opu_mmu_odr 



22 



Out 



CPU Address Bus. 



mmu_cpu_data 



32 



In 



Data bus from the MMU 



mmu_opu_rdy 



Ready signal from th e MMU 



o p u_mmu_acod e 



Acc e ss c od o signa l s to the MMU 



mmu_cpu_berr 



Bus error signa l from the MMU 



dram aocoss on 



In 



DRAM acc e ss enab l e signal. A DRAM acc e ss 
cannot bo in i tiated un l ess it has b ee n enabl e d 



by tho MMU control un i t. 



DoGcn'ption: 

Tho LEON AHB bridge must ensure that al l CPU bus transact i ons are funct i onally corr e ct and that 
tho t i m i ng roquiromonts are mot. Tho AHB bridge also i mplements a 128 bit DRAM write buff e r to 
i mprov e the e ff i cioncy of DRAM wr i tes, particular l y for mult i p le succ e ss i v e writ e s to DRAM. Th e 
AHB bridg e i s also respons i b l e for ensur i ng o ndiann e ss coher e ncy i . e . guarant ee ing that th e corr e ct 
data appears in tho correct position on tho data busos {hrdata, cpujdQtQOut and cpu_mmu_wdQta) 
for e very typo of access. This Is a requiromont b e caus e the LEON us e s big -e ndian addr e ssing 
while the rest of SoPEC i s littio ond i an. 

Th e LEON AHB bridg e wi ll assert r e quest s i gna l s to tho D I U if the MMU control block deems the 
acc e ss to b e a le ga l acc e ss. Th e val i d i ty ( i . e . i s th e CPU running in the correct mod e for tho 
address space being accessed) of an access is determined by the cont e nts of the relevant 
RegionNControl r e g i st e r. As th e SPARC standard r e quir e s that al l acc e sses are aligned to their 
word siz e (i.e. byto, ha l f word, word or doub l e word) and so i t i s not possibl e for an acc e ss to 
traverse a 256 bit boundary (as required by tho D I U). Inva l id DRAM acc e ss e s ar e not propagat e d to 
tho D I U and w i l l r e su l t i n an orror r e spons e (ahbso.hr e sp " '01') on th e AHB. Th e D I U bus protoco l 
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i s doscribod i n moro detail i n sootion 20.9. The DIU w il l return a 256 bit dataword on 
drQm_cpu_datQ[255:0] for every road aoooso. 

The CPU subsyst e m bus pretocol i s describ e d in seot i en 1 1 . 4 .3. Wh i le the LEON AHB bridge 
performs the proteoel translatien betw e en AHB and the CPU subsystem bus th e se le ct s i gnals for 
5 e ach b l ock are generated by addr e ss decoding i n the CPU subsystem bus interface. The CPU 

subsystem bus i nt e rface also se l ects the correct read data bus, ready and e rror s i gnals for the block 
being address e d a nd pass e s th e se to the LEON AHB bridge which puts th e m on the AHB bus. 
It Is expected that some s i gnals (espec i a ll y thos e e xterna l to the CPU block) wi ll need to bo 
r e glstorod hero to moot th e tim i ng requlromonts. Carefu l thought w i ll b e r e qu i red to ensure that 
10 ov e ral l CPU acc e ss times ar e not oxcossiv e ly degrad e d by th e us e of too many r e gist e r stages. 
11.6.6.1.1 DRAM wr i te buffer 

Th e DRAM wr i t e buffer i mproves the efficiency of DRAM writ e s by aggregat i ng a numb e r of CPU 
writ e acc e ss e s into a single DIU write access. This is ach i eved by ch e ck i ng to see if a CPU writ e is 
to an addr e ss alr e ady i n th e writ e buffer and if so the wr i te i s immed i at el y acknow le dg e d ( i . e . th e 

15 ahbcLhroady Q t gncA i s assorted w i thout any wa i t states) and the DRAM wr i t e buff e r updat e d 

accordingly. Wh e n the CPU wr i t e is to a DRAM addr e ss oth e r than that i n th e write buffer then tho 
current contents of the write buffer are s e nt to th e DIU (wh e r e th e y ar e plac e d i n the post e d wr i te 
buff e r) and th e DRAM writ e buffer is updated with the address and data of the CPU wr i te. Th e 
DRAM write buffer consists of a 128 bit data buffer, an 18 b i t write oddroos tag and a 16 b i t wr i t e 

20 mask. Each bit of th e writ e mask ind i cates the validity of tho corresponding byte of the wr i te buff e r 
as shown i n F i gure 21 b el ow. 

Th e op e rat i on of th e DRAM writ e buff e r i s summar i s e d by th e fo ll owing set of rules: 

1) Th e DRAM writ e buff e r on l y contains DRAM writ e data i.o. poriphoral wr i t e s go dir e ctly to th e 
25 addressed por i phoral. 

2 ) CPU writ e s to locations within th e DRAM writ e buffer or to an e mpty wr i t e buff e r (i. e . th e wr i t e 
mask b i ts ar e a ll 0) complete with zero wait stat e s r e gard l ess of tho siz e of th e writ e (byt e /half - 
word/word/ doubl e- word). 

3 ) Th e cont e nts of th e DRAM wr i te buffer ar e flush e d to DRAM whenever a CPU write to a locat i on 
30 outs i d e th e wr i t e buff e r occurs, whenever a CPU road from a locat i on w i thin the writ e buff e r occurs 

or wh e n e v e r a write to a per i ph e ra l r e g i ster occurs. 

4 ) A flush r e su l ting from a per i ph e ral wr i t e w il l not caus e any e xtra wa i t states to b e ins e rt e d i n th e 
p e r i ph e ral wr i te access. 

5) Flushes resu l t i ng from a DRAM accesses w ill caus e wa i t stat e s to be i ns e rt e d unt il tho D I U 

35 posted wr i te buffer io ompty. I f the D I U posted wr i te buffer i s empty at tho time tho flush i s required 
th e n no wait stat e s wil l b e inserted for a flush resu l ting from a CPU writ e or on e wait stat e w i ll b e 
i nserted for a flush resu l ting from a CPU r e ad (th i s i s to e nsur e that the DIU sees tho writ e r e qu e st 
ah e ad of th e r e ad r e qu e st). Note that i n th i s cas e further wa i t stat e s w il l also bo i nserted as a rosult 
of tho de l ay i n s e rv i cing th e road requ e st by th e D I U. 

40 11.6.6.1.2 D I U i nterfac e wav e forms 
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F i gur e 22 b e low d e p i cts th e op e rat i on of tho AHB bridge over a samp l e s e quonco of DRAM 
transactions cons i st i ng of a r e ad into the DCaoh e , a doubl e word store to an addr e ss other than 
that current l y i n tho DRAM write buff e r fol l owod by on I Cacho lino rof i ll. To avoid oluttor a number of 
AHB control signa l s that are i nputs to tho MMU have boon group e d tog e th e r as ahbs i .CONTROL 
5 and on l y th e ahbso.HREADY is shown of tho output AHB contro l signals. 

Th e f i rst transaction is a s i ngl e word load ('LD'). Th e MMU (sp e cifica l ly th e MMU control b l ock) us e s 
tho first cyc le of ev e ry access (i. e . the address phaso of an AHB transaction) to dotorm i ne whether 
or not th o acc e ss is a l e gal acc e ss. Th e r e ad requ e st to the DIU i s th e n assorted in tho fo l lowing 
cycle (assuming tho access is a va l id one) and i s acknowledg e d by th e DIU a cyc l e l ater. Note that 

10 tho t i me from cpujdiujrroq being assorted and diu_cpu_rack boing assortod is variab l e ao i t 
dep e nds on tho DIU configuration and access patterns of D I U requestors. The AHB br i dge w i ll 
insert wa i t states until i t s ee s th e diu_cpu_rvaUd signal is h i gh, i nd i cat i ng tho data ('LDV) on th e 
dramjGpujdata bus i s va l id. The AHB bridg e t e rm i nat e s th e r e ad acc e ss i n the sam e cycl e by 
ass e rting th e ahbso.HREADY signal (tog e ther with an 'OKAY' HRESP code). Th e AHB br i dg e a l so 

15 s e l e cts th e appropriate 32 bits ('RD1') from tho 256 b i t DRAM lino data ('LDI') r e turned by the DIU 
corresponding to th e word addr e ss g i v e n by A1 . 

Tho second transaction Is an AHB two - b e at incr e m e nting burst issu e d by the LEON acache block in 
response to th e e x e cut i on of a doubl e word store i nstruction. As LEON is a b i g e ndian proc e ssor 
th e address issued ('A2') during tho addr e ss phaso of tho fir s t b ea t of this trans a ct i on is th o addr e ss 

20 of tho most s i gnificant word of th e doubl e word wh i l e th e addr e ss for the s e cond b e at ('A3') i s that 
of th e l east sign i f i cant word i.e. A3 ~ A2 The presence of tho DRAM write buffer allows those 
writes to comploto without tho i nsertion of any wa i t states. This is truo oven when, as shown hero, 
th e DRAM wr i t e buffer n ee ds to be flush e d into tho D I U post e d write buff e r, provid e d th e D I U 
posted wr i te buffer is empty. If the DIU posted wr i te buffer is not empty (as would bo s i gnif i ed by 

25 diujGpu_writojrdy being l ow) th e n wait stat e s wou l d b e i ns e rt e d unt il it b e cam e e mpty. Th e 

cpu_diu_wdQtQ buffer bui l ds up th e data to b e wr i tt e n to th e D I U ov e r a numb e r of transactions 
('BD1' and 'BD2' h e r e ) whi l e tho cpu_diu_wmaGk r e cords e v e ry byt e that has b ee n wr i tt e n to sinc e 
the l ast flush — i n this cas e th e l owest word and then the s e cond low e st word ar e wr i tt e n to as a 
r e su l t of the double word stor e op e rat i on. 

30 Th e final transact i on shown h e r e i s a DRAM r e ad caus e d by an I C a che miss. Noto t hat tho 

pip e l i ned natur e of th e AHB bus a l lows the address phas e of this transact i on to overlap w i th th e 
f i nal data phas e of th e pr e v i ous transaction. A l l I Cach e m i ss e s appear as sing le word l oads ('LD') 
on th e AHB bus. In th i s cas e w e can s ee that the DIU is slower to r e spond to th i s r e ad r e qu e st than 
to th e f i rst read request becaus e i t i s proc e ssing the write acc e ss caus e d by th e DRAM write buffer 

35 flush. Th e ICache refil l wi ll comp le t e just aft e r th e window shown i n F i gur e 22. 
1 1.6.6.2 CPU Subeyetom Bue intorfaco 

Th e CPU Subsystem I nterface, b l ock hand l es all valid acc e ss e s to th e p e r i phera l b l ocks that 
comprise tho CPU Subsyst e m. 

Table 23. CPU Subsyst e m Bus Intorfaco l/Os 

40 
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Port nam e 



Dirie> I/O 



D e scription 



G l obal SoPEC signa l s 



prst_n 



G l obal resot. Synohronous to pctk, Qotivo l ow. 



G l oba l clock 



Top l ev el /Common CPU Subsyst e m Bus I nt e rfac e s i gna l s 



opu_cpr_s el 



Out 



CPR b l ock s ele ct. 



cpu^p i o_s e l 



Qyt 



GPIO block s ele ct. 



cpujcu_s e l 



Qyt 



I CU block s e l e ct. 



cpu_ l ss_s e l 



LSS block s e l e ct. 



opu_pcu_s el 



Out 



PCU block s e l e ct. 



cpu_scb_se l 



Oi it 



SCB b l ock se l ect. 



opu_t l m_so l 



Out 



Tim e rs block s e l e ct. 



opu_rom_sol 



Out 



ROM block s e l e ct. 



cpu_psQ_sQl 



Qtrt 



PSS block soloct. 



cpu_d i u_s el 



Oi if 



D I U b l ock s e l e ct. 



cpr_cpu_data[31 :Q] 



32 



R e ad data bus from the CPR block 



gplo_cpu_data[31 :0] 



32 



R e ad data bus from the GP I O block 



i cu_cpu_data[31 :0] 



32 



Road data bus from tho ICU block 



ss_cpu_data[31 :0] 



32 



R e ad data bus from th e LSS block 



pcu_cpu_data[31 :0] 



32 



R e ad data bus from the PCU block 



scb_cpu_data[31 :03 



32 



R e ad data bus from th e SCB block 



tim_opu_dota[31 :0] 



32 



Road data bus from the Timers b l ock 



rom_opu_dota[31 :0] 



32 



Road data bus from tho ROM b l ock 



pss_cpu_data[31 :0] 



32 



Read data bus from tho PSS block 



diu_cpu_data[31 :0] 



32 



Iff 



Read data bus from th e D I U b l ock 



cpr_cpu_rdy 



4- 



R e ady s i gnal to the CPU. When Gprjapujrdy is 



high it indicatos the last cycl e of th e accoss. For a 
write cyc l e this m e ans cpu_dataout has boon 



r e g i st e r e d by tho CPR block and for a r e ad cyc le 



this m e ans th e data on cpr_cpu_dQta is va l id. 



gp i o_cpu_rdy 



GPIO ready signa l to t h e C P U . 



i cu_cpu_rdy 



I CU r e ady s i gnal to tho CPU. 



ss_cpu_rdy 



LSS r e ady signal to tho CPU. 



pcu_cpu_rdy 



PCU r e ady s i gnal to the CPU. 



scb_cpu_rdy 



SCB r e ady signa l to the CPU. 



t i m_cpu_rdy 



l« 



T i m e rs b l ock r e ady s i gna l to th e CPU. 



rom_opu_rdy 



ROM b l ock ready signa l to the CPU. 



pss_cpu_rdy 



PSS b l ock r e ady signa l to tho CPU. 
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diu_cpu_rdy 



D I U r e g i ster b l ock r e ady signa l to tho CPU. 



cpr_cpu_borr 



Bus Error s i gna l from th e CPR b l ock 



gp i o_cpu_berr 



Bus Error s i gna l from tho GP I O b l ock 



i cu_cpu_borr 



Bug Error s i gna l from tho I CU block 



lss_cpu_berr 



Bus Error s i gnal from tho LSS block 



pcu_cpu_berr 



Bus Error signal from th e PCU block 



scb_cpu_berr 



Bus Error signa l from the SCB block 



tim_cpu_b e rr 



Bus Error signa l from th e Timers block 



rom_cpu_borr 



Bus Error signal from th o ROM block 



pss_cpu_b e rr 



Bus Error s i gna l from tho PSS block 



diu__cpu_berr 



Bus Error signal from tho D I U b l ock 



CPU Subsyst e m Bus interfac e to MMU Contro l Block s i gnaU 



cpu_adr[19:12] 



g 



Topl e v e l CPU Addr e ss bus. On l y b i ts 10 12 aro 
r e quir e d to d e codo tho per i ph e rals addr e ss spac e 



p e n_acc e ss_ e n 



Enabl e Acc e ss s i gna l . A periphera l a cc e ss cannot 
b e i niti a t e d un le ss it has b ee n e nab l ed by th e MMU 
Control Un i t 



pori_mmu_data[31 :0] 32 



Data bus from tho se l ected p e riph e ral 



p e rLmmu_rdy 



Out 



Data Ready signa l . I nd i cates tho data on tho 
peri__mmujdQtQ bus is val i d for a r e ad cyc le or that 



tho data was successfu l ly written to tho por i phoral 
for a wr i te oyc l o. 



p e r i _mmu_berr 



Oi if 



Bus Error signal. Indicates a bus error has occurr e d 



in acc e ss i ng the s e l e cted poriphoral 



CPU Subsystem Bus I nterface to LEON AHB bridge signa l s 



cpu_start_access 



Start Acc e ss s i gna l from th e LEON AHB bridg e 
i ndicating th e start of a d a ta transf e r and that th e 



cpujadr, cpajdataout, cpu_rwn and cpu_acodo 
signals aro all va li d. This signa l is only assorted 



during th e f i rst cycle of an access. 



D e scription: 

Tho CPU Subsyst e m Bus I nt e rfaco b l ock performs s i mple address decod i ng to se l ect a por i phoral 
and multipl e x i ng of th e returned signals from th e various periph e ra l blocks. Tho base address e s 
us e d for th e decode op e rat i on ar e defin e d in Tab l e . Note that access to tho MMU conf i gurat i on 
r e gist e rs ar e handl e d by th e MMU Control B l ock rather than the CPU Subsystem Bu s Int e rfac e 
b l ock. Tho CPU Subsyst e m Bus Interfac e block operat i on i s d e scribed by tho fo ll owing 
ps e udocode: 



maokcd_cpu_adr « cpu_adr [17 ; 12] 
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caoc — ( ma o3ccd_cpu_adr ) 

when TIM_baoo [17 5 12] 

cpu_tim_ocl — = — pori_aGGCoo_Qn -H- — The — pcri^acGcoo^cn 

aignal will have the 

pcri_mmu_data — = — t i m_Gpu_data ^-f — timing required — §e3? 

block oelcGto 

pori_mmu_rdy = tim_cpu_rdy 



pcri_mmu_bGrr = tim_cpu_bcrr 

all_othar_OGlGGt:a — = — 9 ■/-/■ Shorthand to cnoure other 

1 0 Gpu_bloG]c_aGl oignalo 

/t^ — romain dGaaoGrted 

whon LOG baaG[17:12] 



Gpu_loo_aGl ° pGri_aGGGoa_Gn 

pGri_mmu_data =■ lao_Gpu_data 

1 5 pGri_mmu_rdy = loo_Gpu_rdy 

pori_mmu_bGrr = loo_Gpu_berr 

all_othGr_OGlGGta = — 0- 

whGn GriO_baoG [17 ; 12] 

Gpu_gpio_oel = peri_aGGGOo_Gn 

20 pcri_mmu_data ■ gpio_cpu_data 

peri_mmu_rdy = gpio_cpu_rdy 

pcri_mmu_berr ■ gpio_cpu_bcrr 

all_othGr_oelccto ■ 0 

when CCD baoG[17 ! l2] 



25 cpu_ocb_ocl = pcri_Qcccaa_cn 

pcri_mmu_dQtQ - — ocb_Gpu_dQta 

pGri_mmu_rdy « — a cb_cpu_rdy 

peri_mmu_berr ° ocb_Gpu_bGrr 

all other oclccto = 0 



30 when ICU_ba3e[17;12] 

Qpu_iGU_aGl = peri_aGGeoo_on 

pcri_mmu_data ■ iGu_Gpu_data 

p G r i_mmu_r dy ^ — i Gu_cpu_rdy 

pGri_mmu_bGrr - — i cu^Gpu^bcrr 

35 all othor OGlGcto « 0 

when CPR baoc[17;12] 



Gpu_Gpr_oGl a pGri_aoGGoo_Gn 
peri_mmu_data ■ epr^cpu^data 



pGri_mmu_rdy « Gpr_Gpu__rdy 

40 pcri_mmu_berr » cpr_cpu_berr 

all other oelocto ° 0 
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whon ROM_baoG [17 i 12] 

Gpu_rom_OQl ° pcri_acccoo_cn 

pQri_tTimu_data « rom_cpu_data 

pGri_mmu_rdy « rom_Gpu_rdy 

pcri_nufnu_bGrr « rom_Qpu_bcrr 

all_othQr_oclQQto = 0 

when rSS baoc[17 ; 12] 



cpu_poo_ocl — = pcri_acQQOo_cn 

pQri_minu_datQ = pog_cpu_dQta 

1 0 pGri_mmu_rdy = poo_cpu_rdy 

pGri_itimu_bGrr =■ poo_cpu__bGrr 

all_othcr_oclcGto = 0 

when DIU baaQ[17;12] 



cpu_diu_OGl ° pGri_aQCCOO_cn 

1 5 pQri_mmu_data = diu_Qpu_data 

pcri_rnmu_rdy = diu_cpu_rdy 

pcri_mmu_bcrr - diu_cpu_bcrr 

all_othcr_aclccta = 0 

when rCU_baoc [17 : 12] 

20 Qpu_J)GU_OQl ° pGri_aQQGOO_Gn 

pGri_mmu_data » pGu_Gpu_data 

pQri_mmu_rdy ° pGu_Gpu__rdy 

pGri_nimu_bGrr = pGu_Gpu_bGrr 

all_ottiGr_OGlGGto ° 0 

25 when othcra 

all bloclc aclGGta = 0 



pcri_mmu_data = 0x00000000 

pGri__mmu_rdy « o 

pGri_minu_bGrr ■ 1 

30 Gnd GaoG 

11.6.6.3 MMU Control Block 

The MMU Contro l B l ock d e t e rm i n e s wh e th e r ovory CPU aocoss is a va li d acc e ss. No mor e than 
ono oyolo is to bo consumod i n det e rmining tho val i d i ty of on accoss and all accessoG must 
t e rm i nat e w i th th e ass e rt i on of ei th e r mmu_cpu_rdy or mmu_cpu_borr. To safeguard aga i nst 
35 sta l ling the GPU a s i mp l e bu s t i me o u t m e chan i sm wi ll b e support e d. 
Tablo 2A. MMU Contro l B l ock l /Os 



Port namo 



Dir^o I/O. 

I ■■ I w If 



D e scription 



Globa l SoPEC s i gnals 



prst_n 



In 



G l obal r e s e t. Synchronous to pclk, activ e l ow. 
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Global otook 



Topl e v e l/Common MMU Control Block signals 



cpu_adr[21 :2] 



22 



Out Address bus for both DRAM and por i phorQ l oggogs 



opu_aoodo[1 :0] 



Qi if 



CPU acc e ss code s i gnals {cpu_mmu_QGOdo) rot i mod 
to moot the CPU Subsystonn Bus tim i ng roquiromonts 



dram acc e ss e n 



A- Out DRAM Access Enab le s i gna l . I nd i cates that th e 



curr e nt CPU acc e ss i s a valid DRAM acc e ss. 



MMU Contro l Block to LEON AHB br i dge signals 



cpu_mmu_adr[31 :0] 



32 



CPU core address bus. 



cpu_dataout[31:0] 



32 



Topl e v e l CPU data bus 



mmu_cpu_data[31 :0] 



32 



Out 



Data bus to th e CPU cor e . Carries the data for al l 



CPU r e ad op e rations 



cpu_rwn 



Topl e v e l CPU R e ad/notWr i to signal. 



cpu_mmu_acode[1 :0] 



CPU acc e ss cod e s i gnals 



mmu_cpu_rdy 



Out 



Ready signa l to the CPU core. Ind i cates the 



comp le tion of all va li d CPU accesses. 



mmu_cpu_berr 



Out 



Bus Error signal to th e CPU core. This signal is 
ass e rt e d to term i nate an i nva li d acc e ss. 



opu_start_acc e ss 



Start Access signal from th e LEON AHB br i dge 
ind i cat i ng the start of a data transf e r and that th e 



Gpu_adr, cpu_dQtQOut, cpujrwn and opujaoode 
signals are al l valid. Th i s signa l is on l y asserted 



dur i ng th e first cycle of on accoss. 



cpujack 



1- 



I nterrupt Acknow l edge signal from tho CPU. Th i s 



s i gnal is only ass e rt e d during an i nterrupt 
acknowlodgo cycle. 



cpu_bon[1 :0] 



Byte enable s i gnals ind i cat i ng wh i ch bytos of tho 32 
b i t bus are being accessed. 



MMU Contro l Block to CPU Subsystem Bus I nterface s i gnals 



cpu,adr[17:12] 



3 Out 



Top l eve l CPU Address bus. On l y b i ts 17 12 are 



r e quir e d to d e cod e th e periph e rals address space 



per i _access_on 



1- Out 



Enab le Acc e ss s i gnal. A p e riph e ra l acc e ss cannot b e 
in i tiat e d un le ss it has b ee n e nabl e d by tho MMU 
Contro l Un i t 



p e rLmmu_data[31 :0] 32 Vf\ 



Data bus from tho selected peripheral 



p e ri_mmu_rdy 



Data Ready s i gna l . I ndicates the data on th e 



pori_mmu_data bus is valid for a road cyc i o or that 
tho data was successfu l ly wr i tten to tho per i pheral for 



a wr i t e cyc le . 
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p e r i _mmu_b e rr 



35 



fR 



Bus Error signaL Ind i cat e s a bus error has oocurred in 



accessing the select e d per i phoral 



D e ecription: 

Th e MMU Contro l B l ock Is r e sponsibl e for th e MMU' s cor e functionality, nam el y d e t e rm i n i ng 
wh e ther or not an acc e ss to any part of th e address map i s valid. An occoss is cons i dorod val i d I f i t 
i s to a mapped ar e a of th e address spac e and i f th e CPU I s runn i ng In the appropriat e mod e for that 
5 address space. Furthormoro tho MMU control block must correct l y handle th e sp e c i al cases that 
ar e : an interrupt acknowledge cycio, a res e t e xception vector fotch, an accoso that cross e s a 256 - 
bit DRAM word boundary and a bus t i m e out condition. The following ps e udocode shows the log i c 
roquirod to i mplomont tho MMU Contro l B l ock functiona li ty. I t does not d e a l with tho tim i ng 
r e lationsh i ps of th e various signals — I t is th e d e sign e r's r e spons i b il ity to e nsur e that th e s e 

10 re l ationsh i ps ar e corr e ct and comply w i th th e d i fforont bus protocols. For s i mp l icity th e pseudocod e 
is split up i nto numbered sections so that th e functiona l ity may be se e n more eas il y. 
I t is important to noto that tho styl e used for the pseudocode w il l d i ffer from the actual coding sty l o 
us e d in th e RTL impl e m e ntation. Th e ps e udocode Is on l y int e nd e d to captur e th e r e quir e d 
funct i ona li ty, to clearly show tho criteria that nood to b e t e st e d rath e r than to d e scribe how th e 

15 i mpl e m e ntat i on should be performed. I n particu l ar th e diff e r e nt comparisons of th e addr e ss used to 
dotormino wh i ch part of tho memory map, which DRAM r e gion (if appl i cablo) and th e p e rmission 
ch e cking should a l l b e p e rformed in para l lel (with r e sults OR e d tog e ther whoro appropr i ate) rath e r 
than s e quent i ally as th e ps e udocod e i mp lie s. 

PSO D e scription: This first segment of cod e d e fin e s a numb e r of constants and variab le s that ar e 
20 us e d e ls e wh e r e I n this doscript i on. Most signals have boon dofinod in tho I/O doscr i ptions of tho 
MMU sub blocks that procedo this s e ction of the docum e nt. Th e poGt_roGot_stQt e var i abl e is us e d 
lat e r (In sect i on PS4) to d e t e rmine if w e should trap a nul l po i nter access. 

pgQ. 

25 Gonat UnuoodBottom ■ 0x0 02 ACQ GO 

conot DRAMTop => — 0x 4 02 7FFFF 

conat UocrDataSpacc = bOl 

conat UaGrrrogramSpacc « bOO 

conat Supc3rvioorData£3paGG « bll 

30 conat Supcr-vioorProgramSpacG ° blO 

conot RcoctExGcptionCyclco ° 0x2 

Gpu_adr_pGri_maokcd [5 s 0] — « cpu_mmu_adr [ 1 7 ; 1 2 ] 

Gpu__adr_dram_tnaokQd [16 ; 0] — ° cpu_tnmu_adr & 0x003FFFE0 



-4r€ — (prot_n 0) — then // Initialioc cvcirYthing 

Gpu_adr « cpu__mmu_adr [2 1 ■ 2 ] 

pGri_aGGQOO_cn =■ 0 
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dram_accQoo_cn ° 0 
Tnmu_Gpu_data » pori_mmu__data 



mmu_cpu_borr ° 0 
poot_rooGt_otatc ° TRUE 
acccoo_initiatQd = FALSE 
Gpu_aoGGOo_cnt =■ 0 



/ / The — following — is — uocd to — dGtcrmiiiG — ar€ — wg aro — coming out 

10 of roQGt for thG purpooGO of 

/■/ — rooGt — GXGoption — vector — redirection. — There — may — fee — a 

Gonvonient oignal in the CPU core 

// that we could uoc inotcad of thio. 

if ( (Gpu_otart_accGoa ~ 1-) 7\ND ( Gpu_acceoo_cnt * 

15 RGOQtExGGptionCyclco ) — AND 

(GloGk__tiGk === TRUE) ) — then 

Gpu_aGGcoa_Gnt = cpu_aGCGoa_Gnt — Hi 

gIog 



20 



poot_rGOGt_otate - FALSE 

PS1 D e scription: This section i s at the top of th e h ie rarchy that d e term i n e s th e va li d i ty of an acc e ss. 
The oddroQO l o tostod to ooo which macro rog i on ( i .e. Unuood, CPU Subsystem or DRAM) i t fai l s 
i nto or wh e th e r th e r e s e t e xc e ption vector Is be i ng accossod. 

25 

— ( Gpu_mmu_adr > = UnuocdBottom) — then 

— The — acGcoa — ie — fee — etR — invalid — area — &€ — fehe — addrooa 

opacG . — Sec ocction rS2 



30 — eloif ( ( epu_tnmu_adr > DRAMTop) AND ( Gpu_tnmu_adr 

UnuoodBottomH — then 

^ — We — a3Fe — is — fefee — Gi^J — Sub oy o t em/ PE P — Suboyafe em — addreoa 

opaoG , — See ocction PS3 

35 // Only remaining poooibility io an accGOO — to DRAM addrcoo 

opacG 

^ — Firot — we — need — fee — intercept — fefee — opecial — caae — §03? — the 

reoet exception vector 

40 eloif — (cpu_mmu_adr < 0x00000010) — then 

// The reoet exception io being acceooed. — See ocction rS4 
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cloif ( ( Gpu_adr_dram_maokQd RcgionODottom) AN© 

( cpu_adr_dram_ina olccd < ° 

RcgionOTop) — ) — then 

5 // Wg arc in RcgionO. — Ceo section PSS 

cloif ( ( Gpu_adr_dram_maa]ccd RcgionNBottom) fti® 

( Gpu_adr_dram_ma a]<:Gd < = 

RcgionNTop) — ) — then — // we arc in RcgionN 

1 0 -H- — Repeat — feiae — RcgionO — (i.e. — acction — PCS) — logic — #ea5 

each of Regionl to Region? 

— cloe H- — We — could — end up — here — 3r€ — there were — gapo — ia — fefee 

DRAM regiona 

1 5 peri_accGoo_en ° 0 

dram_acGcao_cn = 0 

mmu_Qpu_bcrr = — i // we have an untoown acccoo — error , 

moot likely due to hitting 

nimu_cpu_rdy = 0 // a gap in the DRAM regiono 



20 



35 



■/-/■ — Only — thing — remaining — is — fee — implement — a — bus — timeout 

fvmction. — Thio io done in PS 6 



end 



25 

PS2 DoGcript i on: Acc e ss e s to th e l arg e unus e d ar e a of th e addr e ss spac e ar e trapp e d by th i s 
sootion. No bus transaotions arc i nitiated and the mmu^Qpu^bon t^%x\^A is osGortod. 
PS2f 

cloif — (cpu_mmu_adr > ■ UnuocdBottom) — then 

30 pcri_aGccoo_Gn = — 9 // The acccoo — ie — to an invalid area 

of the addrcoo opace 
dram acccoo en « 0 



mmu_cpu__bcrr « 1 
mmu_cpu_rdy = 0 



PS3 D e scr i ption: Th i s s e ct i on d e als w i th acc e ss e s to CPU Subsystem p e r i ph e rals, i nc l ud i ng th e 
MMU its el f. I f th e MMU r e g i st e rs ar e b e ing acc e ss e d th e n no ext e rnal bus transact i ons arc requ i red. 
Acc e ss to th e MMU r e gist e rs I s on l y porm i tt e d i f th e CPU is mak i ng o data acc e ss from superv i sor 
mod e , oth e rwis e a bus error i s ass e rt e d and the acc e s s t e rm i nated. For non MMU access e s th e n 
40 transaotions occur ovor th e CPU Subsystem Bus and each peripheral i s respons i blo for dotormining 
wh e th e r or not th e CPU is in tho correct modo (based on tho cpujaood e s i gna l s) to bo permitted 
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acGOSS to i ts rog i stors. Noto that al l of tho PEP rogistors aro QcoosGod via tho PCU which is on the 
CPU Subsystom Bus. 



PS3: 

5 olaif ( ( cpu_nimu_adr > DRAMTop) AND ( cpu_mmu_adr <• 

UnuocdBottomH — then 

-hf — We — a*^ — Ml — fctee — GPtJ — Siiboyo torn/ PEP — Suboyotcm — addrcoo 

opacc 

10 cpu_adr = cpu_mmu_adr [21 : 2] 

ari — ( cpu_adr_pcri_mao3ccd — ~ — MMU^baoo) — then -H- — aGccaa — ie 

to local rogiatcro 

pcri_acccoo_cn «= 0 

dram acGcoo en = 0 



35 



15 ar# — (cpu^aoodc = = GupcrvioorDataSpacc) — then 

#ea? — (i = 0 ; — i<26 ; — i l l) — f 

— ( ( i == cpu_mmu_adr [6 : 2] ) — then // oolccto the 

addrcoocd rcgiatcr 

— (cpu_r%m °° 1) — then 

20 tnmu_cpu_data [16 ; 0] — = MMURGg[i] // MMURcg [i] 

io one of tho 

mmu_Gpu_rdy 1 // rcgiatcro 

in TablG 



nunu_Gpu__bcrr = 0 

25 clac // write cycle 

MMURcg [i] — = cpu_dataout [ 1 6 ; 0 3 



mmu_cpu_rdy = 1 



mmu_Gpu_bGrr = 0 

cloG ■/-/■ — there — M — ao — rcgioter — mapped — fee — thio 



30 addrcoa 



mmu_Qpu_bGrr — = — 1 — de — we — really — want — a 

buo^crror here ao rcgiotero 

mmu_Gpu_rdy = . 0 // aro juat mirrored in other 

bloclca 



elae // wc have an acccoo violation 
mmu_cpu_berr ° 1 



mmu_Gpu_rdy « 0 



40 GloG // acGGoo ia to oomothing oloe on the CPU Suboyotem 
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dram acGcoo on 



mmu_Gpu_data = pGri_mmu_d afea 

nunu_Gpu_rdy ° pori_mmu_rdy 

5 mmu_Gpu_borr ■= pcri_mmu_borr 

PS1 D e scription: The only correot accesses to the locations b e n e ath 0x00000010 ar e f e tch e s of th e reset trap 
handling routine and these should be the first accesses after reset Hero w e trap all oth e r acc e ss es to thes e 
locations r e gardl es s of the CPU mode. The most lilccly caus e of such an acc e ss will be the us e of a null 
10 point e r in the program executing on th e CPU. 

PS4f 

oloif — ( Gpu_nunu_adr < 0x00000010) — thon 

iri — (poot_rGOGt_atatG °= TRUE) ) — then 

15 cpu_adr = Gpu_Tnmu_adr [2 1 ; 2 ] 

pcri_aQQQaa_on = 1 

dram acccoo en = 0 



mmu_cpu_data « pcri_mmu_dat:a 

mmu_cpu_rdy = pcri_mmu_rdy 

20 mmu_Gpu_borr » pGri_mmu_bGrr 

gIoc — we — have — — problem — (almoot — Gcrtainly — — null 

pointor) 

pQri_aQGGOo_Qn ■ 0 

dram aoGcoa en « 0 



25 mmu Gpu borr 

mmu__Qpu_rdy « 



PS5 D e script i on: This l arg e s e ction of ps e udooodo s i mply ch e cks wh e th e r th e acc e ss i s within th e 
bounds of DRAM RogionO and i f so whether or not the acc e ss i s of a typo pormitt e d by the 
30 R e gionOControf r e gister. If the acc e ss i s p e rm i tted thon a DRAM acc e ss is initiat e d. I f th e acc e ss i s 
not of a typo permitted by tho RogionOControl rogistor thon the access is term i nated with a bus 

P35 ' 

35 eloif ( ( Gpu_adr_dram maokod >«» RcgionOBottom) AN© 

(Gpu_adr_dram_mQo]ccd < = 

RogionOTop) — ) — then — // wo aro in RcgionO 

Gpu_adr = Gpu_mmu_adr [21 : 2] 

40 if (Gpu_rwn = ■ 1) thon 
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ir€ ( (cpu_acodQ «» S upcarvioorProgramSpacc MfB 

RogionOControl [2] — 1) ) 

BR ( Gpu_acodc ~ UoGrProgramSpaGG MJD 

RGgionOControl [5] — i) ) — then 

// thio is — a — valid — inatruction 

fGtch from RGgionO 

5^fee dram_Gpu_data hvta goGO 

directly to the LEON 

/t^ — ftHB — bridge — which — aloo — handle a 

the hrcady generation 

pGri_aGGeoo_Gn ^ 0 

dram_acccoo_cn = 1 

mmu__cpu_bcrr « 0 



cloif ( (cpu_acodc 

RGgionOControl [0] — == 1) 


CupcrvioorDataSpacG 


AN© 

AN© 


OR ( cpu_acodc 

RogionOControl [3] — ■« 1) ) — then 


UoorDataSpacG 

— thio — ars — a- 


valid 



road accGoo from RogionO 

pGri_aGGGOo_en 0 

dram_aGGGOo_Gn ° 1 

mmu_Gpu_bGrr = 0 



olac — we have an accGoo 

violation 

peri_acceoo_en = 0 

dram_aGGGOO_Gn g 0 

mmu_Gpu_bGrr ° 1 

mmu_cpu_rdy = 0 

gIog // it io a write acoGoa 



ar€ ( (Gpu_acodG ~ — 

RegionOControl [1] — == 1) 


Supcrvi oorDataSpacG 




AN© 


OR ( cpu_acodc 

RegionOControl [4] — 1) ) — then 


— «a UoerDataSpace — 

thio is 


valid 



write aacGOO to RogionO 

pcri^acGGOo^Gn = 0 

dram_aQGeoo_cn ° 1 

mmu_Gpu_bcrr = 0 
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cloc — we — have — an accQoo 

violation 

pcri_acGQoo_Qn ° 0 

dram_acGcao_on ° 0 

5 mmu_cpu_bcrr ° 1 

mmu_cpu_rdy ° 0 



PS6 D e sor i pt i on: Th i s final soct i on of psoudooodo deals with the sp e cia l cas e of a bus t i m e out. Th i s 
occurs wh e n an acc e ss has b e en in i tiat e d but has not comp le t e d befo re th o BuGTimoout number of 

10 pclk oyo l oG. Whilo access to both DRAM and CPU/PEP Subsystem r e gist e rs wi l l tako a variabl e 

number of cyclos (du e to DRAM traffic, PCU command e x e cut i on or th e d i fferent t i ming roquir e d to 
occoss rogistors in i mported IP) oaoh acooss should comp le te boforo a t i meout occuro. Thoroforo i t 
should not b e possibl e to sta l l th e CPU by locking e ith e r th e CPU Subsystem or DIU buses. 
How e v e r g i v e n th e fatal e ffect such a sta l l would have i t i s consid e red prudent to imp l omont bus 

15 t i m e out d e t e ction. 



20 



P3g- 

/t^ — Only — thing — remaining — ie — fee — implement — a — feus — timeout 

function . 

3b# — ( (cpu_otart_aGGCoo 1) — then 

aGGGOO_initiatod ° TRUE 

timcout_GO\intdo%m = BuoTimoout 

25 3tr§ — ( (mmu_Gpu_rdy ==1 ) — GR — (mmu_Gpu_borr =- 1 ) ) — then 

QCGGOO initiated « FALSE 



peri_Qcccao_cn = o 

dram_aGGGOo_en = 0 

30 if ( (GlOGk_tiGk TRUE) AND (aOGCOO^initiated « ■ TRUE) AND 

(BuoTimoout — 1= 0) ) 

i€ — (timcout_countdown > 0) — then 

1 imcout_GOunt down — 

cloe — // timeout hao oocurred 

35 pGri_aGccao_Gn = 0 // abort the aooeoo 

dram acccao en « 0 



mmu_Gpu_b e r r 



mmu_Gpu_rdy « 0 

11.7 LEON Caches 

40 Tho version of LEON imp l omontod on SoPEC foaturos 1 kB of ICacho and 1 I^B of DCacho. Botli 

caches are dir e ct mapp e d and f e atur e 8 word lin e s so their data RAMs ar e anrang e d as 32 x 256 - b i t 
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and tho i r tag RAMs as 32 x 30 b i t (Itag) or 32 x 32 - bit (dtag). L i k e most of tho rest of tho LEON codo 
usod on SoPEC tho cach e contro l l e rs ar e taken from tho I oon2 1 .0.7 ro l oaso. Tho LEON oacho 
contro l lors and cacho RAMs havo been modif i ed to ensur e that an entire 256 bit li no i s r e fill e d at a 
t i mo to make maximum uso out of the memory bandw i dth off e r e d by tho emb e dded DRAM 
5 organizat i on (DRAM linos are also 256 bit). Tho data oacho controllor has also boon modif i ed to 
onsuro that user modo codo cannot access th e DCach e cont e nts unless i t i s authoris e d to do so. A 
block d i agram of the LEON CPU cor e as i mpl e m e nt e d on SoPEC is shown i n FIguro 23 bolow. 
In this d i agram dott e d l i n e s ar e us e d to i nd i cat e h i erarchy and rod i tems r e present s i gnals or 
wrapp e rs add e d as part of th e SoPEC mod i f i cations. LEON makes hoavy use of VHDL rooords and 
10 the records used in the CPU core are d e scr i b e d i n Tab l o 25. Un l ess othorw i s e stat e d tho records 
ar e defined In tho I faco.vhd fi l e (part of tho LEON roloaso) and this shou l d be consulted for a 
comp l ete br e akdown of th e r e cord elements. 

Table 25. Rolovant LEON records 



Record Name 


Description 






register file. 




Register Filo Output record. Contains tho data out of the dual read port register 


\n\ 




ii loll uL/uui 1 woul Its III 1 coui u . wuiiioiiio pi Unroll 1 ouutitoio fiOfii otfTcrcrit^icigco 

of the pipelino and various control signals 




ice 


Instruction Cache Out record. Contains tho fotohed instruction data and 




various control signals. This rocord is also sont to tho DCache (i.e. icol) so that 


diagnostic accesses (e.g. Ida/eta) can bo sorviood. 


\J\Jt 




Data Cache In record. Contains address and data busos from different stages 
of tho pipeline (execute & memory) and various control signals 




dee 


Data Cacho Out rocord. Contains tho data rotriovod from either memory or tho 




caches and various control signals. This record is also sent to the ICaohe (i.e. 
dcol) so that diagnostic accesses (e.g. Ida/eta) can bo serviced. 






Integer Unit In rocord. This record contains the interrupt request level and a 


record for use with LEONs Debug Support Unit (DSU) 




Integer Unit Out rocord. This record contains tho acknowledged interrupt 




request lovol with control signals and a record for use with LEONs Debug 
Support Unit (DSU) 




Memory to Cache Icache In record. Contains the address of an Icache miss 


and various control signals 




Memory to Cache Icache Out rocord. Contains the returned data from memory 
and various control signals 


py^Q^ j 


Memory to Cache Dcache In record. Contains the address and data of a 
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Doache miss or write and various control signals 


modo 


Memory to Cacho Doaoho Out rooord. Contains the returned data from 




memory and various control signals 




Ul lUI 


AHB In record. This is the input record for on AHB master and contains the 


data bus and AHB control signals. The destination for tho signals in this record 


is tho AHB controllor. This record is defined in the amba.vhd file 








AHB Out record. This is the output record for an AHB master and contains tho 


addross and data buses and AHB control signals. Tho AHB controllor drives 
tho signals in this record. This record is defined in tho amba.vhd filo 






AHB Slavo In rocord. This is the input record for an AHB slavo and contains 


tho address and data buses and AHB control signals. It is usod by the DCache 


to facilitate cache snooping (this feature is not enabled in SoPEC). This rocord 


is defined in the amba.vhd filo 


crami 






Cache RAM In record. This record is composed of records of records which 


contain tho addross, data and tag entries with associated control signals for 
both the ICache RAM and DCache RAM 








cramo 


Cache RAM Out record. This record is composed of records of records which 
contain tho data and tag entries with associated control signals for both tho 


ICache RAM and DCache RAM 






iline_rdy 


Control signal from the ICache controllor to the instruction cache memory. This 


signal Is activo (high) when a full 256-bit line (on dram__cpu_data) is to be 
written to cache memory. 


dline_rdy 


Control signal from the DCache controller to the data cache memory. This 






signal is activo (high) when a full 256 bit line (on dram_cpu_data) is to bo 
written to cache memory. 


dram_cpu_data 


256 bit data bus from tho embedded DRAM 







1 1 .7. 1 Cacho control l ers 

Th e LEON cacho modu l e consists of thr e e components: th e ICach e controll e r ( i cache.vhd), the 
DCach e contro l lor (dcache.vhd) and the AHB br i dge (acacho.vhd) which trans l ates all cacho misses 
i nto m e mory r e quests on tho AHB bus. 



5 In ord e r to e nabl e full lino refill operation a f e w chang e s had to b e mad e to th e cach e controll e rs. 
Tho ICacho contro lle r was modifiod to e nsur e that wh e n e v e r a l ocat i on in the cach e was updat e d 
( i .e. tho cach e was e nab l ed and was b ei ng r e fill e d from DRAM) all locat i ons on that cache l i no h a d 
th e ir valid bits s e t to r e fl e ct tho fact that the ful l lin e was updat e d. Th e ilin e jrdy signa l is ass e rt e d by 
the ICacho control l er when this happens and th i s informs the cacho wrappers to updat e al l locations 
10 in th e i data RAM for that l ine. 

A s i m il ar chang e was mado to the DCache contro l ler except that tho entire lino was only updated 
fo l low i ng a read m i ss and that existing wr i te through op e ration was pr e s e rv e d. Th e DCach e 
contro l l e r uses tho dh'no_rdy signal to i nstruct tho cacho wrapper to update a ll l ocations i n tho ddata 
RAM for a l i n e . An addit i ona l mod i fication was a l so made to e nsur e that a doub l o word load 
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instruct i on from a non oachod location wou l d on l y r e su l t in on e r e ad accoss to the D i U \ , e . th e 
sooond road would b e s e rv i ced by th e data cach e . Not e that if th e DCaoh e is turn e d off th e n a 
doub l e word load i nstruction w i l l caus e two D I U r e ad acc e ss e s to occur ov e n though th e y wi ll both 
be to tho same 256 b i t DRAM li no. 
5 The DCach e contro l l e r was furth e r mod i fied to e nsure that user mod e cod e cannot acc e ss oachod 
data to wh i ch i t does not havo porm i ssion (as dotorminod by tho ro l ovont RogionNControl rogistor 
s e tt i ngs at the t i me tho cacho lino wa s loaded). Th i s roquirod an e xtra 2 bits of tag i nformat i on to 
r e cord the user road and wr i t o p e rmiss i ons for e ach cach e l ine. Th e s e us e r access permissions can 
bo updated i n tho same manner as tho othor tag fioido ( i .o. addross and va l id bits) nam el y by l in o 

10 r e fil l , STA instruct i on or cach e flush. Th e us e r acc e ss p e rm i ssion b i ts aro ch e ck e d e v e ry tim e us e r 
code attempts to acc e ss th e data cach e and i f the p e rm i ssions of the accoss do not agroo w i th tho 
p e rm i ssions r e turn e d from th e tag RAM th e n a cach e miss occurs. As tho MMU ovaluatos tho 
access permissions for e v e ry cach e miss i t w i l l g e n e rate the appropr i ate except i on for th e forc e d 
cacho m i ss caused by tho errant user oodo. I n tho caso of a prohib i ted read access the trap wi ll be 

15 immediate whil e a prohibit e d wr i t e acc e ss will r e sult i n a d e f e rr e d trap. Tho def e rr e d trap r e sults 
from the fact that the prohib i ted writo i s committ e d to a writ e buff e r i n th e DCach e controller and 
program execution cont i nues unt i l tho prohibit e d writ e is d e t e ct e d by th e MMU which may b e 
s e v e ral cyc le s lat e r. B e cause th e e rrant wr i t e was tr e at e d as a wr i t e m i ss by tho DCach e contro l l e r 
(as it d i d not match th e stor e d us e r acc e ss p e rm i ss i ons) the cach e cont e nts were not updat e d a nd 

20 so rema i n coh o ront with th e DRAM cont e nts (wh i ch do not g e t updated because tho MMU 

i ntercoptod th e proh i bited writ e ). Supervisor modo code is not subject to such chocks and so has 
fr ee access to tho contents of tho data cacho. 

I n add i tion to AHB bridging, th e ACach e compon e nt also p e rforms arbitration between I Caoho and 
DCache m i sses whon s i multan e ous m i ss e s occur (th e DCach e a l ways wins) and i mp le ments th e 

25 Cacho Control R e g i ster (CCR). Th e le on2 1 .0.7 releas e is i ncons i stent in how i t hand l es 

cachoab ili ty: For instruct i on fetch e s th e cach e ab i lity ( i . e . is the acc e ss to an ar e a of m e mory that i s 
cachoablo) i s dotorminod by tho ICache control le r wh i l e th e ACach e d e t e rmin e s wh e ther or not a 
data accoss i s cachoab l e. To further comp li cate matters th e DCache contro ll or doos determ i ne if an 
acc e ss resu l t i ng from a cach e snoop by anoth e r AHB mast e r i s cachoab l o (Note that th e SoPEC 

30 ASIC doos not impl e m e nt cach e snooping as i t has no n ee d to do so). This i ncons i stency has b ee n 
cleaned up in moro r e c e nt LEON r e l e as e s but i s pr e s e rv e d h e re to minim i se the number of chang e s 
to tho LEON RTL. Tho cacho contro l lers wore modified to ensure that only DRAM accesses (as 
defined by th e SoPEC m e mory map) are oachod. 

Tho only funct i ona li ty r e moved as a r e sult of tho modificat i ons was support for burst fi l ls of th e 
35 I Cacho. Wh e n e nab le d burst f ill s would r e fi l l an ICache l i no from tho l ocation whore a m i ss occurred 
up to tho ond of th e li n e . As th e entir e l i n e is now rof ille d at onc e (wh e n e x e cut i ng from DRAM) th i s 
functiona l ity is no longer required. Furthermore moro substantial mod i ficat i ons to the I Cacho 
contro lle r wou l d b e noodod i f w e w i shed to pres e rve th i s funct i on without adversely affect i ng fu ll li no 
r e fills. Th e CCR was th e r e fore modified to ensure that tho instruction burst fetch b i t (bit16) was tied 
40 low and could not b e wr i tt e n to. 
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11.7.1.1 LEON Cacho Control Regist e r 

The CCR controls th e oporation of both the I and D oaohoo. Noto that tho bitfioldG us e d on the 
SoPEC imp le m e ntation of th i s rog i stor ar e basod on tho LEON v1.0.7 Impl e m e ntat i on and somo 
b i ts hav e th e ir va l u e s ti e d off. Soo soot i on 4 of th e LEON manual for a d e scr i pt i on of th e LEON 
5 cacho controllers. 

Tab l o 26. LEON Cache Contro l Regist e r 







Description 






Instruction cache state: 
00 disabled 
QA — frozen 
40 — disabled 
44 — enabled 


Reserved 




Rosorvod. Roads as 0. 










Data cache state: 
00 disabled 
04 — frozen 
10 disabled 
14 — enabled 




4 


ICacho freeze on interrupt 

0 — Do not froozo tho ICache contonts on taking an interrupt 

1 — Freeze the ICache contonts on taking an interrupt 




§ 


DCacho froozo on interrupt 

0 — Do not froozo tho DCache contents on taking an interrupt 

1 — Froozo the DCache contents on taking an Interrupt 


Reserved 




Reserved. Roads as 0. 






DP 


44 


Data cacho flush ponding. 

0 — No DCache flush in progress 

1 — DCache flush in progress 
This bit is Readonly. 


IP 


4€ 


Instruction cache flush ponding. 

0 — No ICacho flush in progress 

1 — ICache flush in progress 
This bit is RoadOnly. 


IB 




Instruction burst fetch enable. This bit is tied low on SoPEC because it 


would interfere with the operation of the cache wrappers. Burst refill 
functionality is automatically provided in SoPEC by tho cacho 
wrappers. 


Reserved 


-20^47 


Reserved. Roads as 0. 
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R 


24- 


Flush instruction cacho. Writing a 1 this bit will flush the iCaoho. Roods 




RD 


22 


Flush data cache. Writing a 1 this bit will flush the DCache. Reads as 

Or 


9S 


23 


Data cacho snoop onablo. This bit is tied low in SoPEC as there is no 
requirement to snoop tho data cacho. 


Reserved 




Reserved. Roads as 0. 









11.7.2 Cach e wrapp e rs 

Tho cacho RAMs us e d i n the leon2 1 .0.7 ro l oaso noodod to bo modifiod to support full lino refills 
and th e correct IBM macros a l so nooded to b e i nstant i at e d. A l though thoy aro d e scr i b e d as RAMs 
throughout this document (for cons i st e ncy); regist e r arrays or o actually us e d to i mplement tho 



5 cacho RAMs. Th i s is b e caus e I BM SRAMs woro not avai l ab le i n su i tabl e configurations (offered 
configurat i ons were too big) to imp le m e nt ei th e r tho tag or data cacho RAMs. Both instruction and 
data tag RAMs ar e i mplem e nted us i ng dual port (1 R e ad & 1 Wr i to) reg i ster arrays and th e clock e d 
writ e through versions of th e r e g i st e r arrays wer e us e d as th e y most clos e ly approximate tho single 
port SRAM LEON e xp e cts to see. 

10 1 1. 7. 2. 1 Cacho Tag RAM wrapp e re 

Th e i tag and dtag RAMs d i ff e r only in their w i dth - th e itag i s a 32x30 array whi l e tho dtag i s a 32x32 
array w i th th e oxtra 2 bits b e ing used to r e cord tho us e r acc e ss permissions for e ach lin e . Wh e n 
r e ad using a LDA i nstruct i on both tags r e turn 32 b i t words. Tho tag fields aro descr i b e d in Tabl e 27 
and Tab le 28 b e low. Using th e IBM naming conv e nt i ons the regist e r arrays used for tho tag RAMs 

15 aro cal l ed RA032X3QD2P2W1 R1 M3 for tho i tag and RAQ32X32D2P2W1 R1 M3 for th e dtag. Th e 
lbm_Gyncram wrapp e r us e d for tho tog RAMs i s a s i mpl e affa i r that just maps the wrapper ports on 
to tho appropriate ports of tho IBM r e gister array and e nsures tho output data has th e corr e ct t i m i ng 
by r e g i st e ring i t. Th e tag RAMs do not require any spooio l modificat i ons to hand l e full lino rofii l s. 
Tabl e 27. LEON I nstruct i on Cach e Tag 

20 

F i eld Name b i t(s) D e scr i ption 

Va li d 7^ Each va l id b i t i nd i cates wh e ther or not the corresponding 

word of the cach e li n e contains valid data 
R e s e rv e d R e s e rv e d — th e se b i ts do not exist i n the i tag RAM. Roads as 

0. 

Address 31:10 Tho tag addr e ss of th e cach e lin e 



Tabl e 28. LEON Data Cache Tag 



Field Name 




Description 




7^0 


Each valid bit indicates whether or not tho corrooponding 


word of tho cacho line contains valid data 
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ywp 



Address 



Usor rood p e rmission. 

9 — Ucor modo r e ads wi ll forc e a r e f i l l of th i s li no 



9 



A — Usor mod e cod e con read from th i s caoho li no. 



Us e r wr i te p e rm i ssion. 

0 — Uoor modo writos w il l not b e written to the cache 



1 — Usor modo codo can writ e to this cac he l in e . 



Th e tag address of th e cach e l i n e 



11.7.2.2 Cache Data RAM wrappers 

Th e cacho data RAM conta i ns tho actua l caohod data and noth i ng e l so. Both tho instruct i on and 
data cache data RAIVIs ar e impl e m e nt e d using 8 32x32 bit reg i st e r arrays and some add i t i ona l logic 
to support ful l l in e r e fi ll s. Using th e I BM naming conventions th e r e gist e r arrays used for tho tag 
5 RAMs aro call e d RA032X32D2P2W1R1M3. Tho ibm_odram_wrQp wrapper us e d for th e tag RAMs 
i s shown in F i gure be l ow. 

To th e cach e control le rs the cach e data RAM wrapp e r looks l ik e a 256x32 sing l e port SRAM (which 
Is what thoy oxpoct to see) with an input to i ndicate whon a ful l li no rof i l l Is taking p l ace (tho tmo_rdy 
s i gna l ). Internal l y tho 8 - bit address bus i s sp li t i nto a 5 b i t li noaddress, wh i ch s e l e cts one of th e 32 

10 256 bit cacho l i nes, and a 3 b i t wordaddr e ss which s ele cts on e of th e 8 32 bit words on th e cach e 
li n e . Thus e ach of the 8 32x32 r e gist e r arrays conta i ns one 32 - bit word of each cach e l i n e . Wh e n a 
full tin e i s b e ing refill e d (indicat e d by both th e lin e jrdy and write signals b ei ng high) e v e ry reg i ster 
array i s writt e n to w i th the appropr i at e 32 bits from the linedotoin bus which contains tho 256 - b i t li n e 
returned by tho D I U after a cache miss. Whon just one word of the cache l ino is to bo written 

15 ( i ndicated by the write s i gna l be i ng high whil e the lino_rdy i s low) then the wordaddross is used to 
enable the write signa l to the se l ected register array on l y all other write enab l e s i gna l s aro kept 
l ow. Th e data cache contro lle r hand le s byte and ha l f - word wr i t e by m e ans of a r e ad - modify - writ e 
op e ration so writ e s to th e cach e data RAM are a l ways 32 bit. 

Th e wordaddr e ss is also us e d to s ele ct th e corr e ct 32 bit word from th e cach e li n e to r e turn to th e 

20 LEON int e ger unit. 

Realtime Debug Un i t (RDU) 

Tho RDU fac ili tat e s tho observat i on of tho contents of most of tho CPU addressab l e reg i st e rs i n th e 
SoPEC d e vic e i n add i tion to som e ps e udo r e g i st e rs in rea l tim e . Th e cont e nts of ps e udo - r e gist e rs, 
i .e. registers that ar e co lle ct i ons of otherwise unobservab l o s i gna l s and that do not aff e ct th e 

25 functionality of a circu i t, are d e f i ned i n each block as required. Many blocks do not have psoudo 
reg i sters and some blocks (o.g. ROM, PSS) do not make debug i nformat i on ovoilob l o to the RDU 
as i t would b e of l itt le va l u e i n realtime debug. 

Each b l ock that supports r e a l t i m e d e bug obs e rvation featur e s a D e bugSoloct register that controls a 
local mux to det e rm i n e wh i ch regist e r is output on the block's data bus ( i . e . block_cpu_data). One 
30 smal l drawback w i th r e us i ng th e blocks data bus i s that the d e bug data cannot b e pr e s e nt on th e 

sam e bus during a CPU r e ad from th e block. An accompanying activ e high blockjcpujd e bug_yaUd 
signa l is us e d to ind i cat e when the data bus contains val i d debug data and when th e bus i s being 
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usod by the CPU. Thoro is no arbitration for th e bus as tho CPU w i l l a l ways havo accoss whon 
r e qu i r e d. A b l ock d i agram of the RPU i s shown in F i gure 25. 
Toblo 30. RDU l /Os 



Port namo 


PfRS 


I/O 




diu_cpu_data 






Road data bus from the DIU blook 










rH 








gpio_cpu_data 




\B 


Read data bus from the GPIO block 






iou_cpu_data 


32 


\fi 


Read data bus from the ICU block 






lss_cpu_data 


32 




Read data bus from the LSS block 


pcu opu dobug data 


32 


\b 


Read data bus from the PCU block 






scb_cpu_data 


32 




Road data bus from the SCB block 






tim_cpu_data 


32 




Read data bus from the TIM block 






diu_cpu_debug_valid 


4- 


In 






Signal indicating the data on the diujopujdiatQ bus Is 
valid debug data. 


tim_cpu_dobug_valid 


1- 








Signal Indicating the data on tho tim_opu_clQtQ bus is 
valid dobug data. 


scb_cpu_dobug_vati4 


4- 




Signal Indicating tho data on the 6cb_cpu_data bus is 
valid debug data. 


pcu_Gpu_debug_val id 


1- 




Signal indicating the data on tho pcu_cpu_data bus is 
valid debug data. 


lss_cpu_debug_valid 


1- 


l« 






Signal indicating tho data on tho leGjopajdata bus is 
valid dobug data. 


icu_Gpu_dobug_valid 










Signal indicating the data on the iou_cpu_dQtQ bus is 
valid debug data- 


gpio_Gpu_debug_valid 


4- 








Signal indicating the data on tho gpiojopujdata bus is 
valid debug data. 


Gpr_cpu_debug_valid 


1- 


l« 






Signal indicating the data on the cpr_cpu_data bus is 
valid dobug data. 


dobug_data_out 


32 


Otrt 






Output dobug data to be muxed on to tho 
PHI/GPIO/othor pins 


debug_data_valid 


4- 


Out 






Debug valid signal indicating the validity of tho data on 
dobug_data_out This signal Is usod in all debug 


configurations 


debug_cntrl 


33 


Out 






Control signal for oach dobug data lino indicating 
whether or not tho dobug data should bo soloctod by 


the pin mux 
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As thoro aro no sparo pins that can bo uood to output tho dobug data to an extornal captur e d e v i ce 
some of th e e xisting l/Os w il l hav e a d e bug multiplex e r p l aced In front of thorn to aiiow thorn bo 
used as dobug p i ns. Furthormoro not ovory p i n that has a dobug mux will always bo ava i lab le to 
carry tho debug data as they may b e e ngag e d in thoir pr i mary purpose e .g. as a GP I O pin. Th e 
5 RDU thoroforo outputs a dobugjcntrl s i gna l with each dobug data b i t to I ndicate whether the mux 
associatod with each debug pin should s ele ct the d e bug data or th e norma l data for th e pin. Th e 
D e bugPinSoll and D e bugPinSol2 reg i sters aro used to dotormino which of tho 33 potent i a l dobug 
pins aro enab l ed for dobug at any particular time. 

As it may not a l w a ys b e possibl e to output a ful l 32-b i t d e bug word e v e ry cyclo th e RDU supports 
10 tho outputting of an n bit sub word ovory cyclo to tho onob l od dobug pins. Each dobug tost wou l d 
then need to b e r e run a number of t i mes with a d i fferent port i on of tho dobug word be i ng output on 
th e n - bit sub - word e ach t i m e . Tho data from each run should then bo corr el at e d to cr e at e a ful l 32 
b i t (or whatever size is noodod) debug word for every cyc l e. The debug_dQta_vQiid and pcik_out 
signals wil l accompany e v e ry sub - word to al l ow th e data to b e samp le d correct l y. Th e polkjout 
15 signa l is sourcod close to its output pad rather than in tho RDU to m i n i mis e th e sk e w b e tween tho 
ris i ng edge of tho dobug data signa l s (which shou l d be r e g i st e r e d close to tho i r output pads) and 
th e r i sing e dg e of pclkjout 

As mu l tip le debug runs wi ll b e n ee d e d to obtain a compl e t e s e t of dobug dat a t h e n - b I t sub - word wi ll 
nood to contain a d i ff e r e nt bit patt e rn for each run. For maximum fl e xibil i ty oach d e bug p i n has an 
20 assoc i ated DobugDat a Src r e g i st e r that a ll ows any of th e 32 b i ts of th e debug data word to bo output 
on that particu l ar d e bug data p i n. Tho debug data p i n must bo onab l od for d e bug operat i on by 
having i ts corresponding bit in tho DobugPinS e l r e g i st e rs s e t for th e s e l e ct e d d e bug data bit to 
appear on tho pin. 

Tho s i ze of th e sub - word i s d e t e rmin e d by th e numb e r of e nab le d d e bug p i ns wh i ch is control le d by 
25 th e D e bugPinSoi registers. Noto that tho dobugjdatQ_yQlid s i gna l is a l ways output. Furthormoro 

d e bug_cntrl[0] (which i s configured by DebugPinSoll) contro l s th e mux for both th e 

d e bug_data_yalid and pclk_jout signals as both of thes e must bo onab l od for any d e bug op e ration. 

The mapp i ng of debug_data_out[n] signals onto i nd i vidua l p i ns w il l take p l ace outs i de tho RDU. 

This mapping i s doscribod in Table 30 b e low. 
30 Tab l e 30. DobugP i nSel mapping 







DebugPinSeh 


phi_frclk. Tho debug_data_valid signal will appear 
on this pin when enabled. Enabling this pin also 


automatically enables tho phi_roadl pin which will 




output the pclk_out signal 


DobugPinSol2(0 31 ) 


gpio[0...31] 



Tab l e 31 . RDU Configurat i on Registers 



Address offset from Register 



t^bits Reset Descript i on 
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10 



15 



MMU bas e 



9x80 



0x84 



0x88 



OxBC to 0x108 



D e bugSro 



DobugPinSoi 



DobugPinSe l 



DebugDataSr 
c[31:0] 



nvon 



32 



Denotes whioh block i s eupp l y i ng th e d e bug 
data. Th e e ncod i ng of th i s b l ock is g i v e n 



0x0 



OkOOO 



0-eoo 



0 



nvon 



beiewr 


4- 




2 


-tss 


3- 


-GPIO 


4- 


SGB 


S- 


-IGy 


§- 


-GPR 


7- 


-D(y 


&- 


PCU 



Detorm i nes whether tho ph i _frclk and 



phi_r e ad l pin s ar e us e d for d e bug output. 
1 — P i n outputs d e bug data 



0 — Norma l p i n function 



Detormines whether a pin is used for debug 



data output. 



1 — Pin outputs debug data 



0 — Norma ! p i n funct i on 



Selects wh i ch bit of th o 32 b i t debug data 
word will be output on debug_data_out[N] 



44t0 I nterrupt Operation 

Th e i nt e rrupt controller unit (soo chapter 14) generates an i nt e rrupt r e qu e st by dr i v i ng i nt e rrupt 
request l inos w i th the appropriate i nt e rrupt le ve l . LEON supports 15 le v el s of i nt e rrupt w i th le v el 15 
as tho highest leve l (th e SPARC arch i tecture manual [36] states that l evel 15 is non maskab l e but 
w e hav e th e freedom to mask this if des i r e d). The CPU w ill b e g i n process i ng an interrupt e xc e ption 
wh e n e x e cut i on of th e curr e nt instruction has comp l et e d and i t w il l on l y do so i f tho i nt e rrupt l evel is 
higher than tho curr e nt proc e ssor priority. I f a s e cond interrupt roquost arrives w i th tho sam e leve l 
as an e xecuting i nterrupt service rout i ne then the exception will not be processed until the execut i ng 
rout i ne has complotod. 

When an interrupt trap occurs th e LEON hardwar e will plac e th e program counters (PC and nPC) 
i nto two l ocal regist e rs. The interrupt hand le r rout i n e i s exp e ct e d, as a minimum, to p l ac e tho PSR 
r e g i ster i n another loca l reg i ster to ensure that tho LEON eon correctly return to i ts pro interrupt 
stat e . The A bit i nterrupt l e v el (iri) i s also writt e n to th e trap typ e (tf) fi el d of the TBR (Trap Bas e 
Register) by hardwar e . Tho TBR th e n conta i ns tho vector of th e trap handl e r rout i n e the proc e ssor 
wi ll then jump. Tho TBA (Trap Base Addr e ss) f i e l d of th e TBR must hove a va li d va l ue before any 
i nt e rrupt processing can occur so it shou l d b e configur e d at an early stag e . 
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I nt e rrupt pro omption is supportod wh il e ET (Enabio Traps) bit of th e PSR is s e t. This b i t i s c l oarod 
during tho i n i t i a l trap procossing. I n i nit i a l simu l ot i ons the ET bit was obs e rved to bo c l oarod for up 
to 30 cyc le s. Th i s caus e s sign i ficant add i t i ona l i ntonrupt l at e ncy in th e worst caso wh e r e a high e r 
pr i or i ty i nterrupt arr i ves just as a l owor prior i ty ono I s takon. 
5 Th e int e rrupt acknowledge cycles shown i n F i gure 26 b e low are der i ved from s i mulat i ons of tho 
LEON processor. Tho SoPEC toplovol int e rrupt signals us e d in th i s diagram map direct l y to the 
LEON i nt e rrupt signa l s i n tho /t//and iuo records. An interrupt i s asQertod by dr i ving its (encoded) 
le v el on th e icu_cpujlovol[3:0] s i gnals (which map to iui.irl[3:0J). Th e LEON cor e responds to this, 
w i th variab le t i m i ng, by rofioct i ng tho le v e l of the takon i nterrupt on th e cpujcujlovol[3:0] signa l s 

10 (mapped to iuojrl[3:0]) and asserting th e acknowl e dg e signal cpujiack (iuo.intack). Th e int e rrupt 
contro lle r th e n r e mov e s th e i nt e rrupt l ev e l on e cycle aft e r it has soon the l evel boon acknowl e dg e d 
by th e cor e . If th e r e i s anoth e r pend i ng i nt e rrupt (of low e r priority) th e n this should b e driv e n on 
icu_opu_il e v e l[3:0] and the CPU wil l tak e that int e rrupt (th e leve l 9 interrupt I n the examp l e bo l ow) 
onco it has fin i sh e d proc e ss i ng the higher prior i ty int e rrupt. Th e cpu_icu_il e v e l[3:0] s i gna l s a l ways 

15 reflect the l evel of tho last taken i nterrupt even when tho CPU has finished procossing a l l interrupts. 

11.10 Boot Operat i on 

See section 1 7.2 for a descript i on of th e SoPEC boot operation. 

11.11 Software De b ug 

Softwar e d e bug m e chanisms ar e d i scuss e d i n th e "SoPEC Softwar e D e bug" docum e nt [15], 
20 12 Ser i a l Communications Block (SCB) 
^QA Overview 

Th e Serial Commun i cat i ons B l ock (SCB) handl e s th e mov e m e nt of a ll data between the SoPEC 
and th e host d e vic e ( e .g. PC) and b e tw ee n mast e r and s l av e SoPEC dev i ces. The main 
components of th e SCB are a Fu ll Sp ee d (FS) USB D e v i c e Cor e , a FS USB Host Core, a I nt e r 
25 SoPEC Int e rfac e ( I S I ), a DMA manag e r, tho SCB Map and associat e d contro l l og i c. Tho n ee d for 

th e s e compon e nts and th e various typ e s of communication th e y provid e is e vid e nt i n a multi SoPEC 

pr i nt e r configuration. 

12.1.1 Mu l t i SoPEC syst e ms 

Wh i l e s i ng le SoPEC syst e ms are expect e d to form th e major i ty of SoPEC syst e ms th e SoPEC 
30 device must a l so support i ts us e i n multi SoPEC syst e ms such as that shown in F i gur e 27. A 

SoPEC may be ass i gned any one of a number of i dentities in a multi SoPEC system. A SoPEC may 
b e ono or more of a PrintMastor, a LinoSyncMastor, an I S I Mastor, a StoragoSoPEC or an I S i Slave 
SoPEC. 

12.1.1.1 fSlMaetor dovico 
35 Th e IS I Mast e r is the only d e vice that controls the common I S I li nos (soo F i gure 30) and typical l y 

i nterfaces directly with the host. In most systems the I SIMastor w ill s i mp l y b e th e SoPEC conn e cted 
to th e USB bus. Future systems, however, may employ an IS I Bridge chip to interface b e tween tho 
host and th e I S I bus and i n such systems the IS I Bridge ch i p wi l l bo tho I S I Master. There can on l y 
b e on e IS I Mast e r on an I SI bus. 
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Syst e ms w i th multipl e SoPECs may have mor e than one host oonnoct i on, for e xamp i o thoro could 
bo two SoPECs communicating with tho oxtornal host ov e r th e ir FS USB l inks (th i s wou l d of cours e 
requ i re two USB cables to b e conn e ct e d), but st i l l only one ISIMostor. 
Whilo it is not oxpooted to be r e qu i r e d, i t Is poss i b l e for a dov i co to hand ov e r I ts ro l e as th e 
5 ISIMastor to another dovico on tho ISI i.o. tho IS I Mostor Is not nooossari l y fixed. 

12.1.1.2 PrintMaeter d e vic e 

Th e PrintMaster devic e is responsibl e for co ordinating all aspects of the pr i nt op e ration. This 
includes starting tho pr i nt oporat i on in al l printing SoPECs and communicating status back to tho 
e xterna l host. When the ISIMaster i s a SoPEC d e v i c e it i s also l ik e ly to b e the PrintMaster as well. 
10 Thoro may on l y bo one PrintMaster in a syst e m and it is most liko l y to bo a SoPEC d e vic e . 

12.1.1.3 UnoSynoMQGtQr dovico 

The LineSyncMaster device generates the Icync pulse that a l l SoPECs I n the system must 
synchron i ze their l i no outputs w i th. Any SoPEC i n th e system cou l d act as a L i noSyncMaster 
a l though tho PrintMaster i s probably th e most lik el y cand i dat e . I t is poss i b le that th e 
15 L i n e SyncMaster may not bo a SoPEC d e vic e at al l — i t cou l d, for examp l e, oomo from somo OEM 
motor control c i rcuitry. Ther e may only b e on e LineSyncMast e r i n a syst e m. 

12.1.1.4 Storag e d e vic e 

For c e rtain printer types it may bo rea li stic to uso on o SoPEC as a storage d e v i c e without using its 
print e ng i ne capab i l i ty that i s to eff e ctive l y uso i t as an I S I- attached DRAM. A storag e SoPEC 

20 wou l d rocoivo data from tho I SIMastor (m o st l ikoly to bo a n IS I Bridge ch i p) and then distribute it to 
the other SoPECs as r e quir e d. No oth e r typ e of data flow ( e .g. IS I S I av e storag e SoPEC > 
I SIS I av e ) would need to bo supported in such a scenario. Tho SCB supports this functional i ty at no 
addit i ona l cost because th e CPU handl e s th e task of transferr i ng outbound data from the emb e dd e d 
DRAM to tho ISI transm i t buffer. Tho CPU i n a storage SoPEC will have almost nothing e l se to do. 

25 12.1.1.6 ISiSiavo dovico 

Mu l ti SoPEC systems wi l l contain one or more I S I S I ave SoPECs. An IS I SIovo SoPEC i s pr i mar i ly 
used to generat e dot data for th e printh e ad IC i t is driving. An ISISIavo wi l l not transmit messag e s 
on th e I S I w i thout f i rst rec ei v i ng p e rm i ssion to do so, via a ping packet (see sect i on 12. 4 . 4 .6), from 
tho I SIMostor 

30 12.1.1,6 iSi Bridge dovico 

SoPEC is targeted at th e low - cost small off i c e / hom e offic e (SoHo) mark e t. It may also b e us e d in 
future systems that target d i fferent market s e gm e nts wh i ch ar e l i kely to hav e a high speed interfac e 
capability. A future d e vice, known as an ISI Bridge ch i p, is envisaged wh i ch w il l foaturo both a high 
spe e d interfac e (such as H i gh - Sp e ed (HS) USB, Ethernet or I EEE139 4 ) and one or more I SI 

35 i nt e rfaces. Tho uso of mu l t i p le ISI buses would a ll ow the construct i on of i ndependent print syst e ms 
w i th i n tho ono printer. Tho I S I Br i dge wou l d bo tho I S I Mastor for each of tho ISI buses i t Interfac e s 

12.1.1.7 Extorr}ai iioct 

The oxtornal host is most li k e ly (but is not required) to be, a PC. Any system that can act a s a USB 
40 host or that can interface to an ISI Bridge chip could b e th e e xt e rna l host. I n particu l ar, with th e 
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dovdopmont of USB On Th e Go (USB OTG), it is possib l e that a numb e r of USB OTG e nabl e d 
products such as PDAs or dig i ta l camoras wi l l bo ab le to d i rect l y intorfac e with a SoPEC pr i nter. 
12.1.1.8 Ext e rnal USB d e vic e 

Tho oxtorna l USB dovloo is most l iko l y (but is not roquirod) to bo, a digital camora. Any systom that 
5 can act as a USB device could be connect e d as an e xt e rna l USB dev i c e . This is to fac i litate pr i nting 
i n the abs e nc e of a PC. 

12.1.2 Typ e s of communication 

12.1.2.1 Communications with e xt e rnal host 

Tho oxtorna l host communicat e s direct l y with tho I S I Mastor I n ordor to print pag e s. Wh e n th e 
10 IS I Mast e r is a SoPEC. th e communicat i ons channe l i s FS USB. 

12.1.2.1.1 Externa l host to I SIMaster communication 

Tho oxtornal host w il l nood to communicato tho following information to tho i SIMaotor dov l oo: 

^ Commun i cations chann el configuration and ma i nt e nance i nformation 

^ Most data d e st i n e d for PrintMast e r, I S I S I ave or storag e SoPEC d e vic e s. This data is s i mp l y 

15 r el ay e d by th e IS I Master 

Mapp i ng of v i rtual commun i cat i ons channels, such as USB ondpoints, to I S I d e st i nat i on 

12.1.2.1.2 IS I Mast e r to e xt e rna l host communication 

Tho ISIMa s tor will noed to communicato the following information to th e e xt e rna l host: 

^ Communications chann e l configuration and maint e nanc e information 

20 A l l d a t a o rig i nating from tho PrintMastor, I S I S I ave or storage SoPEC d e vic e s and d e stin e d for 

the e xt e rna l host. Th i s data is simp l y r e lay e d by th e I S I Master 

12.1.2.1.3 Ext e rnal host to Pr i ntMast e r communication 

Th e e xt e rnal host wi ll n ee d to commun i cat e th e fo l lowing i nformation to the PrintMaster dev i c e : 

^ Program cod e for th e Pr i ntMast e r 

25 ^ Compr e ssed pago data for tho PrintMastor 

^ Control m e ssages to th e Pr i ntMast e r 

Tables and stat i c data r e qu i r e d for pr i nt i ng e .g. dead nozzle tab le s, d i th e r matric e s etc. 

Auth e nticatab l e m e ssag e s to upgrad e th e pr i nt e r's capab il iti e s 

12.1.2.1. 'I Pr i ntMaster to e xt e rna l host commun i cat i on 

30 The Pr i ntMastor wi ll need to communicato the fo ll ow i ng i nformation to th e ext e rnal host: 

Printer status i nformat i on (i.e. authent i cat i on results, paper empty/jammed etc.) 

^ Dead nozzle information 

M e mory buff e r status informat i on 

^ Power management status 

35 Encrypt e d SoPECJd for use in tho generat i on of PR I NTER_QA keys during factory 

programming 

12.1.2.1.5 Ext e rna l host to IS I S I avo commun i cat i on 

A l l communicat i on between th e externa l host and ISIS I ave SoPEC d e vic e s must b e d i r e ct (v i a a 
d e d i cated connoct i on between tho external host and tho I S I SIavo) or must take p l ace v i a tho 
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i S I Mastor. I n th e cas e of a SoPEC I S I Mastor i t i s poss i b l o to conf i guro oaoh indiv i dual USB 
ondpoint to act as a contro l channel to an IS I S I avo SoPEC if dos l rod, although th e endpoints w i ll be 
more usual l y used to transport data. Tho oxtornal host w i l l nood to communicate the following 
I nformation to I S I SIav e devices ov e r th e comms/ I S I : 

5 ^ Program code for IS I SIave SoPEC d e v i c e s 

Compr e ssed page data for IS I SIavo SoPEC d e vices 

Contro l messagos to tho ISISIav e SoPEC (wh e r e a control chann el i s supported) 

Tabl e s and static data required for pr i nting e.g. d e ad nozzio tables, dithor matr i c e s e tc. 

^ Auth e nticatab ie m e ssag e s to upgrade th e print e r's capab i lit i os 

10 12.1.2.1.6 I S I S I avo to oxtorna l host commun i cat i on 

Al l commun i cat i on between th e I S I SIave SoPEC devic e s and tho extorna l host must take placo via 

th e IS I Mastor. Tho I SISIavo w i l l nood to communicato tho following information to the externa l host 

over tho comms/ISI: 

-* Responses to tho oxt e rnal host's control mossagos (whore a contro l channe l is supported) 

15 ^ Dead nozz l e i nformation from th e I SIS I av e SoPEC. 

^ Encrypt e d SoPECJd for us e in the generation of PRINTER_QA koys during factory 

programm i ng 

12. 1.2.2 Communication with oxtornal USB dovico 

12.1.2.2.1 IS I Mast o r to Externa l USB d e vic e commun i cation 

20 " Communications channel configuration and maint e nanc e information. 

12.1.2.2.2 Extorna l USB d e vic e to I S I Mast e r communication 

^ Print data from a funct i on on the oxtorna l USB d e vic e . 

12.1.2.3 Communication over iSI 

12.1.2.3.1 I SIMaster to PrintMast e r communication 

25 Th e IS I Mastor and Pr i ntMaster will often bo tho same physical dov i co. When they are different 
devices then th e fo l lowing information needs to bo oxchangod over tho I S I : 

^ All data from th e e xt e rna l host d e st i ned for th e PrintMaster (see section 12.1 .2.1 .4). 

This data Is s i mply relay e d by th e I S I Mast e r 

12.1.2.3.2 Pr i ntMaster to I SIMast e r communication 

30 The I SIMast e r and Pr i ntMaster wi ll oft e n b e th e same phys i ca l dovico. Wh e n th e y are different 
d e vices th e n tho fo ll owing informat i on needs to bo exchang e d over tho I SI: 

Al l data from tho PrintMast e r d e stin e d for th e e xt e rna l host (see s e ction 12.1 .2.1 . 4 ). 

This data is s i mply relay e d by tho I S I Master 

12.1.2.3.3 I SIMastor to I S I SIav e commun i cation 

35 Tho I SIMaster may wish to commun i cate th e fol l owing informat i on to tho I S I SIav e s: 

^ A ll data ( i ncluding program code such as ISI I d enumeration) originat i ng from th e e xt e rnal 

host and dost i nod for tho IS I S I ave (soo section 12.1 .2.1 .5). Th i s data i s simp l y re l ayed by the 

I S I Master 
^ wak e up from sloop modo 
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12.1.2.3. 4 I S I Siavo to I SIMast e r oommun i oation 

The I S I SIav e may wish to oommunicato tho fol l ow i ng information to tho I S I Mastor: 

Al l data orig i nat i ng from the IS I S I av e and d e st i n e d for th e e xt e rnal host (soo sootion 

12.1 .2.1 .6). Th i s data is s i mp l y r e lay e d by th e I S I Mast e r 

12.1.2.3.5 Pr i ntMastor to IS I Siavo commun i cat i on 

Whon tho PrintMastor i s not the I S I Master al l I SI commun i cation i s don e i n response to I SI ping 
pack e ts (s ee 12. 4 . 4 .6). Wh e n th e PrintMast e r i s the ISIM a st e r then it wil l of course communicate 
d i r e ctly with th e IS I S I av e s. Tho Pr i ntMast e r SoPEC may wish to communicat e the follow i ng 

i nformat i on to th e I S I SIav e s: 

"* I nk st a tus e .g. r e quests for dotCount data i. e . th e numb e r of dots in e ach color fir e d by the 

printh e ads conn e ct e d to th e ISISIav e s 

^ configurat i on of GP I O ports e .g. for c l utch contro l and l id op e n d e tect 

* power down command tol li ng the IS I S I av e to e nt e r s l oop mode 

i nk cartr i dgo fa il i nformation 

This l ist i s not comp le to and th e time constraints assoc i at e d w i th th e se r e qu i r e ments havo yet to bo 
d e t e rmin e d. 

I n g e n e ra l th e PrintMaster may need to bo able to: 

^ s e nd messag e s to an I S I S I av e which w il l caus e the ISISIav e to r e turn tho contents of 

I S I S I av e reg i sters to the Pr i ntMaster or 

-* to program ISISiavo registers with va l ues s e nt by the PrintMastor 

Th i s should b e und e r the contro l of software runn i ng on th e CPU which wr i tes messages to tho 
IS I /SCB i nt e rfac e . 

12.1.2.3.6 IS I S I ave to Pr i ntMastor commun i cat i on 

I SIS I av e s may n e ed to communicate tho follow i ng informat i on to tho PrintMast e r: 

i nk status e .g. dotCount data i. e . th e numb e r of dots in e ach color fir e d by th e printh e ads oonn e ot e d to 

th e ISISIav e s 

band re l ated informat i on e.g. f i nished band i nt e rrupts 

pag e re l ated information i. e . buff e r underrun, pag e f i nished i nterrupts 

^ MMU security violat i on interrupts 

^ GPIO interrupts and status e.g. clutch control and l id open detect 

printh e ad t e mp e ratur e 

^ pr i nthead d e ad nozz le informat i on from SoPEC pr i nth e ad nozz l e tests 

^ pow e r management status 

This l ist i s not compl e t e and th e tim e constraints associatod w i th th e se r e quir e m e nts havo yet to bo 
determ i ned. 

As th e IS I i s an i ns e cur e int e rfac e commands i ssued over th e IS I shou l d b e of li m i t e d capab ili ty e .g. 
only l i m i ted reg i ster writes al l owed. The software protoco l needs to be constructed with th i s i n m i nd. 
I n genera l I SIS I aves may need to return register or status messag e s to the PrintMastor or 
I S I Master. Th e y may a l so need to indicat e to th e Pr i ntMast e r or I SIMast e r that a particu l ar i nt e rrupt 
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has occurred on th e ISlS l av e . This should b e und e r th e contro l of softwar e running on th e CPU 

wh i ch writ e s m e ssag e s to tho I SI block. 

12.1.2,3.7 ISIS I avo to I S l S l av e communicat i on 

Th e amount of i nformation that w i l l need to be communicated b e tween ISISIav e s wi ll vary 
5 cons i d e rably d e p e nding on th e print e r configurat i on. I n somo systems IS l Slave d e vic e s wil l only 

nood to exchange smal l amounts of contro l information w i th e ach oth e r wh ile in other systems (such 
as thoso emp l oying a storage SoPEC or extra USB conn e ction) l arge amounts of compressed page 
data may bo movod botwoon I S I S I av e s. Sc e nar i os whoro ISIS I av o to I SlSlav e communication is 
required i nclude: (a) wh e n th e Pr i ntMast e r is not tho ISIMaster, (b) QA Ch i p i nk usage protocols, (c) 
10 data transm i ss i on from data storag e SoPECs, (d) wh e n th e r e ar e mult i p le e xternal host connections 
supp l ying data to th e printer. 

12.1.3 SCB B l ock D i agram 

Th e SCB cons is ts of four main sub b l ocks, as shown in th e basic b l ock diagram of Figure 28. 

12.1. 4 D e f i n i tions of l /Os 

15 Tho toplovol l/Os of tho SCB ore l istod i n Tablo 32. A more dotailod doscript i on of the i r funct i ona l ity 
wi ll be g i ven in tho relevant sub b l ock s e ct i ons. 
Tablo 32. SCB I/O 



Port nam e 



D e script i on 



C l ocks and Resets 



prst_n 



Syst e m r e s e t s i gnal. Active low. 



System c l ock. 



usbclk 



^8MHz c l ock for tho USB device and host 



cores. Tho cores a l so require a 12MHz clock, 



which w i l l bo generat e d l ocally by div i ding tho 
18MHz c l ock by 4. 



is i _cpr_rosot_n 



Out S i gnal from tho I SI i nd i cating that I S I act i v i ty 



has b ee n detected whi l e i n s l oop mode and so 



tho chip shou l d be r e s e t. Activ e l ow. 



usbd_cpr_resot_n 



Out 



Signa l from th e USB device that a USB reset 



has occurred. Active low. 



USB dev i ce lO transceiver 
s i gnals 



usbd ts 



Out 



USB d e v i ce l O transceiver (BUSB2_PM) dr i v e r 
throe state contro l . Active high e nabl e . 



usbd a 



Hi it 



USB d e vico l O transc ei ver (BUSB2_PM) driv e r 
data input. 



usbd s e O 



USB d e v i co lO transcoivor (BUSB2_PM) 
s i ng l e end e d z e ro input. Activ e h i gh. 
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usbd_zp 



USB d e vic e l O transc ei ver (BUSB2_PM) D^- 



reoo i vor output. 



usbd zm 



In 



USB d e v i c e l O transceiv e r (BUSB2_PM) D 
roGo i vor output. 



usbd z 



In 



USB dov l o e lO transc e iver (BUSB2_PM) 
d i fferentia l r e ceiv e r output. 



usbd_pu l l_up_ e n 



Out 



USB dev i c e pu ll- up resistor enab le . Sw i tcli e s 



powor to the e xt e rna l pull up resistor, 



oonnoctod to tho D+ lino that Is r o qulrod for 
devic e idont l fication to the USB. Aotivo high. 



usbd vbus sense 



USB d e v i co VBUS pow e r sense. Us e d to 
d e tect power on VBUS. NOTE: Tho I BM Cu1 1 



PADS aro 3.3V, VBUS i s 5V. An oxtorna l volt 



ago conversion w il l be necessary, e.g. res i stor 



d i vid e r network. Act i v e high. 



USB host lO transce i ver 



s i gnals 



usbh ts 



Out 



USB host l O transcoivor (BUSB2_PM) driver 
thre e- stat e contro l . Active h i gh onab l o 



usbh a 



Out 



USB host l O transc ei ver (BUSB2_PM) driv e r 
data i nput. 



usbh seO 



Hi it 



USB host l O transceiv e r (BUSB2_PM) singlo 



ended zoro i nput. Active h i gh. 



usbh_zp 



USB host l O transc ei v e r (BUSB2_PM) D+ 
r e c e iver output. 



usbh zm 



In 



USB host l O transcoivor (BUSB2_PM) D 



rece i v e r output. 



usbh z 



In 



USB host l O transcoivor (BUSB2_PM) 
d i fferential roce l vor output. 



usbh over current 



In 



USB host port power over curr e nt indicator. 
Active h i gh. 



usbh_j)owor_on 



Out 



USB host VBUS powor enabl e . Used for port 



power switching. Activ e h i gh. 



CPU I nt e rface 



cpu_adr[n:2] 



n-4- 



In 



CPU address bus. 



cpu„dataout[31 :0] 



32 



In 



Shared wr i to data bus from th e CPU 



scb_cpu_data[31 :0] 



32 



Out 



Road data bus to tho CPU 



cpu_rwn 



In 



Common read/not writ e s i gna l from tho CPU 



cpu_acode[1 :0] 



In 



CPU Access Code signa l s. Those decod e as 
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follows! 

-00 — User program aooess 
-04 — User data aooess 


40 — Supervisor program aooess 
-4^1 — Supervisor data aooess 




1- 




Block select from tho CPU When cdu sob se/ 


opu_SGb_sel 


is hioh both cdu Qdr and con dotoout are valid 




SGb_Gpu_rdy 


1- 


Out 


Ready signal to the CPU. Whon Gobjcpujrdy Is 




hioh it indicates the last cvcle of the access 


For a write cycle this means cpu_dataout has 




boon rogistorod by the SCB and for a read 
cycle this means the data on SGb_Gpu_dQtQ is 


valid. 


sGb_Gpu_berr 




Out 






Bus error signal to the CPU indicating an 
invalid aocoss. 


Bcb_Gpu_debug_valid 


A- 


Out 


Signal indicating that tho data cunrontly on 




Gcb_cpu_data is valid debug data 




Interrupt signals 




dmajcujrq 


1- 


Out 






DMA interrupt signal to the interrupt controller 
block. 


isLiGuJrq 


4- 


Out 


ISI interrupt signal to the interrupt controller 




block. 


usbjcu__irq[1 :0] 


2 


Out 






USB host and device interrupt signals to tho 
icy 

Bit 0 ■ USB Host interrupt 
Bit-1 — USB Device interrupt 


DIU intorfaoo 




scb_diu_wadr[21 :5] 




Out 


Write address bus to tho DIU 






scb_diu_data[63:0] 


64 


Oi if 


Data bus to the DIU. 






scb_diu__wreq 


4- 


Out 


Write request to the DIU 


diu_sGb_waGk 


4- 




Acknowledge from the DIU that the writo 
roquost was accepted. 


scb_diu_wvatid 


4- 


Out 






Signal from the SCB to the DIU indicating that 
the data currently on the scb_dtu_data[63:0] 


bus is valid 


SGb_diu_wmask[7:0] 




Oj it 


Byte aligned write mask. A "1" in a bit field of 




"ecb_diu_v\/mQ6kl7:0r 

means that the corresponding byte will be 


written to DRAM. 
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SGb_d i u_rroq 



scb_d i u_radr[21:5] 



d i u sob rack 



diu sob rvo li d 



47 



diu_data[63:0] 



GP I O intorfaco 



i s i _gp i o_dout[3:0] 



isi_gp i o_ e [3:0] 



gpioJsLdin[3:0] 



Out 



64 



Read address bus to the D I U 



Acknow l odgo from th e D I U that th e r e ad 
r e quest was aoooptod. 



Read request to the D I U. 



Signa l from the D I U to th e SCB i nd i cating that 



tho data currently on th e diu_datQ[63:0] bus is 

vol id 



Common DIU data bus. 



0| if 



Out 



IS! output data to GPIO pins 



IS ! output e nab le to GP I O pins 



I nput data from GP I O pins to ISI 



12.1.5 SCB Data F l ow 

A l og i ca l vi e w of th e SCB is shown i n Figuro 2Q, depict i ng th o transf e r of data within th e SCB. 

45t2 USBD (USB DEVICE SUB BLOCK) 

12.2.1 Ov e rv ie w 

5 Th e FS USB d e vic e controller core and associated SCB logic aro referred to as the USB Dev i ce 
(USBD). 

A SoPEC pr i nter has FS USB dev i ce capab i l i ty to faci li tate communicat i on botwoon an oxtornal 
USB host and a SoPEC pr i nt e r. Th e USBD is self pow e red. It conn e cts to an e xt e rna l USB host via 
a d e dicat e d USB i nt e rfac e on th e SoPEC pr i nter, comprising a USB connector, tho n e cessary 

10 d i scr e t e s for USB signal li ng and th e assoc i ated SoPEC AS I C l /Os. 

Tho FS USB d e vic e core w ill bo third party I P from Synopsys: TymoWaro ''^ USB1 .1 Dev i ce 
Contro l l e r (UDCVCI). R e f e r to tho UDCVC I Us e r Manual [20] for a d o scription of th e cor e . 
Th e d e vice core does not support LS USB op e rat i on. Contro l and bulk transfers ar e support e d by 
tho dov l co. I nt e rrupt transf e rs ar e not considered necessary b e caus e th e required interrupt typo 

15 functiona l ity can b e achi e ved by send i ng query messages ovor tho contro l channol on a scheduled 
bas i s. Th e r e i s no requir e ment to support isochronous transf e rs. 

Th e d e vic e core is configur e d to support 6 USB ondpoints (EPs): tho default contro l EP (EPO), 4 
bulk OUT EPS (EP1 , EP2, EPS, EP^) and 1 bu l k I N EP (EPS). It should bo notod that the direct i on 
of oach EP is w i th r e sp e ct to th e USB host, i.e. IN r e f e rs to data transf e rred to tho external host and 

20 OUT refers to data transferr e d from tho e xt e rna l host. Th e 4 bu l k OUT EPs w i l l bo used for tho 
transf e r of data from th e e xternal host to SoPEC , e .g . c ompross o d pag e data, program data or 
contro l m e ssages. Each bu l k OUT EP can be mappod on to any targ e t d e stinat i on i n a mu l ti - SoPEC 
syst e m, via tho SCB Map configurat i on registers. Th e bu l k I N EP i s us e d for th e transf e r of data 
from SoPEC to tho ext e rna l host, o.g, a print imago down l oaded from a d i gita l cam e ra that r e qu i r e s 

25 proc e ssing on tho oxtorna l host system. Any foodback data wil l bo roturnod to tho oxtorna l host on 
EPO, o.g. status information. 

Th e d e vic e cor e does not provido internal buffering for any of i ts EPs (w i th tho except i on of the 8 
byto sotup data payload for contro l transf e rs). All EP buff e rs ar e prov i ded i n the SCB. Buff e rs will bo 
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grouped aocord i ng to EP d i r e ct i on and assoc i at e d pack e t d e st i nation. Tho SCB Map configuration 
reg i sters contain a D e GtfSUd and D e stfSiSubid for each OUT EP, defining their EP mapp i ng and 
th e r e for e tli e ir packet d e st i nation. R e f e r to s e ct i on S e ct i on 12. 4 I S I ( I nter SoPEC I nterface Sub 
b l ock) for further deta il s en ISNd and ISISubid, Refer to sect i on S e ction 12.5 CTRL (Control Sub - 
5 block) for furth e r d e tails on th e mapp i ng of OUT EPs. 
12.2.2 USBD effective bandw i dth 

The effectiv e bandwidth between on oxtorna l USB host and tho printer wi l l be influ e nc e d by: 

Amount of activ i ty from other devices that share tho USB with th e printer. 

Throughput of th e d e vic e contro l ior core. 

10 EP buffering implementat i on. 

^ Responsiv e ness of th e e xt e rnal host system CPU i n hand l ing USB int e rrupts. 

To maxim i z e bandw i dth to th e pr i nt e r i t i s recommended that no oth e r d e vic e s ar e act i ve on the 
USB b e tween tho print e r and th e e xt e rna l host. I f the printer i s connected to a HS USB externa l 
host or hub It may l i mit tho bandwidth avai l abl e to oth e r dev i c e s connected to the sam e hub but i t 

15 would not s i gn i ficant l y affect the bandw i dth availab le to oth e r d e v i c e s upstr e am of the hub. Tho EP 
buff e r i ng shou l d not lim i t the USB dev i ce cor e throughput, und e r normal op e rating cond i tions. 
Used I n tho recommended conf i guration, under I deal operating conditions. I t i s expected that an 
offoct i vo bandwidth of 8 9 Mb i t/s wi ll b e ach ie ved with bulk transf e rs b e twe e n th e e xterna l host and 
tho pr i nter. 

20 4^T2r3 I N EP packet buff e r 

Tho IN EP packet buffer stores packets or i ginat i ng from tho LEON CPU that are destined for 
transmission ov e r th e USB to th e e xt e rna l USB host. CPU wr i tes to the buffer are 32 bits wide. USB 
devic e core r e ads from th e buff e r 32 bits w i d e . 

128 byt e s of local memory are requ i r e d i n total for EPO - IN and EPS I N buffer i ng. The IN EP buffer i s 
25 a sing le , 2 port loca l memory i nstance, with a dedicat e d r e ad port and a ded i cat e d write port. Both 
ports are 32 b i ts wide. Each I N EP has a dedicated 64 byte pack e t l ocat i on availabl e i n th e m e mory 
array to buff e r a sing l e USB pack e t (maximum USB pack e t size is 6 4 byt e s). Each indiv i dua l 6 4 
byte packet l ocat i on is structured as 16 x 32 bit words and i s read/wr i tten in a F I FO manner. 
Wh e n th e device core reads a packet entry from the IN EP pack e t buff e r, th e buff e r must reta i n tho 
30 packet unti l th e dev i c e core performs a status wr i t e , inform i ng the SCB that th e pack e t has been 
acc e pt e d by tho oxtornal USB host and can b e flush e d. Tho CPU can th e r e fore only wr i te a single 
packet at a time to each I N EP. Any subs e quent CPU writo r e quest to a buffer l ocation conta i ning a 
va li d packet w i l l be refus e d, until that pack e t has b ee n successful l y transmitted. 

43A4 OUT EP packet buffer 

35 The OUT EP pack e t buff e r stor e s pack e ts originating from th e ext e rnal USB host that ar e d e stin e d 
for transmiss i on ov e r DMAChann el O, DMAChanne l l or the ISI. The SCB control logic I s r e sponsib le 
for routing tho OUT EP packets from th e OUT EP packet buffer to DMA or to th e ISITx Buff e r, 
bas e d on tho SCB Map conf i guration rogistor sett i ngs. USB cor e wr i t e s to tho buffer ar e 32 b i ts 
wide. DMA and I S I assoc i at e d roads from the buffer are both 6 4 b i ts wido. 
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512 bytos of l oca l m e mory ar e r e qu i r e d i n tota l for EPO - OUT, EP1 OUT, EP2 OUT, EP3 OUT and 
EP 4 OUT buff e r i ng. The OUT EP packot buffer I s a s i nglo, 2 - port l ocal memory inotanoo, w i th a 
d e dicat e d r e ad port and a d e dicat e d writ e port. Both ports ar e 6 4 bits wido. Byte e nables ar e usod 
for th e 32 b i t wid e USB dev i c e cor e wr i t e s to th e buff e r. Each OUT EP can bo mapped to 
5 DMAChann e lO, DMAChann e H or th e I S I . 

Tho OUT EP pack e t buff e r is partit i onod accord i ngly, r e sult i ng in throo d i st i nct packot F I FOs: 

■* USBDDMAOF I FO, for USB packets d o stinod for DMAChann e lO on tho l ocal SoPEC. 

USBDDMA1F I FO, for USB pack e ts d e st i n e d for DMAChannoll on tho local SoPEC. 

■* USBD I S I F I FQ, for USB pack e t s d e st i n e d for transmiss i on over tho I S I . 

10 12.2,^.1 USBDDMAnFIFO 

This description appl i es to USBDDMAOF I FQ and USBDDMA1F I FO, whor e 'n' repres e nts th e 
r e sp e ctiv e DMA chann el , i . e , n^O for USBDDMAOF I FO, n-^ for USBDDMA1F I FO. . 
USBDDMAnF I FO serv i c e s any EPs mapp e d to DMAChannoln on tho local SoPEC dovico. This 
impli e s that a pack e t originating from an EP with an assoc i at e d /S//d that matches th e local SoPEC 

15 iSHd and an iS!Subfd-n w i ll b e writt e n to USBDDMAnF I FO, if th e r e I s space ava il abl e for that 
packot. 

USBDDMAnFIFO has a capacity of 2 x 6 4 byte packot ontrios, and can th e r e for e buffer up to 2 USB 
pack e ts. It can b e cons i d e r e d as a 2 packet entry FIFO. Packets wi ll b e r e ad from it in tho same 
ord e r in which they w e r e writt e n, i . e . th e first pack e t writt e n w i l l b e th e first packet road and the 
20 s e cond pack e t wr i tt e n will b e th e seco n d pa ck e t r e ad. Each i ndiv i dua l 6 4 byte packet location is 
structured as 8 x 6 4 bit words and Is road/wr i tton i n a F I FO manner. 

The USBDDMAnFIFO has a wr i te granularity of 6 4 bytes, to a ll ow for the max i mum USB packet 
s i ze. The USBDDMAnFIFO w ill have a road granu l ar i ty of 32 byt e s to allow for the DMA write 
access bursts of 4 x 6 4 b i t words, i. e . th e DMA Manager wil l read 32 byt e chunks at a t i m e from the 

25 USBDDMAnF I FO 64byto packot ontr i os, for transf e r to th e D I U. 

I t is conc e ivab le that a pack e t wh i ch is not a mu l t i p l e 32 byt e s i n s i z e may b e written to the 
USBDDMAnF I FO. Wh e n th i s e v e nt occurs, th e DMA Manager w il l r e ad th e cont e nts of the 
remaining address locat i ons associat e d w i th th e 32 byte chunk i n the USBDDMAnFIFO, transf e rr i ng 
th e pack e t plus whatever data i s pres e nt in thos e locations, r e su l t i ng in a 32 byt e pack e t (a burst of 

30 4 X 6^1 bit words) transf e r to th e DIU. 

Tho DMA channels shou l d ach i eve an off o ct i v o bandw i dth of 160 Mb i ts/soo (1 bit/cycle) and should 
never becom e blocked, under normal operat i ng cond i tions. As th e USB bandw i dth i s considerably 
l ess, a 2 entry packot F I FO for e ach DMA chann e l shou l d b e suffic i ent. 
12.2.4.2 USBDiSiFiFO 

35 USBD I SIF I FO serv i ces any EPs mapped to I SI. Th i s I mplies that a packet orig i nating from an EP 
with an associat e d ISild that do e s not match th e l oca l SoPEC fSIld w ill b e writt e n to USBDISIF I FO 
if th e re i s s pac e availabl e for that packet. 

USBDISIF I FO has a capac i ty of ^ x 64 byte pack o t e ntr ie s, and can therefore buffer up to 4 USB 
pack e ts. I t can bo cons i dered as a 4 packet entry F I FO. Packets wil l bo road from it in tho same 
40 order in which they were wr i tten, I.e. the first packet written wil l be tho first packet road and the 
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sooond packot writt e n wi ll bo tho sooond packet road, oto. Each individua l 64 byto paokot l ocation i o 
structured as 8 x 64 bit words and is road/writton I n a F I FO mann e r. 

Th e I S I long packot format wi l l bo usod to tranofor data across tho I SI. Each I SI l ong packot data 
payload i s 32 byt e s. Tho USBD I S I F i FO has a wr i t e granu l ar i ty of 6 4 byt e s, to a l low for th e 
5 maximum USB paokot size The USBD I S I FIFO w i l l have a read granularity of 32 bytes to a ll ow for 
tho I S I pack e t siz e , i .e. the SCB w i ll r e ad 32 byt e chunks at a tim e from the USBDISIF I FO 6 4 byto 
packot ontrios, for transfer to the I SI. 

I t is concoivablo that a paokot wh i ch i s not a mu l t i p l e 32 bytos in sizo may bo written to th e 
USBD I S I F I FO, e i ther intent i onal l y or du e to a software error. A maskab le interrupt per EP i s 
10 provided to flag th i s event. Ther e w il l b e 2 options for d e a li ng w i th this sc e nario on a p e r EP basis: 
D i scard th e pack e t. 

Read th e cont e nts of th e r e main i ng addr e ss l ocat i ons associated with th e 32 byt e chunk in 

tho USBD I S I F I FO, transferr i ng tho irregu l ar s i zo packot plus whatever data i s prosont i n 
thos e l ocations, r e su l ting i n a 32 byt e pack e t transf e r to the ISITxBuff e r. 
15 Tho I S I shou l d ach i eve an offoct i vo bandwidth of 100 Mbits/soc (4 w i re conf i guration). I t I s possib l e 

to e ncount e r a numb e r of r e tr ie s when transm i tting an IS I pack e t and th e LEON CPU w i l l r e quir e 

access to the I SI transmit buff e r. However, considering tho relative l y l ow bandw i dth of tho USB, a 4 

packet entry F I FO should be suffici e nt. 

12.2.5 Wok e up from sl ee p mode 

20 Tho SoPEC wi ll b e placed in sleep mod e a ft er a susp e nd command is r e ceived by th e USB dev i ce 
cor e . Th e USB device cor e w i l l continu e to b e powered and clock e d in sleep mod e . A USB r e s e t, as 
oppos e d to a d e v i c e resum e , w i ll b e r e quir e d to bring SoPEC out of i ts sloop stat e as the sl ee p 
state i s hoped to bo logical l y e quivalent to tho power down state. 

Tho USB reset s i gna l orig i nating from th e USB contro lle r w i ll b e propagat e d to th e CPR (as 
25 ucbjQprjroGotjn) if tho USBWokoupEnablo b i t of tho Wak e upEnablo reg i ster (see Table ) has 
boon set. The USBWakoupEnabio b i t should therefore b e s e t just pr i or to e nt e ring s lee p mode. 
Thoro i s a scenar i o that wou l d require SoPEC to in i tiate a USB remote wako up (i.o. where SoPEC 
s i gna l s resume to the external USB host aft e r b e ing suspended by tho e xt e rna l USB host). A dig i tal 
cam e ra (or oth e r supported externa l USB device) could b e conn e cted to SoPEC v i a the i nternal 
30 SoPEC USB host controll e r cor e i nt e rfac e . Th e r e may b e a n ee d to transf e r data from th i s e xt e rna l 
USB d e v i c e , via SoPEC. to th e e xt e rnal USB host syst e m for processing. I f th e USB connect i ng the 
e xterna l host syst e m and SoPEC was suspended, then SoPEC would need to in i t i ate a USB r e mote 
wake up. 

12.2.6 Implementat i on 

35 12.2. 6. 1 USED Sub block Partition 

* B l ock diagram 

* Dofinit i on of l /Oo 

12.2.6.2 USB Dovico fP Coro 

12.2.6.3 PVCI Target 
40 12.2.6.4 IN EP Buffer 
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12,2,6,6 OUTEPBuffor 

43r3 USBH (USB HOST SUB BLOCK) 

12.3.1 Ovorviow 

The SoPEC USB Host Control le r (HC) cor e , associat e d SCB l ogic and associat e d SoPEC AS I C 
5 l/Os aro referred to as the USB Host (USBH). 

A SoPEC pr i nter has FS USB host capabil i ty, to faci li tat e communication botwoon an e xterna l USB 
dovioo and a SoPEC printer. Tho USBH connects to an oxtornal USB device via a d e dicat e d USB 
i nt e rfac e on the SoPEC printer, comprising a USB conn e ctor, the necessary d i scr e t e s for USB 
signal li ng and the associat e d SoPEC ASIC l/Os. 
10 Th e FS USB HC core aro third party I P from Synopsyo: DesignWare^ USB1 .1 OHCI Host Controller 
w i th PVC I (UHOSTC^PVC I ). Refer to the UHOSTC_PVCI User Manual [18] for details of the core. 
Refer to tho Op e n Host Contro l ler Interface (OHCI) Sp e cif i cation R e leas e [19] for dota l ls of OHCI 
operation. 

Tho HC core supports Low Speed (LS) USB d e v i c e s, although compat i b l e oxtorna l USB d e v i c e s 
15 aro most l i ke l y to bo FS devices. It l o expected that communication between an external USB 

dev i ce and a SoPEC print e r wil l b e ach ie v e d w i th control and bulk transf e rs. How e v e r, i sochronous 
and i nt e rrupt transf e rs aro a l so support e d by th e HC cor e . 

Ther e w i l l bo 2 communication chann e ls betwe e n the Host Contro ll er Driv e r (HCD) softwar e running 

on the LEON CPU and th e HC core: 

20 OHC I operationa l registers i n th e HC cor e . Thes e reg i sters aro contro l , status, l ist po i nt e rs 

and a po i nter to tho Host Controller Commun i cat i ons Area (HCCA) i n shared m e mory. A 
target Per i phera l Virtual Component Interface (PCVI) on th e HC core wi ll prov i d e LEON vwth 
d i r e ct r e ad/wr i t e access to th e op e rat i onal r e gist e rs. R e f e r to tho OHC I Sp e cif i cat i on for 
detai l s of theso rogisters. 

25 HCCA in SoPEC oDRAM. An i nitiator P e r i ph e ral V i rtual Compon e nt I nt e rfac e 

(PCV I ) on th e HC cor e wil l provide tho HC w i th DMA r e ad/wr i t e access to an addr e ss spac e i n 
e DRAM. The HCD runn i ng on LEON will have read/wr i te access to tho oomo address space. Refer 
to th e OHCI Sp e cification for d e ta il s of th e HCCA. 

Tho target PVC I interface is a 32 b i t word a l igned int e rfac e , w i th byte enables for wr i t e acc e ss. A ll 
30 r e ad/ wr i t e acc e ss to th e target PVCI i nterface by th e LEON CPU w i l l be 32 b i t word al i gned. The 

byte enables w i l l not b e used, as a ll reg i sters w ill b e read and written as 32 b i t words. 

Th e i nitiator PVC I i nterface is a 32 bit word aligned interface with byte enables for wr i te access. Al l 

DMA read/wr i te access e s ar e 256 b i t word al i gned, in bursts of ' I x 6^ bit words. As there i s no 

guarantee that tho read/writ e r e qu e sts from th e HC core w ill start at a 256 bit boundary or b e 256 
35 b i ts long, i t is nec e ssary to provid e 8 byte enab l es for each of tho 6^ b i t words in a write burst form 

the HC cor e to DMA. Th e signa l scb_dlu_wmQGk serv e s this purpos e . 

Configurat i on of th e HC cor e wi l l bo performed by tho HCD. 

12.3.2 RoadAA/rito Buffer i ng 

Tho HC core maximum burst size for a read/writ e access i s 4 x 32 bit words. Th i s i mpl ie s that the 
40 m i nimum buff e ring r e quir e ments for the HC core wi ll be a 1 entry deep address reg i ster and a 4 
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ontry do e p data register. I t w ill bo nocessary to provido data and addr e ss mapp i ng funct i onality to 
conv e rt th e 4 x 32 b i t word HC core r e ad/wr i to bursts into ^ x 64 bit word DMA road/writo buroto. 
Th i s w il l moot tho m i n i mum buffering r e quirem e nts. 

12.3.3 USBH offoctivo bandw i dth 

5 Th e e ff e ct i v e bandw i dth b e tween an ext e rna l USB d e v i c e and a SoPEC printer wi ll b e i nflu e nced 

Amount of activity from other d e vic e s that shar e the USB w i th the externa l USB dev i co. 

Throughput of tho HC cor e . 

HC road/wr i to buffering implom e nt a tion. 

10 Rosponsivonoss of th e LEON CPU i n hand l ing USB intorrupts. 

Eff e ctiv e bandwidth betw e en an o xt o rnal USB d e v i c e and a SoPEC pr i nt e r i s not an issuo. Tho 

primary applicat i on of this conn e ct i v i ty i s the down l oad of a pr i nt image from a d i gita l cam e ra. 

Pr i nting opood i s not i mportant for th i s typo of print operation. How e ver, to max i m i z e bandwidth to 

tho printer i t i o rocommondod that no oth e r d e vices are active on th e USB b e tween th e pr i nt e r and 
15 th e e xt e rnal USB d e vice. Tho HC read/writ e buff e ring i n th e SCB should not limit tho USB HC core 

throughput, under normal operating conditions. 

Us e d in th e r e comm e nd e d configurat i on, under ideal op e rat i ng cond i t i ons, i t is e xp e ct e d that an 
e ff e ctiv e bandwidth of 8 9 Mb i t/s wi ll be achieved with bulk transf e rs b e tw ee n th e e xt e rnal USB 
dev i ce and tho SoPEC pr i nt e r. 

20 12.3. 4 I mpl e m e ntat i on 

12.3.5 USBH Sub b l ock Partit i on 

* USBH Block Diagram 

* Definition of l /Os. 
12,3.6.1 USB HoGt IP Coro 

25 12.3.6,2 PVCiTargot 
12.3.6,3 PVCUnitiQtor 
12.3.6.^ R e ad/Writ e Buff e r 

45t4 ISI ( I nter SoPEC I nterface Su b b lock) 

12. 4 .1 Overview 

30 Th e I SI is ut il ised i n all system conf i gurat i ons requ i r i ng moro than one SoPEC. An e xample of such 
a system wh i ch r e qu i r e s four SoPECs for dup le x A3 pr i nting and an addit i ona l SoPEC used as a 
storage dev i c e is shown in F i gur e 27. 

The I S I performs much tho sam e function b e tw ee n an IS I S I avo SoPEC and tho IS I Mastor as tho 
USB connect i on p e rforms botwoon tho IS I Mastor and th e e xt e rna l host. Th i s i nc l ud e s the transf e r of 
35 all program data, compress e d pag e data and m e ssage ( i .e. commands or status informat i on) 

passing betwe e n tho ISIMast o r and th e I S I SIav e SoPECs. Tho I S I Mastor i n i t i ates al l communicat i on 

with th e I S I SIav e s. 

12.^.2 I S I Effect i ve Bandwidth 

Th e I S! will n ee d to run at a spood that wi ll a ll ow error free transmission on th e PCB whil e 
40 min i m i sing the buff e r i ng and hardware roqu i romonts on SoPEC. Whil e an IS I spe e d of 10 Mbit/s i s 
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adequate to match tho offoot i vo FS USB bandwidth i t wou l d l im i t tho systom porformanoo wh e n a 
high spood connection ( e .g. USB2.0, I EEE139 4 ) Is used to attach th e pr i nt e r to tho PC. Although 
thoy would require the use of an e xtra ISI - Br i dge ch i p such syst e ms ar e e nv i saged for mor e 
oxpons i vo printers (compared to the low cost basic SoPEC poworod printers that aro In i tia l ly bo i ng 
5 targeted) in tho future. 

An ISi l i no spood ( i . e . th e sp e ed of e ach ind i vidual I S I w i re) of 32 Mb i t/s is thoroforo proposed as it 
w i l l a ll ow I Si data to b e ov e r - samp i od 5 t i mes (at a pc//c frequency of 16QMHz). Tho total bandwidth 
of tho IS I w il l dopond on the number of pins us e d to impl e ment the interfac e . Th e I SI protoco l will 
work e qual l y w el l if 2 or 4 p i ns aro used for transm i ss i on/r e coption. Tho iSiNumPino rogistor i s used 
10 to s e l e ct b e twe e n a 2 or 4 wire I S I , g i ving p e ak raw bandw i dths of 64 Mbit/s and 128 Mbit/s 

r e sp e ctiv el y. Us i ng ei th e r a 2 or 4 wir e I SI so l ut i on would a l low th e mov e ment of data i n to and out 
of a storage SoPEC (as describ e d in 12.1.1.^ above), which is th e most bandw i dth hungry I S I use, 
in a t i me l y fash i on. 

Tho iSlNumPins reg i ster i s used to se l ect botwoon a 2 or 4 w i re I S I . A 2 wir e I S I i s th e d e fault 
15 s e tt i ng for tSfNumPins and th i s may bo chang e d to a 4 w i r e IS I after init i al commun i cat i on has boon 
estab l ish e d botwoon tho I S I Mastor and all IS I SIavos. Software noods to onsure that th e sw i tch from 
2 to 4 wires is hand l ed i n a control le d and coord i nat e d fashion so that nothing is transm i tted on tho 
I S I dur i ng th e sw i tch ov e r per i od. 

Tho max i mum offoctivo bandw i dth of a two w i re I SI, after al l owing for protocol ov e rh e ads and bus 
20 turnaround times, is e xp e cted to bo approx. 50 Mb i t/s. 
12.4.3 IS I Device Identification and Enumeration 

Th e iSlMaet e rSoi b i t of th e ISICntrl r e gist e r (see sect i on Tab le ) d e t e rm i nes whether a SoPEC i s 
an I S I Mast e r (ISIMaetorSol - 1), or an IS I S I ave {ISlMasterSel - 0). 

SoPEC d e faults to bo i ng an IS I S I av e {ISIMaetorSol - 0) aft e r a pow e r on r e s e t i .e. i t w i l l not 
25 transm i t data on the I S I without first rocoiv i ng a ping, i f a SoPEC's ISIMaetorSol b i t i s changed to 1 , 
then that SoPEC wi l l become th e I S I Mast e r, transmitt i ng data w i thout r e qu i ring a ping, and 
generating pings as appropr i ate l y programmed. 

ISIMastorSol can bo sot to 1 exp li cit l y by th e CPU wr i t i ng diroct l y to tho ISICntrl rog i stor. 
ISlMasterS e l can also b e automatically sot to 1 wh e n activ i ty occurs on any of USB ondpo i nts 2 A 

30 and tho AutoMactorEnable bit of the ISICntrl r e gister is a l so 1 (tho defau l t r e s e t cond i t i on). Note that 
\ f AutoMaet e rEnablo is 0, then act i v i ty on USB e ndpo i nts 2 -4 wil l not resu l t i n ISIMaeterS e l being s e t 
to 1 . USB ondpo i nts 2 4 aro chosen for the automatic detect i on since tho power on reset condit i on 
has USB endpoints 0 and 1 po i nting to I S II d 0 (wh i ch match e s th e l oca l SoPEC's I SIId aft e r pow e r 
on r e s e t). Thus any transmission on USB ondpo i nts 2 A ind i cate a dosiro to transm i t on tho I S I 

35 which wou l d usua ll y i nd i cate IS I Mast e r status. The automat i c s e tting of ISlMast e rS e l can b e 

d i sabled by c l earing AutoMaetorEnablo, thereby a ll ow i ng tho SoPEC to rema i n an I S I SIave whi l e 
still making use of tho USB ondpo i nts 2 4 as external dostinations. 

Thus tho sotting of a SoPEC bo i ng IS I Mastor or ISIS I ave can bo comp l oto l y undor software contro l , 
or can bo comp le te l y automatic. 
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Tho ISMd i s ostabl i shod by softwar e down l oad e d ov e r the I S I (in broadcast modo) which looks at 
tho i nput I ovo I d on a number of GPIO pins to dotormino tho I S I Id. For any givon print e r that usos a 
mu l ti - SoPEC configuration it is expect e d that th e r e w i ll always b e e nough fr e o GP I O pins on tho 
IS I SIavos to support this enumeration m e chanism. 

5 43t4t4 I S I protoco l 

The IS I is a ser i al i ntorfaco util i zing a 2/ 4 w i r e ha l f dup l ex conf i gurat i on such as tho 2 w i ro system 
shown in Figur e 30 b e low. An IS I Mast e r must a l ways bo pres e nt and a variabl o number of 
I S I SIav e s may al so bo on tho I S I bus. The I S I protoco l supports up to 1^ oddr o ssab l o s l aves, 
how e v e r to s i mp l ify ele ctrica l i ssues the I SI drivers neod only a l low for 5 6 I S I d e vices on a 
10 part i cular IS I bus. The I S I bus e nab le s broadcasting of data, IS I Mast e r to I S I SIave communication, 
IS I S I av e to ISIMast e r communication and I S I SIav e to I S I SIavo communication. F l ow control, e rror 
detect i on and r e transm i ssion of e rror e d pack e ts i s a l so support e d. I S I transm i ss i on i s asynchronous 
and a Sto/t fi e ld is present in every transm i tt e d packet to ensur e synchron i zat i on for tho durat i on of 
tho packet. 

15 To maxim i z e th e e ff e ctiv e ISI bandw i dth wh ile m i n i m i sing p i n r e qu i r e m e nts a half duplex i nter l eav e d 
transmiss i on scheme i s used. Figure 31 below shows how a 16 bit word i s transmitted from an 
ISIMast e r to an I S I SIave over a 2 wiro I SI bus. Sinc e data wi l l b e inter l eaved over tho w i r e s and a 4 
wiro IS I i s a l so supported, al l ISI packets should bo a multip l e of 4 bits. 

Al l ISI transactions ar e i n i t i at e d by th e ISIMast e r and e very non broadcast data packet noods to be 
20 acknowledged by th e addr e ss e d r e cipi e nt. An I SIS I ave may only transm i t wh e n it r e c e iv e s a p i ng 
pack e t (s ee s e ction 12. 4 . 4 .6) addr e ssed to It. To avoid bus cont e ntion a ll I S I d e vic e s must wait 
ISITurnAround b i t tim e s (5 polk cyolos por bit) after d e t e cting th e e nd of a packet boforo transm i tting 
a packet (assum i ng they aro required to transm i t). Al l non transmitting I SI dovicos must tr i stato their 
Tx dr i vers to avoid li n e cont e nt i on. Th e I SI protoco l I s defined to avoid devices dr i v i ng out of ord e r 
25 ( e .g. when an I S I S I av e i s no long e r b e ing addressed). As tho IS I usos standard I/O pads th e r e i s no 
physica l co ll ision dotoct i on m e chanism. 

There aro thr e e types of I SI packet: a long packet (used for data transmiss i on), a p i ng packet (us e d 
by the IS I Master to prompt I SIS I av e s for pack e ts) and a short pack e t (us e d to acknowl e dg e r e c ei pt 
of a pack e t). Al l ISI packots ore dol i noat e d by a Start and Stop fi e lds and transmission i s atom i c i .e. 
30 an ISI packet may not be spl i t or halted onco transmission has started. 
12.^. 4.1 — ISI transactions 

Th e diff e rent typos of ISI transactions ore out li ned in F i gur e 32 b el ow. As d e scribed l at e r al l NAKs 
aro i nferred and ACKs are not addr e ssed to any part i cular I SI d e v i c e . 
12, 4. 4.2 Start Field Doecription 

35 Th e Sto/t fie l d serves two purposes: To allow tho start of a packet bo unamb i guously i dentified and 
to a l low tho r e c e iving devic e synchron i se to the data stream. Th e symbol, or data value, used to 
id e ntify a Staff field must not legit i mately occur In tho ensuing packet. Bit stuffing I s used to 
guarantoo that the Start symbo l w i l l bo un i qu e i n any val i d ( i . e . e rror fr ee ) pack e t. Th e IS I needs to 
soo a val i d Start symbo l b e for e pack e t r e c e pt i on can commonco i.e. th e r e c e iv e logic constantly 

40 l ooks for a Start symbo l i n the i ncoming data and w i ll reject a ll data until i t soos a Start symbol. 
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Furthermore if a Start symbol oocurs ( i ncorr e ctly) during a data packet i t wi ll bo troatod as the start 
of a n e w pacl< e t. I n this caso tho partially r e c e iv e d pack e t w i ll b e d i scard e d. 
Tho data valuo of the Start symbol shou l d guarantoo that an adequat e number of trans i tions occur 
on th e phys i ca l ISI l in e s to al l ow tho rocoiv i ng IS I d e vic e to d e t e rmin e th e b e st sampl i ng window for 
5 tho transmitted data. Tho Start symbol shou l d also bo sufficiontly l ong to onsuro that th e bit stuff i ng 
ov e rhead i s l ow but should st ill bo short enough to r e duc e i ts own contribution to tho pack e t 
overhead. A Start symbo l of b01010101 is therefore uood as i t is an offootivo comprom i se botwoon 
th e s e constra i nts. 

Each SoPEC i n a mu l ti - SoPEC syst e m wi l l deriv e its syst e m clock from a un i qu e ( I . e . on e p e r 

10 SoPEC) crystal. Th e syst e m c l ocks of each d e v i co wil l drift r e lative to oach othor ovor any period of 
timo. Tho system c l ocks aro usod for gonorat i on and samp l ing of tho I S I data. Thoroforo the 
sampl i ng w i ndow can dr i ft and could resu l t i n i ncorrect data va l ues boing samp l ed at a l ater po i nt i n 
tim e . To ov e rcom e this prob le m th e I S I r e c e iv e circu i try tracks tho samp l ing window against the 
i ncom i ng data to ensure that the data is samp le d i n th e c e ntr e of th e bit period. 

15 12.4.4.3 Stop Fi e ld Deeoriptior) 

A 1 b i t t i m e Stop fi e ld of b1 p e r IS I li n e e nsur e s that a ll I S I l in e s r e turn to tho high state b e for e the 
noxt packet is transm i tted. Th e stop f i eld is dr i v e n on to e ach I S I l i n e s i mu l tan e ous l y, i.e. b1 1 for a 
2 w i r e I SI and b1 1 1 1 for a 4- w i r e IS I wou l d be i nt e r le av e d ovor the r e sp e ct i v e ISI li nos. Each I S I lin e 
is dr i v e n high for 1 b i t t i me. This is necessary b e caus e th e f i rst bit of th e Ste/t fiold is bO. 

20 12.4. 4. 4 BitStufTmg 

This involv e s th e i ns e rtion of bits into th e b i tstream at th e transm i tt i ng SoPEC to avoid c e rtain data 
patt e rns. Th e r e ce i v i ng SoPEC vyi ll str i p thes e i n se rt e d bits from the b i tstr e am. 
B i t stuffing wi ll b e p e rform e d wh e n th e Start symbol app e ars at a locat i on othor than th e start f iel d 
of any packet, i.e. whon tho bit pattern b0101010 occurs at th e transm i tt e r, a 0 w i l l bo inserted to 

25 escape tho Sto/t symbo l , resu l t i ng i n th e bit patt e rn b01010100. Conv e rs e ly, whon tho bit patt e rn 
b0101010 occurs at tho roco i vor, if tho noxt b i t is a '0' i t wi l l b e str i pp e d, if it is a '1 ' th e n a Start 
symbo l i s d e tected. 

I f the fr e qu e ncy variat i ons i n the quartz crysta l wer e larg e e nough, it is conc ei vab l e that the 
resu l tant froquoncy drift ovor a largo number of cons e cut i v e 1s or Os cou l d caus e th e r o c oi ving 
30 SoPEC to loos e synchronisation.^ Th e qtiartz crystal that will be used in SoPEC s ystems is rat e d for 

32MHz @ lOOppm. In a multi SoPEC syst e m with a 32MHz+100ppm cr>^stal and a 32MHz lOOppm orystal, 
it would talc e approximat e ly 5000 pclk cycl e s to caus e a drift of 1 pollc cyole. This m e ans that w e would only 
n ee d to bit stuff som e wh e r e b e for e 1000 ISI bits of cons e cutiv e Is or consecutiv e Os, to e nsur e ad e quat e 
synchronization. As th e maximum number of bits tmnsmitt e d p e r ISI lin e in a pack e t is 115, it should not b e 



^Curr e nt max packet s i zo 290 b i ts - 116 bits por I S I lino (on a 2 wire ISI) ~ 725 160MHz oyo l os. Thus tho 
pcfks in th e two communicating IS I dov i oos should not drift by moro than on o oyolo i n 725 i .o. 1379 ppm. 
Car e fu l analys i s of tho crysta l , PLL and oso il lator specs and tho sync dotoct i on circuit is noodod horo to 
e nsure our so l ut i on Is robust. 
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n e c es sary to perform bit stuffing for oonseoutiv e Is or Os. W e may wish to constrain the sp e o of xtaiin and 
also xtalin for th e ISI - Bridge chip to e nsur e the ISI cannot drift out of sync during packet reception. 
Not e that any v i o l ation of bit stuffing w il l resu l t in th e RxFram e ErrorSticky status b i t b ei ng set and 
th e incom i ng pack e t w il l b e treated as an e rror e d pack e t. 
12.^.^.6 ISI Long PQGkot 

Th e format of a long I S I packet i s shown i n Figur e 33 b e low. Data may on l y bo transferred botwoon 
I SI devic e s using a long packet os both th e short and p i ng pack e ts hav e no payload field. Exc e pt in 
th e cas e of a broadcast packet, the r e c e iving IS I dev i ce will a l ways reply to a long packet with on 
e xplicit ACK (if no error is d e t e cted i n the received pack e t) or will not reply at al l ( e .g. an e rror is 
d e t e cted in the received packet), l eaving the transm i tter to infer a NAK. As w i th all ISI packets the 
b i tstroam of a l ong packet is transm i tt e d with its I sb (the l eftmost bit in Figure 33) first. Note that the 
tota l l ength (in b i ts) of an I S I long pack e t d i ff e rs sl i ghtly b e tween a 2 and 4 w i r e I S I syst e m duo to 
th e d i ffer e nt numb e r of b i ts r e quir e d for th e Start and Stop f iel ds. 

A ll l ong packets beg i n w i th th e Sto/t field as describ e d e arli e r. Tho PktDocG fiold is d e scrib e d in 
Table 33. 

Tab le 33. PktD es c fi e ld d e script i on 



00 Long pock e t 



OA — R e s e rv e d 



^ — P i ng packet 
-A — R e serv e d 



2 Sequonco bit va l ue. Only va l id for long packets. Soo sect i on 12. 4 . 4 .9 for a d e scription 



of s e quence bit operation 



Any I S I d e v i c e In the syst e m may transmit a l ong packet but on l y the ISIMastor may i n i t i at e an I SI 
transact i on using a l ong pack e t. An iSIS I av e may only s e nd a l ong packet i n r e p l y to a ping 
m e ssag e from tho I S I Mastor. A long pack e t from an I SISIave may b e addr e ss e d to any I SI d e vic e i n 
the system. 

Th e Acyc/rogs fio l d i s stra i ghtforward and compl i es with tho i S I nam i ng conv e ntion d e scrib e d in 
s e ction 12.5. 

Th e payload fi e ld is e xactly what is in th e transmit buff e r of the transm i tt i ng ISI dev i c e and gets 
copi e d i nto th e r e c ei ve buff e r of th e addr e ssed IS I device(s). When present the pay l oad f i eld i s 
always 256 bits. 

To e nsure strong error detect i on a 16 bit CRC i s appended. 
12.^,1,6 ISI Ping Packot 

The IS I ping packet is usod to al l ow iS I S I avos to transm i t on tho I S I bus. As can bo soon from 
F i gur e 3 4 be l ow tho p i ng packet can b e v ie wed as a spec i a l cas e of th e long pock e t. I n oth e r words 
it i s a long packot w i thout any payload. Therefore tho PktDoec fio l d is tho same as a long packet 
PktD e ec, with th e e xc e pt i on of th e s e qu e nce bit, which is not valid for a ping packet. Both the 
ISISubId and th e sequ e nc e b i t ar e f i xed at 1 for al l p i ng pack e ts. Thes e values wer e chos e n to 
max i mize th e hamm i ng distanc e from an ACK symbo l and to min i m i ze tho l ikelihood of bit stuffing. 
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Th e ISfSubid i s unused i n p i ng pack e ts b e caus e tho I SIMast e r i s addr e ssing tho i S I d e v i c e rathor 
than one of th e DMA chann el s in th e devic e . Th e ISISIav e may addr e ss any ISUd.lSISubfd i n 
r e spons e i f it w i shes. The IS I S I avo w i l l respond to a p i ng pack e t with o l thor an e xp l ic i t ACK (if it has 
noth i ng to sond), an i nforrod NAK ( i f it dotoctod an orror i n the ping packot) or a l ong packet 
5 (conta i ning th e data i t w i shes to s e nd). Not e that i nf e rr e d NAKs do not r e sult i n tho retransmission 
of a ping packot. This i s booauso th e p i ng packet wil l bo retransm i tted on a pred e t e rm i n e d sch e dule 
(goo 12. 4 . 4 .1 1 for moro dota il s). 

An ISIS I av e should n e v e r r e spond to a p i ng message to th e broadcast ISfId as this must hav e b ee n 
sent in orror. An IS I p i ng pack e t wil l n e v e r b e s e nt i n r e spons e to any pack e t and may only orig i nate 
10 from an ISIMast e r. 

12.4.^.7 iSi Short Packot 

The IS I short packet is only 1 7 b i ts long, inc l ud i ng th e Start and Stop fi el ds. A valu e of b1 1 10101 1 i s 
proposed for th e ACK symbol. As a 16 bit CRC is i nappropriate for such a short packot i t is not 
us e d. I n fact thoro Is on l y ono va l id value for a short ACK packot as tho Start, ACK and Stop 
15 symbo l s a l l hav e fix e d valu e s. Short pack e ts aro only us e d for acknowl e dgem e nts (i. e . e xpl i cit 

ACKs). Tho format of a short I S I pack e t is shown i n F i gur e 35 b el ow. Th e ACK valu e i s chosen to 
e nsure that no bit stuffing is required in tho packot and to min i mize its hamming distanco from ping 
and l ong IS I pack e ts. 

20 1 2. ^. ^. 8 Error D e t e ction and R o tr a nsmiseion 

Th e 16 - b i t CRC wi l l prov i d e a h i gh d e gree of orror detect i on and tho probabi l ity of transmiss i on 
errors occurring is very low as tho transm i ssion channe l (i.e. PCB traces) w i l l have a low inherent bit 
error rate. Th e numb e r of und e t e ct e d e rrors shou l d th e r e fore b e m i nute. 

The HDLC standard CRC 16 ( I .e. G(x) - x^ -^*^^^^ ^ *l) I s to b e used for this calculation, which i s 
25 to b e p e rform e d s e r i a l ly. I t i s calcu l ated over th e entire pack e t ( e xclud i ng th e Start an6 Stop f i e l ds). 
A simp le retransmiss i on m e chanism froos th e CPU from g e tt i ng i nvolved in e rror r e cov e ry for most 
errors because tho probability of a transm i ss i on orror occurring moro than once in success i on is 
vory, very l ow in normal circumstances. 

Aft e r e ach non - short I S I pack e t i s transmitt e d the transmitt i ng dov i co will opon a r e ply window. Th e 
30 s i z e of tho roply window w ill b e ISfShortR e piyWin bit t i m e s wh e n a short packot i s o xpoctod in rep l y, 
i .o. tho s i ze of a short pack e t, allow i ng for worst cas e bit stuffing, bus turnarounds and t i m i ng 
difforoncos. Tho size of tho rop l y window wi ll bo ISILongRoplyWin bit times when a long packot is 
e xp e cted i n r e p l y, i .o. th i s w ill be the max s i z e of a l ong pack e t, a ll owing for worst case bit stuff i ng, 
bus turnarounds and timing differenc e s. In both cas e s i f an ACK is r e ce i v e d th e w i ndow w i ll c l os e 
35 and anoth e r pack e t can bo transm i tted but i f an ACK i s not rece i ved then tho fu ll l ength of th e 
w i ndow must b e wa i t e d out. 

As no reply should bo sent to a broadcast pack e t, no r e ply w i ndow should be required howev e r al l 
other l ong packets open a reply w i ndow in ant i cipation of an ACK. Whi l o tho dos i ro is to m i nim i z e 
th e tim e b e tween broadcast transmissions th o simpl e st solution shou l d bo employed. Th i s would 
40 i mply th e same siz e reply w i ndow as other long pack e ts. 
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Wh e n a pockot has boon rec ei vod without any e rrors th e rec ei ving I SI dov i co must transmit i ts 
acknowlodgo pao l ^ot (which may bo o i thor a l ong or short pookot) boforo tho rep l y window c l os e s. 
Wh e n d e t e ct e d errors do occur tho r e c ei ving ISI d e v i c e w i ll not send any response. The transmitt i ng 
iS I d e vic e interprets th i s lack of respons e as a NAK i ndicating that errors w e re dotocted i n th e 
5 transm i tt e d packet or that tho rocoiving dev i ce was unab l e to rocoivo tho pack e t for som e r e ason 
(e.g. its buffers ar e fu l l). I f a long packet was transmitted tho transm i tt i ng I S I d e v i ce will koop tho 
transm i tt e d packet i n its transm i t buffer for retransmission. If tho transm i tt i ng dov i co is tho ISIMastor 
it wil l retransmit the packet i mmed i ately whi le if th o transmitt i ng dovico is an I SIS I ave it w il l 
r e transm i t th e pack e t i n r e spons e to tho n e xt ping i t r e c e iv e s from tho I SIMast o r. 

10 Th e transmitting IS I devic e wi ll cont i nu e retransm i tting tho pack e t wh e n it rocoivos a NAK unti l it 
ei th e r r e c ei v e s an ACK or th e numb e r of retransmission attempts equals tho value of tho 
NumRotrioG r e gist e r. If th e transm i ssion was unsuccessful then th e transm i tt i ng devic e s e ts tho 
TxErrorSticky b i t i n i ts iSUntStatus r e gister. Th e r e c e iv i ng dev i ce also sots the RxErrorSticky b i t i n 
i ts fSUntStatue register whonovor i t detects a CRC error in an incoming packet and is not requ i red 

15 to take any furth e r action, as i t is up to th e transmitt i ng devic e to d e tect and rect i fy th e problem. Tho 
NumRotrioG reg i sters i n ail I SI devic e s shou l d bo set to the sam e value for consist e nt operat i on. 
Not e that successful transm i ssion or r e ception of p i ng packets do not affect retransmiss i on 
operat i on. 

Not e that a transm i t orror w il l cause tho I S I to stop transmitting. CPU i ntorvontion wil l bo required to 
20 reso l ve the source of the problem and to r e start th e IS I transmit op e ration. R e c e iv e e rrors howovor 
do not affect rocoivo operation and they are collected to facil i tate prob l em d e bug and to mon i tor tho 
qual i ty of tho I S I physica l channel. Transmit or r e ceive errors should b e extreme l y rare and their 
occurr e nc e will most l ikely ind i cat e a s e r i ous prob l em. 

Note that broadcast pack e ts ar e never acknowledg e d to avo i d content i on on tho common IS I l i n e s. 
25 I f an I S I SIav e d e t e cts an e rror i n a broadcast pack e t i t shou l d us e the message pass i ng mechanism 
descr i bed e arli e r to al e rt the I SIMastor to tho error if it so w i shes. 
12. ^. ^. 9 SoquonoQ Bit Oporation 

To e nsur e that commun i cat i on b e twe e n transm i tting and r e c e iving I S I d e vic e s is corroct l y ord e r e d a 
sequ e nce bit is Inc l ud e d in e very long pack e t to koop both devices in stop w i th each oth e r. Tho 

30 s e qu e nce b i t field is a constant for short or ping packets as th e y ar e not used for data transmiss i on. 
I n addit i on to the transm i tt e d sequ e nc e b i t a ll I SI devices koop two l ocal sequ e nc e bits, on e for each 
fSlSubld. Furth e rmore e ach I S I device ma i nta i ns a transmit sequ e nc e b i t for each iSHd and 
IStSubld i t is i n communicat i on w i th. For pack e ts sourcod from tho external host (v i a USB) the 
transmit sequ e nc e b i t i s conta i ned i n tho re le vant USBERnD e et register wh i le for pack e ts sourc e d 

35 frem the CPU tho transmit sequence b i t is contained i n the CPUISITxBuffCntrl r e g i st e r. Th e 

s e qu e nce b i ts for r e c ei v e d packets are stored in ISiSubidOS e q and iSfSubidlSoq reg i sters. A l l ISI 
d e vices w ill i n i tial i z e the i r sequence b i ts to 0 after rosot. I t is the responsibil i ty of software to ensure 
that th e s e quence bits of tho transmitting and rocoiving IS I d e v i ces are corroct l y in i t i a li zod each time 
a n e w sourc e i s se l ected for any iSUd.iSiSubld channe l . 
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S o quonc e b i ts ar e ignor e d by th e r e c ei v i ng I S! d e v i c e for broadcast packets. How e ver the 
broadcast i ng IS I device is free to togg i o th e s e qu e nc e in th e broadcast packets sinc e th e y w i l l not 
aff e ct op e rat i on. The SCB wi ll do th i s for a ll USB source data so that th e r e is no sp e c i a l tr e atm e nt 
for tho soquonco bit of a broadcast packet in tho transmitt i ng d e vice. CPU sourcod broadcasts will 
5 hav e s e qu e nc e b i ts toggl e d at th e discr e tion of tho program codo. 

Each SoPEC may also i gnor e tho soquonco bit on o i thor of i ts ISISubId channe l s by s e tting th e 
appropr i ate bit in th e iSlSubldSoqMoGk r e gist e r. Th e s e qu e nc e bit shou l d b e ignored for I S I Sub I d 
chann e ls that wil l carry data that can or i g i nat e from moro than one source and is s e lf ord e ring e .g. 
control messages. 

10 A r e c ei ving I S I d e v i c e w ill togg le i ts sequenc e bit addr e ss e d by th e I S I Sub I d only when th e rece i v e r 
i s ab l o to acc e pt data and r e c e iv e s an orror froo data packet addressed to i t. The transm i tting I S I 
d e v i c e wi ll toggl e i ts s e qu e nc e b i t for that I SI I d. IS I Sub I d chann e l only wh e n i t receives a valid ACK 
handshak e from th e addr e ss e d ISI d e v i c e . 

Figure 36 shows tho transmission of two l ong paokots w i th tho soquonco b i t in both tho transmitting 
15 and r e c e iving d e v i c e s togg l ing from 0 to 1 and back to 0 aga i n. Th e togg li ng op e ration wi ll continu e 
i n this mann e r i n e very subsequent transm i ss i on unti l an e rror condition is e ncounter e d. 

Wh e n th e r e c e iving I S I d e v i c e d e t e cts an e rror in th e transmitt e d l ong pack e t or i s unabl e to acc e pt 
th e pack e t (b e caus e of ful l buff e rs for e xamp le ) i t wi ll not r e turn any pack e t and it wi ll not toggle its 
20 loca l s e qu e nc e bit. An e xampl e of th i s i s d e pict e d in F i gur e 37. Th e abs e nc e of any r e spons e 

prompts th e transm i tting d e v i c e to r e transmit the orig i na l (s e q~0) packet. This time tho packet is 
roco i vod without any errors (or buff e r spac e may have boon freed) so tho rocoiv i ng I SI dov i co 
toggles its loca l s e qu e nc e b i t and r e sponds w i th an ACK. Th e transm i tt i ng d e vic e th e n toggl e s i ts 
l oca l s e qu e nc e b i t to a 1 upon corr e ct r e c e ipt of th e ACK. 

25 

How e v e r it i s also possib le for th e ACK pack e t from th e r e c ei ving I S I dov i co to bo corrupted and this 
sc e nario is shown i n Figure 38. In this cas e th e r e c e iv i ng devic e toggles its loca l soquonce bit to 1 
when tho long packet i s rocoivod w i thout orror and rep l ies w i th an ACK to th e transmitt i ng dev i c e . 
Th e transmitt i ng d e vic e do e s not r e c e iv e th e ACK corr e ct l y and so do e s not chang e i ts local 

30 s o quonco bit. I t th e n r e transm i ts th e s e q-'Q long pack e t. Wh e n the rocoiv i ng dovico finds that there 
i s a mismatch b e twe e n th e transm i tt e d s e qu e nc e b i t and th e e xp e ct e d ( l ocal) s o quonco bit i s 
discards tho long packet and ropl i os with on ACK. Whon tho transm i tting I SI dov i co corrootly 
rec ei v e s tho ACK i t updat e s its loca l sequence bit to a 1 , thus r e stor i ng synchronization. Not e that 
wh e n th e ISiSubfdS e qMaek b i t for th e address e d I S I Sub I d is s e t th e n th e retransmitted packet is 

35 not d i scarded and so a dup li cate pack e t w ill be r e c e ived. Tho data conta i n e d in th e pack e t shou l d 
b e s el f ordering and so the softwar e hand li ng thes e packets (most l ikely contro l m e ssag e s) i s 
e xp e ct e d to deal w i th this ovontual i ty. 
12. ^. 4. 10 Flow Control 

Th e I SI a l so supports flow control by treat i ng it i n exactly the sam e manner as an o rror in th e 
40 r e ce i ved pack e t. Becaus e the SCB enjoys greater guaranteed bandw i dth to DRAM than both th e I S I 
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and USB can supply flow contro l shou l d not bo roqu i r e d during normal op e ration. Any blockag e on 
a DMA channel will soon result i n th e NumR e trioe valu e be i ng exceedod and transmiss i on from that 
SoPEC b ei ng halted. I f a SoPEC NAKs a pack e t b e caus e i ts RxBuff e r i s fu ll i t w il l flag an ov e rf l ow 
condition. Th i s condition can potontia ll y cause a CPU i nt e rrupt, if tho corresponding interrupt i s 
5 enab l ed. The RxOv e rdowSticky bit of its iSUntStatus regist e r r e flects this cond i tion. Becaus e flow 
contro l is treated in tho samo manner as an error tho transm i tt i ng ISI dev i ce w i ll not be able to 
difforontiato a flow contro l cond i tion from an e rror in th e transmitted pocket. 
12.4.^.11 Auto ping Oporation 

Wh il e the CPU of the I S I Mast e r could send a p i ng packet by wr i t i ng tho appropr i ate hoador to tho 
10 CPUISiTxBuffCntri r e g i st e r it is e xp e ct e d that al l ping pack e ts wil l be gonoratod In the I S I its e lf. The 
us e of automatically generated p i ng pack e ts e nsur e s that IS I SIav e s w ill b e given access to th e ISI 
bus with a programmabl e min i mum guaranteed frequ e ncy i n add i t i on to whenev e r i t would 
othonwise be i d l e. Fiv e registers facil i tate the automatic generation of p i ng messages within the I S I : 
PingSchodui e O, PingSchedulol, PingSohoduio2, ISITotalPoriod bx\6 iSiLocalP e riod, Auto pinging 
15 will b e e nab le d i f any b i t of any of th e PingSoh e duleN r e gisters is sot and d i sabled if a ll 
PingSohoduloN registers ar e 0x0000. 

Each bit of th e 1 5 - bit PingSchoduloN regist e r corr e sponds to an I S II d that is used i n the Addrooc 
field of tho p i ng packet and a 1 in th e b it pos i t i on I ndicat e s that a ping pack e t i s to be generated for 
that I S I Id. A 0 in any bit posit i on w i ll e nsur e that no ping packet Is gen e rat e d for that IS I Id. As 

20 I S I SIaves may d i ffer In their bandwidth requirement (part i cularly i f a storage SoPEC is present) 

three different P i ngSch e du le r e g i st e rs ar e us e d to a l low an iS I S I av e r e c ei ve up to three times the 
number of pings as anoth e r activ e IS I SIav e . Wh e n th e ISIMast e r is not s e nd i ng l ong packets 
(sourc e d from either tho CPU or USB in th e cas e of a SoPEC I SIMaster) I S I p i ng packets wil l b e 
transm i tt e d according to th e patt e rn g i ven by th e thr ee PingSch e dul e N r e gisters. Th e ISI w i ll start 

25 w i th the Isb of PingScheduleO reg i ster and work i ts way from Isb through msb of e ach of th e 

PingSch e duleN r e gist e rs. Wh e n th e msb of PingSchedul e 2 i s r e ach e d the I SI returns to th e I sb of 
PingSch e duloO and cont i nu e s to cycle through e ach b i t position of e ach PingSchoduloN register. 
Tho I SI has more than e nough t i me to work out th e destination of tho n e xt p i ng pack e t whi l e a ping 
or long packet is be i ng transm i tt e d. 

30 W i th tho add i t i on of auto ping oporation wo now have throe potent i a l sources of pack e ts i n an 

I SIMast e r SoPEC: USB, CPU and auto ping. Arbitration betw ee n th e CPU and USB for access to 
th e I SI is handl e d outs i de the IS I . To ensure that l oca l packets get prior i ty whenever possib l e and 
that p i ng packets can hav e some guarant ee d acc e ss to th e ISI we us e two 4 b i t counters whose 
r el oad va l ue is contained i n tho ISITotalPoriod and ISILocalPoriod registers. As wo saw i n section 

35 12. 4 . 4 .1 e very iSI transaction is in i tiat e d by th e I SIMaster transm i tting e ither a l ong packet or a ping 
packet. The ISITotalPeriod count e r is d e cr e m e nt e d for e very I SI transact i on ( i .e. e ith e r long or ping) 
wh e n i ts value is non z e ro. The ISILocalPoriod count e r is decr e mented for ev e ry local packet that is 
transm i tted. N ei th e r count e r i s d e cremented by a retransm i tted packet. I f the ISITotalP e riod counter 
i s z e ro then ping pack e ts will not change its va l u e from zero. Both the ISITotalP e riod and 
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ISlLoGolPoriod oountors aro ro l oadod by tho noxt loca l packet tranom i t roquost aftor tho 
ISITotalP e riod count e r has r e ach e d zero and this loca l pack e t has prior i ty ov e r pings. 
Tho amount of guarantoed I SI bandw i dth al l ocated to both local and ping packets is dotorminod by 
th e va l u e s of tho ISiTotalPeriod and ISILooalP e riod regist e rs. Local pack e ts w ill a l ways b e g i v e n 
5 pr i ority wh e n th e fSILooaiPoriod count e r is non zero. P i ng pack e ts w ill b e g i ven pr i ority when th e 
ISILoGolPoriod counter i s zero and tho ISITotalP e riod count e r is sti l l non zero. 
Note that ping pack e ts ar e v e ry likoly to got moro than thoir guarant ee d bandw i dth as thoy wil l b e 
transm i tt e d wh e n e v e r th e ISI bus would oth e rwis e bo idio (i.e. no ponding local pack e ts). In 
parti c u la r wh e n tho ISITotalP e riod count e r i s zero i t wi ll not bo roloadod unt il another loca l pack e t i s 

10 p e nding and so ping pack e ts transmitt e d wh e n th e ISITotalPeriod counter i s zoro wil l bo in add i t i on 
to tho guaranto e d bandwidth. Local packets on tho oth e r hand w i l l nevor got moro than their 
guarante e d bandwidth because each local packet transm i tted docromonts both counters and wi ll 
caus e th e count e rs to b e reload e d wh e n the ISITotalPoriod counter is z e ro. Tho difforonoo botwoon 
the valu e s of th e ISITotalP e riod and ISILocalP e riod r e gist e rs determ i nes the number of 

15 automatically g e n e rat e d ping pack e ts that ar e guarantoed to b e transmitted every ISITotalPeriod 
numb e r of ISI transactions. I f tho ISITotalPeriod and ISILocolPoriod va l u e s ar e tho same then th e 
loca l pack e ts will always get priority and could totally e xc l ud e ping packets i f tho CPU a l ways has 
pack e ts to s e nd. 

For e xampl e i f ISITotalP e riod - OxC; ISILocalP e riod - 0x8; PingSch e dul e O - OxOE; Pir)gSchedul e 1 
20 ~ OxOC and PingSch e dul e 2 ~ 0x08 th e n four p i ng m e ssages ar e guarantoed to bo s e nt in every 12 
I S I transact i ons. Furth e rmor e I SI I d3 w il l receive 3 times tho number of ping packets as I S I dl and 
ISI I d2 wi ll r e ceiv e twice as many as I SId1 . Thus over a p e r i od of 36 cont e nd e d I S I transact i ons 
(al l owing for two fu l l rotations through th e throe PingSoh e duleN reg i sters) when l oca l packets ar e 
a l ways pending loca l packets wi ll bo sent, ISIdl wil l rece i vG 2 p i ng packets, I S I d2 wi ll rece i ve A 
25 p i ngs and I S I d3 will r e c ei ve 6 ping pack e ts. If l ocal traff i c is le ss fr e quent th e n th e ping fr e qu e ncy 
wil l automat i ca l ly adjust upwards to consum e all r e maining IS I bandw i dth. 

12. 4 .5 Wak e- up from Sl ee p Mod e 

E i th e r th e Pr l ntMast e r SoPEC or th e e xt e rna l host may plac e any of th e IS I SIav e SoPECs i n sle e p 
modo pr i or to go i ng i nto s l oop modo i tse l f Tho I S I SIavo dovico shou l d thon ensure that its 

30 ISIWakoupEriable b i t of th e Wak e upEnabl e reg i st e r (s ee Tablo 31) i s s e t pr i or to e nt e ring sl ee p 
mod e . In an IS I SIave d e vice tho I S I block wi ll continue to rece i ve power and clock dur i ng s l oop 
modo so that i t may monitor tho gpio_i6i_din linos for activ i ty. When I S I activ i ty is detected during 
sl ee p mod e and the ISIWakoupEnablo bit is set the I S I asserts the l€i_Gprjree e t_n signal. Th i s w i l l 
bring the r e st of tho ch i p out of s l oop mod e by m e ans of a wak e up r e set. See chapt e r 16 for mor e 

35 d e ta i ls of reset propagat i on. 

12. 4 .6 Imp le mentation 

Although th e I S I consists of eith e r 2 or 1 I SI data l i n e s ov e r which a serial data str e am is 
d e mu l t i p le x e d, e ach I SI li n o i s treated as a s e parate sorial li nk at the phys i cal l ay e r. This p e rmits a 
certa i n amount of sk e w between the I SI li n e s that cou l d not be tolerated i f th e lines were tr e at e d as 
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a paral l ol bus. A low e r Bit Error Rato (BER) can bo aohiovod i f th e s e r i a l data rocovory i s porform e d 
soparatoly on oaoh Dor i al l ink. F i gure 39 i l l ustrates the ISI sub block part i tioning. 
12.^.6,1 iSf Sub block Partition 
* Def i n i t i on of l /Os. 
5 Tab l e 3^. I S I I /O 



Port nam e 



Pifls 



Description 



C l ock and Reset 



isi__pclk 



I S I primary clock. 



is i res e t n 



4« 



I S I reset. Act i ve low. 

Assorting isijr e B e t_n w il l reset al l IS I logic. 
Synchronous to is i _pc l k. 



Configuration 



i si_go 



I SI GO. Act i ve high. 

Wh e n GO is d e assert e d, all IS I stat e machines are 



r e s e t to th e ir idl e stat e s, a l l I S I output signals ar e d e 
asserted, but al l ISI count e rs r e tain th ei r va l u e s. 



When GO i s assorted, a ll IS I counters ar e r e s e t and all 
ISI statomachines and output s i gna l s w i l l r e turn to th e ir 
norma l mode of op e rat i on. 



i s i mast e r s el ect 



In 



I S I master se l ect. 

D e t e rminoG whether the SoPEC is an I S I Master or not 



1 - I SIMastor 
0 - I S I S I ave 



isi jd [ 3:0] 



I S I I D for this device. 



is i _retr i es[3:0] 



4« 



I SI number of retries. 



Numb e r of t i m e s a transm i tt i ng I S I d e v i ce wi l l attempt 



r e transm i ssion of a NAK'd pack e t b e for e aborting th e 
transmission and flagging an error. Th e va l ue of this 



configuration signal should not bo changed while there 
ar e va li d packets i n the Tx buff e r. 



is i _p i ng_schedu l eO[1 
4^ 



4^ 



In 



I S I auto ping schodu l o #0. 



Denotes wh i ch I S I Ids will bo rocoivo p i ng pack e ts. Note 
that bitO refers to I S II dO, b i t1 to IS II d1...b i t11 to I S II dl ' l. 



S e tt i ng a bit in this sch e dul e wi ll e nab le auto ping 



generation for the corresponding I S I I D. The ISI will 
start from th e b i t 0 of iGijf)ing_Bch e duleO and cyc le 
through to b i t 1 ^, generat i ng pings for each b i t that i s 
set. Th i s operat i on w i l l b e porform e d i n sequ e nc e from 
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4ft 


As per iGi_plngjsGhoduloO. 


ioi_ping_SGhodulo1 [1 






45 


4n 


As por iGijpingjDohoduloO. 


isi_plng_schoduio2[1 




isLtotal_period[3:0] 


4 


In 


Reload value of the ISI Total Poriod Counter. 


isi_locai_period[3:0] 


4 




Reload value of the IS! Local Period Counter. 








4 


4ft 


Number of active ISI data pins. 


isi_number_pins 


Used to solect how many serial data pins will be used 


to transmit and receive data. Should reflect the number 


of IS! device data pins that are in use. 


H 151 Uialq[O.UJ qGUVe 

0 - isi_data[1 :Q] active 


isLturn_around[3:0] 


4 


4ft 


ISI bus turn around time In ISI clock cycles (32MHz). 


isi_short_roply_win[^ : 




4n 


ISI long packet reply window in ISI clock cycles 




(32MHz). 


iGMong_ropiy_win[8: 


9 


4ft 


ISI long packet reply window In ISI clock cycles 
(32MHz). 


isi_tx_enable 


4 


4ft 


ISI transmit onablo. Active high. 






Enables ISI transmission of long or ping packets. ACKs 
may still be transmitted when this bit is 0. The value of 




this configuration signal should not be changed while 
thoro are valid packets in tho Tx buffer. 






4 


4n 




isi_rx_enable 


ISI receive enable. Active high. 


Enables ISI packet reception. Any activity on the ISI 


bus will be ignored when this signal is de- asserted. 


This signal should only be de asserted If the ISI block 


is not required for use in the design. 


isi_bit_6tuff_rate[3:0] 


4 


4ft 






ISI bit stuffing limit. 

Allows the bit stuffing counter value to be programmed. 


Is loaded into tho 1 upper bits of the 7blt wide bit 


stuffing counter. The lower bits are always loaded with 


b1 11 , to prevent bit stuffing for loss than 7 oonsocutivo 


ones or zoroos. E.g. 

bOOO : stuff_count - bOOOOl 1 1 : bit stuff after 7 


conoooutivo 0/1 


bill: stuff^ccunt - b1 1 1 1 1 1 1 : bit stuff aftorl 27 
consecutive 0/1 


Serial Link Signalo 
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isLs e r_data_ i n[3:0] 4 \b 



Each bit corresponds to a separat e s e r i al li nk. 



IS I Seria l data i nputs. 



isLs e r_data_out[3:0] 4 Out 



I S I S e r i a l data outputs. 

Each bit corresponds to a soparoto serial l ink. 



isi_ser_data_en[3:0] 4 Out 



IS I Ser i al data driver enab l es. Active h i gli. 
Each bit corr e sponds to a s e parate seria l li nk. 



Tx Packet Buffer 



isi tx wr e n 



4- \B 



Assert i ng i€i_tx_wr_ e n wi ll wr i t e th e 6 4 b i t data on 



lGi_tx_wr_clata to th e FIFO, prov i d i ng that space i s 



ava il able i n the F I FO. I f /s/ tx wr e n rema i ns asserted 



aft e r th e last e ntry i n th e curr e nt pack e t is wr i tt e n, th e 
writ e op e rat i on wil l wrap around to th e start of th e n e xt 



packet, prov i ding that space i s avai l able for a second 
pack e t in th e F I FO. 



I SI Tx FIFO writ e e nab l e. Active high. 



i si_b(_wr_data[63:0] 



64 



I S I Tx F I FO wr i t e data. 



Isi_tx _ping 



IS I Tx F I FO ping packet se l ect. Activ e h i gh. 
Asserting fct_tx jy 'mg w ill queue a ping packet for 



tranomiss i on, as opposed to a long packet. A l though 



th e r e is no data pay l oad for a p i ng pack e t, a pack e t 
l ocation i n the F I FO is used as a 'p l ace hold e r' for th e 



p i ng p a ck e t. Any data wr i tten to the assoc i at e d pack e t 
locat i on i n th e FIFO w il l b e discarded when th e p i ng 



packet i s transm i tt e d. 



' Q i -txJd[3:Q] 



5 



I S I Tx F I FO packet I D. 



I S I ID for each packet wr i tten to the F I FO. Registered 
wh e n th e last e ntry of th e pack e t is writt e n. 



isi tx sub i d 



4- 



I S I Tx F I FO pack e t sub ID. 



I S I sub I D for each packet written to the F I FO. 
Registered when th e last e ntry of th e pack e t is wr i tt e n. 



lsi_tx_pkt_oount[1 :0] 2 Out 



I SI Tx F I FO packet count. 



Ind i cates the number of pack e ts contain e d in th e F I FO. 



The F I FO has a capacity of 2 x 256 bit pack e ts. Rang e 



bOO ^^b10. 



is i _tx_word_count[2:0 [3 
I 



I SI Tx F I FO curr e nt packet word count. 



I nd i cat e s th e number of words conta i n e d in the curr e nt 



Tx pack e t l ocation of the Tx F I FO. Each packet l ocation 



has a capac i ty of 4 x 6^ bit words. Range is bOOO 
>b100. 
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isLtx_ompty 



dial 



\S\ Tx FIFO e mpty. Act i v e h i gh. 

Ind i catos that no packets aro prosont in tho F I FO. 



i s i tx ful l 



Qui 



I S I Tx FIFO fu ll . Active high. 



I ndicat e s that 2 pack e ts ar e pr e s e nt in the F I FO, 
therefor e no mor e pack e ts can be transmitted. 



i s ! tx ov e r flow 



Otrt 



I S I Tx FIFO ov e rflow. Act i ve high. 

I ndicat e s that a write operation was p e rformed on a ful l 



FIFO. Tho writo operat i on w il l hav e no e ff e ct on th e 
contents of th e F I FO or th e wr i to pointer. 



isi tx error 



Qi it 



I SI Tx FIFO error. Aot i vo high. 



I nd i catos that an e rror occurr e d whilo transmitting the 



packet curr e nt l y at th e h e ad of the F I FO. Th i s wi ll 



happ e n if tho number of transm i ssion att e mpts e xcoods 



iGi tx rotrioc. 



i s i _tx_doso[2:0] 



Out 



I S I Tx packet descriptor field. 



IS I pack e t descriptor f i eld for th e pack e t current l y at tho 



hoad of tho FIFO. See Tab l e — for dotai l s. Only valid 



whon iGiJtxj[>mpty~0, i . e . wh e n there is a va li d pack e t 
in th e FIFO. 



i si_tx_addr[4:0] 



Out 



I S I Tx packet address fiold. 



I S I address field for tho packet currently at the h e ad of 



tho F I FO. S ee Tabl e — for d e tails. On l y val i d when 



iGi_tx_ompty^O, i .e. wh e n there is a valid pack e t i n the 



Rx Packet F I FO 



i s i rx rd e n 



4- k» 



IS I Rx FIFO read e nab le . Act i ve high. 

Assorting leijrxjrdjon w i l l drive ieijrxjrdjciotQ with 



va l id data, from th e Rx packet at the head of th e F I FO, 



prov i d i ng that data i s available in the F I FO. I f 

iGijrx_rdj 9 n r e mains ass e rted after the l ast entry is 



r e ad from th e curr e nt pack e t, the read op e ration w i l l 



wrap around to th e start of th e n e xt packet, providing 
that a s e cond packet is avai l able in the FIFO. 



is i _rx_rd_data[63:Q] 



64 



Out 



IS I Rx F I FO read data. 



is i rx sub id 



Oi it 



IS I Rx pack e t sub ID. 



I nd i cat e s th e I S I sub I D associat e d with tho pock e t at 
the hoad of th e Rx F I FO. 



i sL*^ jkt_count[1 :0] 



2 Out 



I S I Rx F I FO pack e t count. 



I nd i cat e s th e number of packets contained in tho FIFO. 
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The FIFO has a oapacity of 2 x 256 bit packets. Rango 


Is bOO >b10. 


is i_rx_word_oou nt[2 : 0 






ISI Rx FIFO current packet word count. 

Indicates the number of words contained In the Rx 




packet location at the head of the FIFO. Each packet 
location has a capacity of 4 x 6^ bit words. Rango Is 


bOOO >b100. 


is i_rx_eni pty 


+ 




lol Kx FIFU empty. Active high. 


Indicates that no packets aro present in tho FIFO. 


isl_rx_full 




Out 


ISI Rx FIFO full. Active high. 

Indicates that 2 packets are present in tho FIFO, 


therefore no more packets can be received. 




isi_rx_ovor_flow 


4- 




ISI Rx FIFO over flow. Active high. 

Indicates that a packet was addressed to the local ISI 




device, but the Rx FIFO was full, resulting in a NAK. 


isi_rx__u ndor_ru n 


4- 




ISI Rx FIFO under run. Active high. 

Indicates that a read operation was performed on an 


empty FIFO. The invalid read will return the contents of 




the memory location currently addressed by the FIFO 
read pointer and will have no effect on the read pointer. 




isi_rx_frame_error 




^^^^ 


ISI Rx framing error. Active high. 


Asserted by the ISI when a framing error is detected in 


Iho received packet, which can be caused by an 


incorrect Stort or Stop fiold or by bit stuffing errors. The 
associated packet will be dropped. 




isLrx_crc_orror 


4 


Out 


ISI Rx ORG error. Active high. 


Asserted by the ISI when a CRC error Is detected in an 
incoming packet. Othor than dropping the orrored 




packet ISI reception is unaffected by a CRC Error. 



12.^.6.2 ISI Sorial Interfac e Engine (ieijeio) 

Thoro are ^ instant i ations of tho iGijsie sub block in the I S I , 1 per I S I seria l link. Th e §6l_ei e is 

r e spons i b le for Rx serial data sampling, Tx ser i al data output and b i t stuffing. 

Data i s sampl e d bas e d on a phas e d e t e ct i on m e chan i sm. The incom i ng ISI s e r i a l data str e am is 



5 ov e r sampled 5 timos per ISI b i t per i od. Th e phas e of the i ncom i ng data is det e rm i n e d by d e t e cting 
trans i tions i n tho I S I sorial data stream, which i nd i cates the IS I b i t boundaries. An I S I b i t boundary is 
def i ned as the sampio phase at wh i ch a trans i t i on was detoctod. 

Tho basic functional components of tho l s i _Gio aro d e ta i l e d in Figure 40. Those compon e nts ar e 
s i mp l y a grouping of l ogical functiona li ty and do not n e cessarily r e pr e s e nt h ie rarchy in th e d e s i gn. 

10 12./1.6.2.1 S I E Edgo Detect i on and Data I /O 

Tho basic structure of tho data I /O and e dg e d e t e ct i on mochanism is d e ta i l e d in F i gur e 41 . 
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NOTE: S e ria l data from the rec ei ver in th e pad MUST b e synohron i zed to tho ici_j)clk doma i n with a 
2 stago sh i ft rog i stor oxtornal to tho I SI, to roduoo tho nok of motostabi l ity. BorjdatQjout and 
6 e r_datQ_ e n shou l d bo registered ext e rnal l y to the I SL 

Tho Rx/Tx stotomaoh i no dr i ves corjdatQjon, ctuff_1_on and ctuffJOjon. Tho signals Gtuff_1_on 
5 and GtuffjOj & n cause a on e or a z e ro to b e driv e n on s e r_data_out wh e n th e y ar e assert e d, 

otherwise fifojrdjdata is select e d. 
12. 4 .6.2.2 S I E Rx/Tx Stat e machin e 

Th e Rx/Tx st a t e mach i ne is r e sponsib le for th e transmiss i on of ISI Tx data and tho samp l ing of ISI 

Rx data. Each I S I bit p e riod i s 5 i6i_pclk cycl e s i n duration. 
10 Th e Tx cycl e of the Rx/Tx stat e machine is illustrated i n Figur e 4 2. I t g e n e rat e s e ach I Si b i t that i s 

transmitt e d. States txO >tx4 r e pr e s e nt e ach of th e 5 i6i_pdk phas e s that constitut e a Tx IS I b i t 

period. eor_dQta_0n controls th e tristat e e nab le for tho ISI li ne dr i v e r in th e bid i rect i onal pad, as 

shown i n F i gur e 4 1 . rxjtxjcsyol e i s ass e rt e d dur i ng both Rx and Tx stat e s to i ndicate an activ e Rx or 

Tx cyc le . I t i s primari l y us e d to e nab l e b i t stuffing. 
15 NOTE: All stat e machin e s i gna l s are assum e d to b e '0' unl e ss oth e rwis e stat e d. 

Th e tx cycle for Tx bit stuffing wh e n th e Rx/Tx stat e mach i n e ins e rts a '0' into th e b i tstr e am can b e 

soon in Figure 4 3. 

NOTE: Al l st a t e m a chin e signa l s ar e assum e d to b e '0' unl e ss oth o rwis o stated 
Th e Tx cyc le for Tx b i t stuffing wh e n th e RxTx stat e mach i n e ins e rts a '1 ' i nto th e b i tstr ea m c a n b e 
20 soon i n Figure ^1. 

NOTE: A l l stat e mach i n e signals ar e assum e d to be '0' unl e ss othorwiso stated 

Th e fx* and stufT states ar e d e tailed s e parat e ly for c l arity. They cou l d b e e asily comb i n e d wh e n 

cod i ng the stat e machin e , how e ver i t wou l d b e b e tt e r for vorification and debugging if thoy wer e kept 

s e parat e . 

25 Th e Rx cycl e of th e I S I Rx/Tx stat e machin e is d e ta ile d i n F i gur e 4 5. Tho Rx cycle of tho Rx/Tx 

Statemachine, samp le s e ach I SI bit that is rece i ved. States rxO ?*rx 4 represent each of the 5 iei^pcfk 
phas e s that constitut e a Rx ISI bit p e r i od. 

Th e optimum samp l e position for an id e al I S I bit p e r i od is 2 iei_pclk cycl e s after the ISI bit boundary 
samp le , which shou l d r e su l t I n a data samp le c l os o to tho contro of th e I S I b i t per i od. 

30 rxjsampl e is ass e rted dur i ng the rx2 state to Ind i cat e a va li d I S I data sampl e on rxjbit, un le ss th e 
b i t should be str i pped when flagged by tho b i t stuffing stat e machin e , i n wh i ch cas e rxjsampl e i s not 
asserted during rx2 and tho bit i s not wr i tten to the F I FO. When e dg e i s ass e rt e d, i t r e s e ts th e Rx 
cyc le to th e rxO stat e , from any rx state. Th i s is how th e ieijsio tracks the phase of the i ncom i ng 
data. Th e Rx cycl e w ill cycle through stat e s rxO >rx4 unt i l odgo is assert e d to r e set th e sample 

35 phas e , or a tx_req i s ass e rt e d ind i cating that th e I S I needs to transm i t. 

Du e to the 5 tim e s ov e rsampl i ng a max i mum phase error of 0. 4 of an I SI bit period (2 iBijf>olk cyc l es 
out of 5) can b e to le rat e d. 

NOTE: A ll stat e mach i ne signa l s ar e assum e d to b e '0' un l ess otherwise stated. 
An oxampio of th e Tx data gonorat i on mechanism i s d e tail e d i n F i gure 4 6. txjr e q and fifo__wr_Jx aro 
40 dr i ven by tho framor block. 
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An e xamp l e of th e Rx data sampl i ng functiona l timing is dota ile d i n F i gure ^7. Th e c l ash e d l i n e s on 
th e s e r_(/ate_/n_ff s i gnal i ndicate wh e r e th e Rx/Tx stat e maohin e p e rc e iv e d tho bit boundary to bo, 
bas e d on th e phas e of th e last I S I bit boundary. I t can be soon that data i s samplod during th e sam e 
phase as tho prev i ous bit was, in tho absonco of a transition. 

5 12./1.6.2.3 S I E Rx/Tx FIFO 

Tho Rx/Tx F I FO is a 7 X 1 bit synchronous look ahoad FIFO that is shar e d for Tx and Rx 
op e rat i ons. It is r e quired to absorb any Rx/Tx l atoncy caused by b i t str i pping/stuff i ng on a per ISI 
lin e basis, i . e . som e I Si lin e s may r e quir e bit stripping/stuffing dur i ng an IS I bit per i od wh i l e the 
others may not. which wou l d l oad to a loss of synchronization betw ee n tho data of tho different ISI 

10 l i n e s, if a F I FO wer e not pr e s e nt i n e ach /g/_g/ e . 

Th e basic functiona l compon e nts of th e F I FO ar e d e ta ile d in F i gur e ^8. txjroody i s driven by tho 
Rx/Tx statemaoh i n e and s ele cts which signals contro l th e r e ad and wr i te oporat i ons. tKJroQdy~^ 
dur i ng IS I transm i ss i on and solocts tho fffo_*toc contro l and data s i gna l s. tx_roQdy-0 during I SI 
rec e ption and s e l e cts th e fifo_*rx contro l and data signa l s, fffo^r e e e t is driven by th e Rx/Tx 

15 stat e maoh i ne. It is active high and rosots tho F I FO and assoc i ated log i c boforo/aftor transm i tt i ng a 
pack e t to discard any r e s i dua l data. 

The s i zo of tho FIFO i s based on tho maximum bit stuff i ng frequency and tho size of th e shift 
r e g i ster us e d to segmont/ro ass e mble th e multip le seria l str e ams in the I S I framing l ogic. Tho 
maximum bit stuffing fr e qu e ncy i s evory 7 consecut i vo ones or zeroes. Tho sh i ft r e gist e r usod i s 32 
20 b i ts wid e . Th i s I mp l ios that th e max i mum number of stuff e d b i ts e ncount o rod in tho timo i t takes to 
f ill / e mpty th e shift r e gist e r i f 4 . This would sugg e st that 4 x1 b i t wou l d bo the m i nimum id e al s i z e of 
th e F I FO. How e v e r it is n e c e ssary to a ll ow for d i ff e rent skow and phas e e rror b e tween the IS I l ines, 
h e nce a 7 x 1 b i t F I FO. 

Th e F I FO is contro l l e d by tho /g/_c/o during pack e t r e c e ption and i s controll e d by th e ieijhramo b l ock 
25 dur i ng packet transm i ssion. Th i s i s il lustrat e d i n F i gur e 4 9. Th e signa l fx_f e a(/y s ele cts wh i ch mod e 
th e F I FO control signals operate in. Whon tx_r e ady^O, i .e. Rx mod e , th e /g/_6/ e contro l s i gna l s 
rx_Gampl e , fifojrdjrx and Gor_dQta_fn_ff aro soloctod. When tx_roQdy-A, i. e . Tx mod e , th e 
el e jram e control s i gnals fifo_wrJtx, fifojrdjtx and fifo_wr_dQta_tx are s e l e ct e d. 
12.^.6.3 Bit Stuffing 

30 Programmable b i t stuffing is i mp l emented i n th e /g/_g/e. This is to a ll ow th e system to dotormino the 
amount of bit stuffing necessary for a sp e cific I S I system devices. I t is unl i ke l y that bit stuffing wou l d 
bo required i n a system using a lOOppm rated crysta l . However, a programmable bit stuffing 
i mpl e m e ntat i on is much mor e v e rsatil e and robust. 

Tho bit stuffing log i c cons i sts of a counter and a statemaoh i ne that track the number of consecut i ve 
35 ones or zero e s that are transm i tt e d or r e c ei v e d and flags th e Rx/Tx stat e maohine whon tho bit 

stuff i ng l im i t has boon r e ach e d. The counter, Gtuff_count, i s a 7 bit counter, wh i ch decrements when 
rxjDQmpIo is assorted on a Rx cyc i o or whon fifojrdjtx is assorted on a Tx cycle. Tho upper 4 b i ts 
of Gtuff_count ar e l oad e d w i th i6i_bit_6tuff__rat e . Th e l ower 3 bits of etuff^count aro always loaded 
with b11 1 , i .e. for iGiJbitjGtuffjroto - bOOO, th e count e r would b e l oad e d with bOOOQ1 1 1 . This i s to 
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pr e v e nt b i t stuffing for l oss than 7 conoocut i vo onos or z e roos. Th i s allows tho b i t stuff i ng l i m i t to b e 
sot i n tho rang e 7 - >127 consecut i ve on e s or z e ro e s. 

NOTE: It i s oxtromo l y important that a chango In the b i t stuffing rat e , ieiJyitjBtuffjrato, Is carofully 
CO ord i natod betw ee n I S! d e vic e s In a system. I t Is obv i ous that I S I d e vic e s wi l l not b e abl e to 
5 communlcato re l iably w i th each other with d i fforont b i t stuffing sett i ngs. It Is rooommondod that a ll 
I S I dov i cos in a syst e m d e fau l t to th e saf e st bit stuffing rato (iGi_bit_Gtuff_rQte - bOOO) at r e set. Tho 
system can th e n co - ord i nat e tho chango to an opt i mum bit stuffing rat e . 
Tho IS I bit stuffing statomach i n e Tx cycle is shown In Figure 50. Th e counter is l oaded wh e n 
stuif_count_load is ass e rt e d. 

10 NOTE: All statomachino signals aro assumed to bo '0' unl e ss othenftfis e stat e d. 

Tho I S I bit stuffing statemachine Rx cyc le i s shown in F i gure 51 . I t should be noted that th e 
stat e mach i n e e nt e rs th e str i p stat e wh e n Gtuff_count-0x2. Th i s Is b e caus e th e stat e mach i n e can 
on l y transition to rxO or nd when rxj^amplo i s assorted as it noods to bo synchron i zed to changes 
in sampl i ng phase i ntroduced by th e Rx/Tx statemachin e . Th e r e for e a on e or a z e ro has a l r e ady 

15 boon sampled by tho t i mo i t enters rxO or rxl. Th i s is not tho case for tho Tx cycle, as it will a l ways 
h a vo a stablo 5 I si^pcik cycl e s p e r bit p e riod and rol i os pure l y on tho data value wh e n e nt e ring txO 
or tx1, Tho Tx cycl e th e r e for e e nt e rs stuffi or stuffO wh e n stuff_count-0x1 , 
NOTE: All stat e machin e s i gnals are assum e d to b e '0' un le ss oth e rwise stat e d. 
12. 4. 6. 4 ISI Framing and CRC eub block (iGi_frQme) 

20 12. 4 .6. 4 .1 CRC G e n e rat i on/Ch e ck i ng 

A Cyc li c Redundancy Ch e cksum (CRC) i s ca l culated ov e r al l fi e lds except tho start and stop fi el ds 
for e ach long or ping pack e t transm i tt e d. Th e r e ceiving I SI d e v i ce wi l l perform the same calcu l ation 
on tho rocoivod packet to verify tho i ntegr i ty of tho packet. Tho procedure usod in tho CRC 
g e n e rat i on/ch e cking i s th e sam e as th e Fram e Ch e cking Sequence (FCS) proc e dure used i n 

25 HDLC, detai l ed i n ITU T Rocommondation T30[30]. 

For gen e ration/ch e cking of th e CRC fi el d, th e sh i ft r e g i ster i l lustratod in F i gure 52 i s usod to p e rform 
tho modulo 2 d i vision on th e pack e t cont e nts by the polynomia l G(x) ~ x "^-*^"^*-^^-^ 
To gonorato th e CRC for a transm i tt e d packet, wher e T(x) - [Pack e t Descriptor fi e ld. Addr e ss fie l d. 
Data Paylood field] (a p i ng packet wil l not conta i n a data pay l oad fi el d). 

30 S e t th e shift r e gister to OxFFFF. 

-* Sh i ft T(x) through tho sh i ft register, LSB first. Th i s can occur i n paral lel with th e pack e t 

transm i ss i on. 

Once tho oach b i t of T(x) has boon shifted through tho reg i ster, i t w il l contain th e r e mainder of 

th e modu l o 2 d i v i s i on T(x)/G{x), 

35 -* P e rform a onos complomont of th e register cont e nts, g i v i ng the CRC fi e ld wh i ch Is 

transm i tted MSB first, immed i ately fo ll ow i ng the last bit of M(x 

To check the CRC for a rec ei v e d packet, whor e R(x) " [Packet D e scriptor fi el d. Addr e ss fi e ld. 
Data Payload fi el d, CRC fie l d] (a p i ng packet w i l l not contain a data payload fi el d). 
- — Sot tho shift r e gister to OxFFFF. 
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^ — Sh i ft R(x) through tho shift rogistor, LSB first. This can occur i n paralle l with tho packet 
r e c e ption. 

- — Onco each bit of tho packet has boon shtftod through tho reg i ster, i t will contain tho 
remainder of the modulo 2 division R(x)/G{x). 
5 ^ — Tho remaind e r shou l d equal b0001 1 10100001 1 1 1 , for a pack e t w i thout e rrors. 
4^=5 CTRL (Control Su b b lock) 

12.5.1 Overv i ew 

Tho CTRL is responsible for high le v e l control of th o SOB sub b l ocks and ooordinoting acc e ss 
botwoon thom. A l l control and status r e g i st e rs for tho SOB ar e conta i ned with i n the CTRL and ar e 
10 access e d v i a th e CPU I nt e rfaco. Th e oth e r major compon e nts of th e CTRL ar e th e SCB Map l ogic 
and th e DMA Manager l ogic. 

12.5.2 SCB Mapp i ng 

In order to support maximum flex i bility wh e n moving data through a mu l t i- SoPEC system i t I s 
possibl e to map any USB e ndpo i nt onto ei ther DMAChann e l w i th i n any SoPEC i n th e syst e m. 

15 Th e SCB map, and ind ee d th e SCB i tself i s based around th e conc e pt of an IS II d and an I S I Subld. 
Each SoPEC In th e system has a uniqu e I S il d and two I S I Sub l ds, namely I S I SubldO and IS I Sub l dl. 
Wo use tho conv e nt i on that ISISubldO corr e sponds to DMAChanne l O in e ach SoPEC and I S I Sub l dl 
corr e sponds to DMAChanneH. The naming convention for the ISIId i s shown in Tab l e 35 below 
and th i s wou l d correspond to a mu l t i SoPEC syst e m such as that shown i n Figur e 27. Wo use tho 

20 term IS I Id instead of SoPEC I d to avo i d confusion with th e uniqu e ChipID used to cr e at e th e 
SoPECJd and SoPEC_id_k e y (see chapter 17 and [9] for more d e ta il s). 
Table 35. I SI I d naming conv e nt i on 



1311 j 


SoPEC to which it refers 


0-44 






Standard device ISIIds (0 is the power on reset value) 




Broadcast ISIId 



25 Th e combin e d I S II d and I S I Sub l d ther e for e a l lows th e I S I to addr e ss DMAChann el O or 

DMAChannoH on any SoPEC d e v i ce i n the system. Tho IS I , DMA manager and SCB map 
hardware use the ISI I d and IS I Subld to hand l e the d i fferent data streams that are act i ve in a mu l t i- 
SoPEC syst e m as do e s th e softwar e running on the CPU of each SoPEC. I n th i s docum e nt w e w il l 
i d e ntify DMAChann e ls as /S/x.y whore x is tho I SI I d and y is tho IS I Sub l d. Thus I SI2.1 r e f e rs to 

30 DMAChann e H of I S I S Ia v e 2. Any data s e nt to a broadcast chann el , i . e . I SM 5.0 or ISI15.1, ar e 

received by every IS I dev i ce i n the system i nc l ud i ng th e IS I Mast e r (wh i ch may b e an IS I Br i dg e ). 
The USB devic e control l er and software stacks howev e r have no understand i ng of tho IS II d and 
ISISubld but the S ll verbrook pr i nter dr i ver software running on tho oxternal host do e s make us e of 
th e I S I Id and I S I Sub l d. USB is s i mply us e d as a data transport th e mapp i ng of USB d e vic e 

35 ondpo i nts onto ISIId and Sub i d i s commun i cated from tho oxterna l host S ll verbrook code to the 
SoPEC Sllverbrook cod e through USB contro l (or poss i b l y bulk data) messages i .e. tho mapping 
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i nformation is simply data payload as far as USB is conc e rn e d. The cod e running on SoPEC is 
rosponsiblo for pars i ng tli e se moosogos and configuring tho SCB accord i ngiy. 
T l io uso of just two DMAChanno l s p l aces somo l i mitations on what can b e ach i eved without 
softworo intorvont i on. For e v e ry SoPEC I n tho syst e m ther e are more pot e nt i a l sources of data than 
5 thoro aro sinks. For oxampio an I S I S I avo could roceive both control and data mossogos from tho 
ISIMast e r SoPEC i n add i tion to control and data from tho external ho s t, ei th e r sp e c i fica ll y 
addressed to that particu l ar I S I S I av e or ov e r th e broadcast I SI chann e l. Howev e r al l I S I SIavos on l y 
havo two poGS i b l o data s i nks, i.o. DMAChanno l O and DMAChannoH. Another e xamp l e i s the 
IS I Master in a mu l ti SoPEC syst e m wh i ch may rocoiv e control messag e s from e ach SoPEC in 
10 addit i on to contro l and data informat i on from tho externa l host (e.g. over USB). In this cas e ai l of th e 
control messages aro i n contention for access to DMAChanne l O. We reso l ve thoso potentia l 
confl i cts by adopt i ng the fo l low i ng convont i ons: 

1) Contro l m e ssag e s may be i nterl e aved i n a memory buffer: Tho memory buff e r that th e 
DMAChann el O po i nts to should bo regarded as a c e ntra l poo l of control messag e s. Every control 

15 messag e must contain fie l ds that i dentify the s i z e of the messag e , th e source and the dest i nat i on of 
th e control m e ssag e . Control messages may therefor e bo mult i plexed over a DMAChann el wh i ch 
a l lows sev e ral contro l message sources to address the sam e DMAChann e L Furthermore, if 
SoPEC typ e contro l m e ssages contain source and d e st i nat i on fi e lds it Is poss i b l e for tho e xt e rna l 
host to s e nd control m e ssages to ind i v i dua l SoPECs ov e r th e I SM 5.0 broadcast chann e l. 

20 2) Data messag e s shou l d not b e i nter le av e d i n a m e mory buff e r: As data m e ssag e s ar e typ i ca ll y 

part of a much larg e r b l ock of data that is being transferred it is not poss i ble to contro l the i r contents 
i n th e sam e mann e r as is possibl e with th e contro l m e ssages. Furthermor e w e do not want th e CPU 
to hav e to p e rform reass e mb l y of data b l ocks. Data messages from diff e r e nt sources cannot bo 
i nterl e aved ov e r th e sam e DMAChannel — th e SCB map must b e r e configur e d e ach t i m e a diff e r e nt 

25 data sourc e i s g i v e n acc e ss to th e DMAChann e l. 

3) Every roconfigu ration of tho SCB map requ i res tho oxchango of control mossagos: SoPEC's 
SCB map r e s e t stat e is shown in Tab le — and any subs e qu e nt modificat i ons to this map r e quir e th e 
e xchange of control messag e s between the SoPEC and th e ext e rnal host. As th e e xternal host is 
e xp e ct e d to control th e mov e ment of data i n any SoPEC system it is ant i c i pated that al l changes to 

30 th e SCB map wi l l be performed i n r e spons e to a r e quest from th e e xt e rna l host. Whil e th e SoPEC 
cou l d autonomously roconfiguro tho SCB map (this is entire l y up to the software runn i ng on the 
SoPEC) i t shou l d not do so w i thout informing tho e xt e rna l host i n order to avo i d data being m i s 
routed. 

An e xamp l e of tho abovo convont i ons i n operation is worked through i n section 12.5.2.3. 
35 12.5.2.1 SCBmaprui e e 

Tho operation of the SCB map i s descr i bed by th e so 2 ru l es: 

Rul e 1 : A pack e t i s routed to th e DMA manag e r If it or i g i nates from tho USB d e v i c e cor e and has an 
I S I Id that match e s the local SoPEC IS I Id. 

Ru l e 2: A packet is routed to th e I Si i f it originates from tho CPU or has an I SIId that do e s not match 
40 tho local SoPEC I SI I d. 
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if th e CPU e rron e ous l y addr e ss e s a pack e t to th e I SIId conta i n e d i n tho /S//c/ rogistor ( i .o. tho iS ll d 
of th e l oca l SoPEC) th e n that packet w ill b e transmitt e d on th e IS I rathor than bo sent to th e DMA 
manag e r. Whil e th i s wil l usual l y cause an e rror on the IS I thoro i s ono situation whoro it cou l d bo 
b e n e f i c i al, namely for i n i t i a l d i a l og in a 2 SoPEC syst e m as both dev i ces como out of reset with an 
5 IS I Id of 0. 

12.5.2.2 — Extomaf host to ISiMast e r SoPEC communication 

Although the SCB map configuration is indep e nd e nt of I SIMast e r status, tho fo ll ow i ng discuss i on on 
SCB map configurat i ons assum e s th e IS i Master is a SoPEC d e vic e rath e r than an IS I br i dge ch i p, 
and that only a singl e USB conn e ct i on to the externa l host Is pres e nt. Tho Information should apply 

10 broad l y to an I S I Bridg e but w e focus h e r e on an I SIMastor SoPEC for clar i ty. 

As th e I S I Mostor SoPEC repr e sents the pr i nter dov i co on tho PC USB bus i t i s r e quir e d by th e USB 
spec i fication to havo a ded i cated contro l endpoint, EPO. At boot tim e th e IS I Mast e r SoPEC wi l l also 
r e qu i r e a bu l k data e ndpoint to fac ili tat e th e transfer of program code from th e ext e rnal host. Th e 
simp le st SCB map configuration, i.o. for a s i ng l e stand alono SoPEC, is sufficient for oxtornal host 

15 to I S I Mast e r SoPEC communicat i on and is shown i n Tab l o 36. 



Tabl e 36. Single SoPEC SCB map configurat i on 



Source 


Sink 


EPO 




EP4- 




EP2 




EP3 


Re 


EP4 


R6 



I n this configuration all USB control information e xchanged botwoon tho oxtorna l host and SoPEC 
ov e r EPO (which i s the on l y bid i r e ctiona l USB e ndpoint). SoPEC specific control i nformation (print e r 

20 status, DNC i nfo etc.) is a l so exchanged over EPO. 

A ll pack e ts sent to th e e xt e rnal host from SoPEC ov e r EPO must b e written i nto th e DMA mapped 
EP bufi' e r by th e CPU (LEON - PC dataflow i n Figur e 29). A ll packets sent from tho oxtornal host to 
SoPEC ar e plac e d in DPTVM by th e DMA Manag e r, wh e r e th e y can be road by th e CPU (PC D I U 
dataflow in F i gur e 29). This asymm e try is b e caus e in a mu l t i SoPEC e nv i ronm e nt th e CPU wi l l n ee d 

25 to e xam i n e all incom i ng control m e ssag e s (i. e . m e ssages that hav e arr i ved ov e r DMAChanne l O) to 
asc e rtain their source and dest i nation (i.o. thoy cou l d bo from an I S I Siavo and dostinod for tho 
e xt e rnal host) and so th e add i t i onal overh e ad in hav i ng th e CPU mov e th e short control messag e s 
to th e EPO F I FO i s r e lativ e ly small. Furthormoro wo wish to avoid mak i ng tho SCB more 
comp l icated than necessary, particular l y wh e n th e r e is no s i gn i ficant performanc e ga i n to b e had as 

30 th e control traffic w i l l be re l atively low bandw i dth. 

Tho abovo mechan i sms are approprioto for tho typ e s of commun i cat i on out l in e d i n sect i ons 

12.1.2.1.1 through 12.1.2.1.1 

1 2. 5. 2. 3 Broadcast communication 
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Tho SCB configuration for broadcast commun i oation i s aloo tho dofault, post pow e r on r e s e t, 
configuration for SoPEC and i s shown In Tabl e 37. 



5 Tablo 37. Dofau l t SoPEC SCB map conf i guration 



Source 


Sink 


EPO 




EP+ 




EP2 


ISM 5.0 


EP3 


ISI15.1 


EP4 





USB e ndpoints EP2 and EP3 ar e mapp e d onto I S I SublDO and ISISubldl of iS l ld15 (tiio broadcast 
I S I Id channol). EPO i s usod for contro l mossagos as boforo and EP1 is a bu l k data e ndpo i ntfor tho 

10 I SIMast e r SoPEC. D e p e nding on what is conveni e nt for th e boot load e r softwar e , EP1 may or may . 
not be usod during the i n i t i al program down l oad, but EP1 is h i ghly l ike l y to b e used for compr e ssed 
page or othor program down l oads l ater. For this reason i t is part of the dofault conf i gurat i on. In this 
s e tup tho USB dov i co configurat i on w i ll tak e p l ac e , as i t a l ways must, by exchang i ng m e ssages 
over tho control channo l (EPO). 

15 One poss i ble boot mechan i sm i s wh e r e th e e xt e rna l host s e nds th e boot l oad e rl program cod e to a ll 
SoPECs by broadcast i ng i t ovor EP3. Each SoPEC i n tho system thon auth o ntlcatos and oxocutos 
the boot l oaderl program. Th e I S I Mast e r SoPEC th e n pol l s e ach I S I S I avo (over tho IS I x.O chann el ). 
Each IS I S I av e asc e rtains i ts I S II d by samp l ing th e part i cu l ar GP I O pins r e qu i r e d by th e bootloadorl 
and report i ng its presenc e and status back to th e I S I Mast e r. Th e I S I Master thon passes th i s 

20 i nformat i on back to tho externa l host ov e r EPO. Thus both th e e xt e rnal host and th e I S I Mast e r hav e 
knowl e dg e of th e numb e r of SoPECs, and th e ir I SI I ds, i n th e syst e m. Tho externa l host may th e n 
roconf i guro tho SCB map to bett e r optimise tho SCB r e sourc e s for tho part i cu l ar multi SoPEC 
system. Th i s could involve s i mp li fy i ng th e d e fau l t configuration to a s i ngle SoPEC system or 
remapp i ng th e broadcast channels onto DMAChann el s in ind i v i dual I S I S I avos. 

25 The fo ll owing st e ps are requ i red to reconfigur e th e SCB map from tho configuration depicted in 
Tabl e — to on e wh e r e EP3 i s mapped onto ISM .0: 

1) Tho o xt o rna l host sends a contro l m e ssag e (s) to the I S I Master SoPEC requesting that USB EP3 
bo remapped to I SI1 .0 

2 ) Th e I SIMast e r SoPEC sonds a control m e ssag e to tho external host inform i ng It that EP3 has 
30 now b ee n mapp e d to I SM .0 (and therefor e th e external host knows that tho previous mapp i ng of 

IS I 15.1 i s no longer ava il ab l e through EP3). 

3 ) Th e e xt e rna l host may now send contro l mossagos directly to IS I S I av e l without requ i r i ng any 
CPU i nt e rv e nt i on on th e IS I Mast e r SoPEC 

12, 5. 2. 4 Ext e rnal host to iSiSlavo SoPEC communioation 
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If tho I SIMaster is conf i gurGd correct l y (o.g. whon tho IS I Mast e r is a SoPEC, and that SoPEC's SCB 
map is configur e d corrootly) then data sont from th e externa l host d e stin e d for an I SISIave wi l l bo 
transmitted on th e I SI w i th tho correct address. Tho I SI automatica ll y forwards any data addrosood 
to it (Includ i ng broadcast data) to th e DMA channe l w i th th e appropr i ate ISISub l d. If th e I SISIav e 
5 has data to send to tho oxtorna l host it must do so by sending a contro l mossago to the I S I Master 
identifying th e e xternal host as th e i ntend e d rec i p ie nt. I t i s th e n th e i S I Mast e r's r e spons i b ili ty to 
forward this m e ssage to tho external host. 

W i th th i s conf i guration tho oxt e rna l host can communicat e w i th the I S I S I av o via broadcast 
m e ssages only and this i s th e m e chanism by wh i ch th e bootloaderl program is down l oad e d. Th e 
10 I SISIavo is unable to commun i cate with the external host (or the I S I Master) unt i l tho bootl l oadorl 
program has successfully oxocutod and the I S I S I avo has determined what its I SI I d is. Aft e r the 
boot l oad e rl program (and poss i b l y other programs) has e x e cut e d th e SCB map of tho I S I Mastor 
may bo roconfigurod to rof l oot tho most appropriate topology for the part i cular multi SoPEC system 
it is part of. 

15 A l l communication from on I S I SIavo to externa l host i s e i ther ach i eved direct l y (if thoro is a direct 
USB connoction present for e xamp le ) or by s e nd i ng messages v i a th e I S I Mast e r. Th e I SISIav e can 
n e v e r i n i t i ate communication to th e e xt e rna l host. I f on IS I S I ave w i shes to send a m e ssag e to th e 
e xt e rnal host v i a th e ISIMast e r i t must wa i t until it is ping e d by th e IS I Master and th e n s e nd a th e 
mossago in a l ong packet addressed to tho ISIMast e r. Wh e n th e ISIMastor rocoivos tho messag e 

20 from tho ISISIav e i t first exam i nes it to dotorm i no tho intend e d d e stination and wi l l th e n copy it into 
the EPO F I FO for transm i ss i on to tho oxtornal host. The softwar e running on the I S I Mast e r i s 
r e sponsible for any arbitration between messages from d i ff e r e nt sourc e s (inc l uding its el f) that ar e a ll 
d e stined for tho external host. 

Th e above m e chanisms ar e appropriat e for the types of communication out li n e d I n s e ct i ons 
25 12.1.2.1.5 and 12.1.2.1.6. 

12.6.2.5 /SfMaetor to fSlSlav e communfcation 

All I S I Mastor to I SISIav e commun i cation tak e s place over tho ISI. Immed i ate l y after reset this can 
on l y be by moans of broadcast m e ssag e s. Onc e the bootloaderl program has succossful l y 
e x e cut e d on al l SoPECs in a mu l t i SoPEC system th e ISIMast e r can communicat e w i th each 

30 SoPEC on an individual basis. 

I f an I S I S I ave w i shes to send a messag e to th e I S I Mastor i t may do so in r e sponse to a p i ng pack e t 
from tho I S I Mastor. When the I S I Master rec ei ves th e m e s s ag e from th e ISISIave I t must interpret 
th e m e ssage to determin e if th e m e ssage contains informat i on r e qu i red to bo sent to th e e xt e rna l 
host. In th e case of th e IS I Mast e r b e ing a SoPEC, softwar e wi l l transf e r th e appropr i at e informat i on 

35 i nto th e EPO F I FO for transm i ssion to tho externa l host. 

Tho abov e mechanisms ar e appropriat e for th e typ e s of communicat i on out li n e d i n s e ct i ons 
12.1 .2.3.3 and 12.1.2.3.d. 

12.5.2.6 fSiS/avo to /S/S/ave communication 

IS I S I avo to ISIS I avo communication i s expected to b e li mitod to two special cases: (a) when th e 
40 Pr i ntMaster i s not tho I SIMastor and (b) whon a storage SoPEC is us e d. Wh e n the Pr i ntMastor i s 
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not th e I S I Maotor then it w i ll nood to sond control m e ssagos (and receivo rosponsos to th e s e 
mossagos) to other I SIS I av e s. When a storag e SoPEC is pr e s e nt it may nood to sond data to each 
SoPEC in the system. All ISIS I avo to I S I S I av e commun i cat i on wi ll tak e plac e in r e spons e to ping 
messagos from tho IS I Mast e r. 
5 12.5.2.7 Ugo of tho SCB map in an ISiStav e with a e xternaf host conn e ction 

Aftor rosot any SoPEC (regardl e ss of ISIMast e r/Slave status) with an act i v e USB connect i on w i l l 
rout e pack e ts from EP0,1 to DMA channe l s 0,1 bocauoo tho defau l t SCB map is to map EPO to 
I S I IdO.O and EP1 to I S II dO.1 and th e defau l t ISlId is 0. At somo l ater tim e the SoPEC le arns its tru e 
iS l ld for th e system i t i s i n and r e configures i ts I S I Id and SCB map reg i st e rs accordingly. Thus If 

10 th e tru e ISHd i s 3 tho oxtorna l host could r e configur e th e SCB map so that EPO and EP1 (or any 
oth e r e ndpo i nts for that matter) map to IS II d3.0 and 3.1 resp e ct i v e ly. Th e co ordinat i on of th e 
updat i ng of tho I S II d regist e rs and th e SCB map is a matt e r for softwar e to tak e car e of. Wh i le th e 
AutoMaet e rEnabl e bit of th e iSICntrl r e gister is sot th e e xterna l host must not sond pack e ts down 
EP2 4 of th e USB conn e ction to the device int e nd e d to b e an IS I S I av e . Wh e n AutoMast e rEnable 

15 has boon cloarod the ext e rna l host may s e nd data down any e ndpoint of th e USB connection to th e 
I SISIavo. 

The SCB map of an ISISIavo can bo configured to route packets from any EP to any ISI I d. I SISub I d 
(just as an IS I Mast e r can). As w i th an I S I Mast e r th e s e pack e ts wi l l e nd up i n th e SCBTxBuff e r but 
whi l e an I S I Master would just transmit th e m when i t got a local acc e ss s l ot (from p i ng arbitration) 
20 the I SISIave can on l y transmit th e m in respons e to a ping. Al l th i s would happ e n without CPU 

int e rv e nt i on on tho IS I SIave (or I SIMaster) and as l ong as th e p i ng fr e qu e ncy is suffic ie ntly high it 
would enable maximum us e of the bandwidth on both USB bus e s. 
12.5.3 DMA Manager 

The DMA manag e r manages th e flow of data between tho SCB and th e e mb e dd e d DRAM. Wh il st 
25 th e CPU cou l d bo used for th e mov e ment of data in SoPEC, a DMA manager i s a more eff i cient 
solution as it w il l hand le data i n a more pr e dictab le fashion with l e ss l at e ncy and r e qu i r i ng le ss 
buff e ring. Furth e rmor e a DMA manager is r e quir e d to support th e I SI transfer speed and to e nsur e 
that tho SoPEC could bo used w i th a h i gh speed I SI Bridge chip i n tho future. 
Th e DMA manag e r util i zes 2 writ e channe l s (DMAChann e lO, DMAChann e H) and 1 r e ad/writ e 
30 channel (DMAChanno l 2) to prov i d e 2 independ e nt modes of acc e ss to DRAM v i a th e D I U i nt e rfac e : 

USBD/ I S I typo access. 

^ USBH type acc e ss. 

D I U read and write access i s i n bursts of 4 x6 4 bit words. Byt e a l igned wr i t e e nab le s ar e provid e d for 
wr i t e acc e ss. Data for DiU write accoosos w ill be road d i rect l y from the buff e rs conta i n e d i n th e 

35 r e sp e ct i v e SCB sub b l ocks. Th e re i s no i nterna l SCB DMA buff e r. Th e DMA manag e r hand le s a ll 
i ssues re l at i ng to byte/ word/iongword address a li gnment, data ond i anness and transaction 
sch e duling. If a DMA channe l is d i sab l ed during a DMA acc e ss, th e acc e ss w i l l bo comp le t e d. 
Arbitrat i on will bo performed between tho fo ll ow i ng D I U accoss requests: 
USBD writo requ e st. 

40 I S I wr i te request. 
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^ USBH wr i t e request. 

USBH r e ad r e qu e st. 

PMAChann el O w il i hov e abso l ut e pr i or i ty ov e r any DMA r e qu e stors. I n th e absence of 
DMAChann el O DMA requests, arb i tration w i l l be perform e d in a round rob i n mann e r, on a p e r cyc le 
5 basis ovor tho othor channo l s. 

12.5.3.1 DMA Eff e ctiv e Bandwidth 

Tho D I U bandw i dth ava il able to tho DMA manag e r must b e s e t to e nsur e ad e quat e bandw i dth for o il 
data Gouroos, to avoid back pr e ssure on tho USB and tho I S I . Th i s is aohiovod by s e tt i ng th e output 
( i .e. D I U) bandw i dth to bo greater than th e comb i n e d Input bandwidths (i. e . USBD + USBH + IS I ). 
10 Tho required bandw i dth i s expected to bo 160 Mb i ts/s (1 bit/cyc l e @ 160MHz). Tho guaranteed D I U 
bandwidth for tho SCB i s progr a mmab le and may need further ana l ysis onc e there is b e tt e r 
{ knowledge of the data throughput from th e USB I P cores. 

12.5.3.2 USBD/iSi DMA QCCOCG 

Tho DMA manager uses tho two indopondont un i d i roctiona l wr i te channols for this typo of DMA 
15 acc e ss, on e for e ach IS I Sub I d, to control th e mov e m e nt of data. Both DMAChanno l O and 

DMAChann e H on l y support writ e op e ration and can transfer data from any USB dev i ce DMA 
mapped EP buff e r and from the I SI r e ceiv e buff e r to s e parate c i rcu l ar buff e rs i n DRAM, 
correspond i ng to each DMA channel. 

Whil e th e DMA manag e r p e rforms tho work of moving data th e CPU contro l s th e destination and 

20 r el ativ e timing of data flows to and from the PRAM. Th e manag e m e nt of th e DRAM data buff e rs 

requires th e CPU to hav e accurate and tim el y vis i bi li ty of both the DMA and PEP m e mory usag e . In 
oth e r words wh e n th e PEP has completed proc e ss i ng of a pag e band the CPU ne e ds to be awar e 
of th e fact that an ar e a of m e mory has boon freed up to r e c ei ve i ncoming data. The managem e nt of 
those buffers may also bo performed by the e xt e rnal host. 

25 12.5.3.2.1 Circular buff e r op e ration 

Tho DMA manager supports tho use of circular buffers for both DMAChannels. Each circular buff e r 
is control l ed by 5 registers: DMAnBottomAdr, DMAnTopAdr, DMAnMaxAdr, DMAnCurrWRr and 
DMAnlntAdr. Th e op e rat i on of th e circular buffers is shown i n Figure 53 b e low. 
Here we see two snapshots of tho status of a circular buffer with (b) occurr i ng som e tim e aft e r (a) 

30 and som e CPU writ e s to the r e gist e rs occurr i ng in b e tween (a) and (b). Th e s e CPU wr i tes are most 
l i k e ly to be as a resu l t of a fin i shed band i nt e rrupt (wh i ch fr ee s up buffer space) but could also hav e 
occurred i n a DMA interrupt service routine resulting from DMAnlntAdr being h i t. Th e DMA manag e r 
w i ll cont i nu e fill i ng th e fr ee buff e r space d e pict e d i n (a), advancing tho DMAnCurrWPtr aft e r e ach 
writ e to th e D I U. Not e that th e DMACurrWPtr r e g i ster a l ways po i nts to the n e xt addr e ss the DMA 

35 manager w ill write to. When tho DMA manager roaches tho address I n DMAnlntAdr {}.q. 

Dt i /IACurrWPtr - DMAnlntAdr) i t w ill g e nerat e an i nterrupt if the DMAnlntAdrMaek b i t In th e 
DMAMaek register is set. Th e purpos e of tho DMAnlntAdr r e gister i s to a l ert tho CPU that data 
(such as a contro l m e ssag e or a page or band header) has arrived that i t needs to process. Th e 
int e rrupt rout i ne servicing the DMA i nt e rrupt wi ll change th e DMAnlntAdr yoluo to tho next locat i on 

40 that data of i nterest to the CPU wi l l hav e arriv e d by. 
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I n th e sc e nario shown i n F i gure 53 the CPU has determ i ned (most li ko l y as a r e su l t of a finishod 
band i nterrupt) that tho fi ll ed buffer spac e i n (a) has boon frood up and I s ther e for e avai l ab le to 
r e c e iv e more data. The CPU th e r e for e moves tho DMAnMaxAdr to th e end of th e s e ction that has 
boon frood up and moves the DMAnlntAdr address to an appropr i ate offsot from tho DMAnMaxAdr 
5 address. Th e DMA manag e r cont i nu e s to fill tho free buffer space and when I f r e aches tho address 
in DMAnTopAdr it wraps around to th e addr e ss in DMAnBottomAdr and continu e s from thoro. DMA 
transfers w i l l continuo ind e finit el y in this fashion until th e DMA manager reach e s the address I n th e 
DMAnMaxAdr regist e r. 

Tho c i rcular buffer i s in i tia li z e d by wr i ting th e top and bottom addr e sses to tho DMAnTopAdr and 
10 DMAnBottomAdr r e gist e rs, writing tho start address (wh i ch does not hav e to b e the same as tho 
DMAnBottomAdr e v e n though I t usual l y wi l l bo) to th e DMAnCurrWPtr r e gist e r and appropriate 
addr e ss e s to th e DMAnlntAdr and DMAnMaxAdr regist e rs. Th e DMA op e rat i on wi l l not comm e nc e 
until a 1 has boon wr i tten to tho r e levant bit of tho DMAChanEn r e g i st e r. 

Wh i l e I t is possibl e to modify th e DMAnTopAdr and DMAnBottomAdr r e g i sters after tho DMA has 
15 start e d I t should bo done w i th caut i on. Tho DMAnCurrWPtr r e gist e r should not b e wr i tten to wh il e 
th e DMAChannol is in op e ration. DMA op e ration may b e sta l led at any t i mo by clearing tho 
appropriate b i t of th e DMAChanEn r e gist e r or by d i sabling an SCB mapp i ng or I S I r e c e iv e 
op e ration. 

12.5.3.2.2 Non standard buffer operation 

20 Tho DMA manager was dosignod primarily for use with a circu l ar buffer. However booauso tho DMA 
pointers are tested for equality ( i .e. interrupts g e n e rated when DMAnCurrWPtr ~ DMAintAdr or 
DMAnCurrWPtr " DMAMaxAdr) and no bounds check i ng i s p e rformed on th e ir va l u e s ( I . e . n ei th e r 
DMAnlntAdr nor DMAnMaxAdr are checked to see if they li e between DMAnBottomAdr and 
DMAnTopAdr) a numb e r of non standard buff e r arrangements ar e poss i ble. Those I nclude: 

25 Dustb i n buffer: I f DMAnBottomAdr, DMAnTopAdr and DMAnCurrWPtr aW point to th e sam e 

l ocat i on and both DMAnlntAdr and DMAnMaxAdr point to anywhere e l se th e n a l l data for that 
DMA channol will bo dump e d into tho sam e location w i thout e ver generat i ng an I nt e rrupt. 
This i s th e e qu i va le nt to writing to /d e v/null on Un i x syst e ms. 

Linear buffer: I f DMAnMaxAdr and DMAnTopAdr have th e sam e value then tho DMA 

30 manag e r w il l simp l y fi ll from DMAnBottomAdr io DMAnTopAdr and then stop. DMAnlntAdr 

should be outside this buff e r or have its interrupt d i sabl e d. 
12.5.3.3 USBH DMA aococG 

Th e USBH requir e s DMA access to DRAM i n to provid e a communication channel between th e 
USB HC and th e USB HCD via a s har e d m e mory resource. The DMA manager uses two 
35 independ e nt channels for th i s type of DMA acc e ss, one for roads and on e for wr i tes. The DRAM 

addresses prov i ded to th e D I U I nt e rfac e are gonoratod booed on addresses defined I n the USB HC 
core operat i onal reg i sters, in USBH s e ct i on 12.3. 
1 2. 5. 3. A Cacho cohoronGy 

As tho CPU will bo process i ng som e of th e data transferred (part i cularly control messages and 
40 page/band headers) i nto DRAM by the DMA manager, care needs to b e taken to ensur e that th e 
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data i t us e s is tho most rooontly transf e rr e d data. Bocauso th e DMA managor wil l bo updat i ng tho 
oiroular buffors in DRAM w i thout tho knowlodgo of tho cacho contro lle r logic in tho LEON CPU coro 
the contents of tho caoho can b e com e outdat e d. Th i s s i tuation can be e as il y handl e d by software, 
for oxamp i o by f l ushing tho relevant cach e li nes, and so there i s no hardwar e support to enforce 
5 cach e coherency. 

12.5.^ ISI transm i t buffer arbitration 

Th e SCB control l og i c w i l l arb i trat e acc e ss to tho IS I transm i t buffer (IS I TxBuff e r) i nt e rface on tho 

ISI block. Thoro are two sourcos of I S I Tx packets: 

CPUiS I TxBuff e r, contain e d in th e SCB control block, 

10 I SI mapp e d USB EP OUT buff e rs, conta i ned i n th e USB dovico block. 

Th i s arb i trat i on is contro l l e d by tho ISITxBuffArb r e g i st e r wh i ch contains a h i gh priority b i t for both 
th e CPU and th e USB. If only on e of thes e b i ts is set th e n th e corresponding sourc e always has 
priority. Note that i f tho CPU i s g i ven abso l ute pr i or i ty over tho USB, th e n th e softwar e fi l ling th e IS I 
transm i t buff e r n e eds to e nsur e that suff i c ie nt USB traffic is allowed through. If both bits of tho 

15 iSITxBufforArb have tho same va l ue then arb i tration w ill take place on a round robin bas i s. 

Th e control l ogic wi ll uso th e USBEPnD e et r e gietore, as i t will uso th e CPUISITxBuffCntrl r e g i ster, to 
d e t e rmine the dest i nation of tho pack e ts in thes e buff e rs. When the I S I TxBuff e r has spaco for a 
pack e t, th e SCB control l ogic w i ll immed i at e ly s e ek to r e fi ll it. Data wi l l bo transf e rr e d d i r e ctly from 
the CPU I SITxBuffor and the I S I mapped USB EP OUT buff e rs to the I SITxBuffer without any 

20 i nt e rm e d i at e buffering. 

As tho spood at which th e IS I TxBuffer can b e e mpt i ed is at l oast 5 t i mos groator than it can b e fi lle d 
by USB traffic, th e IS I mapp e d USB EP OUT buffors should not ov e rflow using tho above scheme in 
norma l operat i on. Th e r e ar e a number of scenar i os which could le ad to th e USB EPs being 
temporar i ly b l ocked such as tho CPU having priority, retransm i ssions on th e IS I bus, chann e ls 

25 be i ng e nabled (Chann e lEn b i t of th e USBEPnD e st r e gist e r) with data a l r e ady I n th ei r assoc i at e d 
ondpoint buffors or short packets bo i ng sent on th e USB. Car e shou l d b e token to ensur e that th e 
USB bandw i dth is effic ie nt l y ut il ised at al l t i mos. 
12.5.5 I mpl e mentation 

12. 5. 5. 1 CTRL Sub block Partition 
30 * B l ock Diagram 

* D e fin i tion of l/Os 

12.5.5.2 SCB Configuration RogiGtore 

Th e SCB reg i ster mop i s list e d i n Table 38. R e gist e rs are grouped accord i ng to wh i ch SCB sub 
b l ock the i r functiona l jty i s as s ociat e d. All configurat i on r e gist e rs r e s i d e in th e CTRL sub - block. Th e 
35 Reset va l ues in tho tab le i ndicat e s th e 32 bit hox valu e that w ill be r e turn e d wh e n th e CPU r e ads 
the associated address locat i on aft e r r e s e t. All Reg i sters pr e fix e d w i th tic r e f e r to Host Contro lle r 
Op e rational Registers, as defined in tho OHC I Sp e c[1 9 ]. 

Tho SCB w i ll only allow supervisor mode accesses to data spac e ( i . e . cpu_acod e [^ :0] " b1 1 ). A ll 
oth e r access e s wi ll result in ecbjcpujborr bo i ng assorted. 

PEA23US 145 



TDB: I s road aoooss necessary for I S I Rx/Tx buff e rs? Cou l d i mpl e m e nt tho I S I i nt e rfac e as s i mp le 

FIFOs as opposed to a momory intorfaco. 

Tab le 38. SCB control b l ock configurat i on r e gist e rs 




QxOQQ 



SCBRosotN 



OxOOOOOOOF 



SCB software reset. 



/V l lows i ndiv i dua l sub - b l ocks to b e r e s e t 



soparato l y or tog e th e r. Onco a rosot for 
a block has boon init i ated, by writing a 



0 to tho re l evant register fiold, i t can not 
bo suppressed. Each fie l d wi ll bo oot 



after rosot. Wr i ting 0x0 to th e 



SCBReset r e g i st e r wi ll hav e th e sam e 



e ff e ct as CPR g e nerated hardware 



reset. 



0x004 



SCBGo 



0x00000000 



SCB Go. 



Al l ows the IS I and CTRL sub b l ocks to 



b e s e lected separately or togothor. 
Wh e n go i s d e ass e rt e d for a part i cular 



; ub b l ock, its statemachin e s ar e r e s e t 



to th e ir id le stat e s and its interface 



signals aro do asserted. Tho sub b l ock 
counters and conf i gurat i on registers 
retain th ei r values. 



Whon go Is assert e d for a part i cu l ar 
sub block, its count e rs ar e r e s e t. Th e 



sub block configuration reg i st e rs r e tain 
th ei r values, i. e . th e y don't g e t r e s e t. 
Tho sub b l ock statemachines and 



int e rfac e s i gna l s wi ll r e turn to th e ir 

norma l mod e of op e ration. 

The CTRL field shou l d be de asserted 



befor e disab li ng th e clock from any part 
of the SCB to avoid erroneous SCB 



DMA requ e sts wh e n the c l ock i s 



enab l ed aga i n. 



NOTE: This functionality has not b ee n 



prov i d e d for th e USBH and USBD sub - 
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b l ocks b e oauso of tho USB I P cor e s 



diroct contro l ovor tho I P cor e 



stat e mach i n e s and countors, and it 



wou l d caus e unprod i otablo behav i our i f 



th e cor e s w e r e disab l ed i n th i s way 
dur i ng op e rat i on. 



that thoy conta i n. Wo do not have 



OxOOd 



SCBWa l <eupEn 



0x00000000 



USB/ I S ! Wal< e UpEnabl e r e g i st e r 



OxOOG 



SCBISITxBufforAr 



0x00000000 



b 



I SI transmit buffer accoss pr i ority 

reg i st e r. 



0xO4« 



SCBDobugSoi[1 1 : 
2J 



0x00000000 



SCB D e bug select rog i stor. 



0x044 



USBEPODoot 



0x00000020 



Th i s r e gister dotorminoo which of tho 
data s i nks th e data arr i v i ng i n EPO 



i hou l d be rout e d to. 



9x048 



USBEPIDost 



0x00000021 



Data s ink mapp i ng for USB EP1 



0x046 



USBEP2Doot 



0X0000003E 



Data si nk mapping for USB EP2 



0x020 



USBEP3D o ot 



0x0000003F 



Data s i nk mopping for USB EP3 



0x024 



US B EP'IDoot 



0x00000023 



Data s i nk mapping for USB EPI 



^(028 



4^ 



DI^AChann e lO bottom addr e ss rog i stor. 



0xO2C 



DMA0TopAdr[21:5 



4^ 



DMAChann e lO top addr e ss r e g i st e r. 



0x030 



DMA0CurrWPtr[21 



47 



DMAChann e lO curr e nt wr i t e point e r. 



0x034 



DMA0 l ntAdr[21:5] 



47 



DMAChann el O i nt e rrupt addr e ss 



r e g i st e r. 



0x038 



DMA0MaxAdr[21: 



47 



DMAChann el O max address rog i stor. 



0x036 



DMA1BottomAdr[2 



47 



As por DMAOBottomAdr. 



9x040 



DMA1TopAdr[21:5 



47 



As p e r DMAOTopAdr. 



] 



9x044 



DMA1CurrWPtr[21 



47 



As por DMAOCurrWPtr. 



0x048 



DMA1 l ntAdr[21:5] 



4^ 



As por DMAOIntAdr. 



Qx04G 



DMA1MaxAdr[21: 
Si 



As p e r DMAOMaxAdr. 



DMAAcc e ssEn 



0x00000003 



DMA acc e ss enab le . 
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DMAStatus 



0x00000000 



DMA statuo rog i stor. 



DMAMook 



0x00000000 



DMA mask r e g i st e r. 



OxOSC - 0x098 



CPUISlTxBufF[7:0] 



%n8 



CPU I S I transmit buffer. 



32 - byt e pack e t buffer, containing th e 
payload of a CPU sourcod paoi^ot 



d e stin e d for transmiss i on ov e r th e ISI. 



Th e CPU has ful l wr i t e access to th e 



CPUISITxBuff. 



NOTE: Th e CPU docs not havo read 



access to CPUISITxBuff. Th i c 



b e caus e th e CPU i s the sourc e of th e 



data and to avo i d arb i trating read 
access botwoon th e CPU and th e 



CTRL sub b l ock. Any CPU r e ads from 
this address space wi ll return 



0x00000000. 



QxOQC 



CPU I S I TxBuffCtrl 9 



0x00000000 



CPU I S I transm i t buffer control register. 



ySBD 



0x400 



USBD I ntStatus 



40 



0x00000000 



USBD I nterrupt e v e nt status r e gist e r. 



0x404 



USBD I S I F I FOStat 



40 



0x00000000 



USBD I S I mapp e d OUT EP packet 
FIFO status regist e r. 



9x400 



USBDDMAOF I FO 
Status 



8 



0x00000000 



USBD DMAChanno l O mapped OUT EP 



pack e t FIFO status r e gist e r. 



0x1 OC 



USBDDMA1F I FO 
Status 



g 



0x00000000 



USBD DMAChannoH m a pp e d OUT EP 
pack e t FIFO status r e gist e r. 



9x440 



USBDRosumo 



DxOOOOOOOO 



USBD core resume register. 



0x444 



USBDSotup 



0x00000000 



USBD setup/configuration register. 



0x118 0x15^ 



USBDEp0 l nBuff[1 



32x16 n/a 



USBD EPO I N buffer. 



6 4- byt e pack e t buff e r in th e , conta i ning 
th e payload of a USB pack e t d e stin e d 
for EPO I N. 



The CPU has ful l wr i t e acc e ss to th e 



USBDEpOlnBuff. 



NOTE: The CPU does not havo road 



acc e ss to USBDEpOlnBuff. This i s 
because th e CPU i s th e sourc e of th e 



data and to avo i d arb i trat i ng r e ad 
acc e ss b e twe e n the CPU and the USB 



devic e cor e . Any CPU reads from th i s 
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addr e ss spaco w i l l roturn 0x00000000. 



USBDEpO l nBuffCt 



0x00000000 



USBD EPO -I N buff e r contro l rog i stor. 



0x1 5C 0x198 



USBDEp5 l nBuff[1 



32x4^ 



USBD EPS I N buffer. 



5-QJ 



As por USBDEpOinBuff. 



USBDEpS l nBuffCt 



0x00000000 



USBD EPS IN buffer contro l rogistor. 



USBDMask 



^ 0x00000000 



USBD int e rrupt mask r e g i st e r. 



0x4A4 



USBDDobug 30 0x00000000 



USBD d e bug register. 



USBM 



0x200 



HcR e vls l on 



R e f e r to [10] for #B i ts, Rosot, 
D e scr i ption. 



0x204 



HoControi 



R e f e r to [1 9] for #B i ts, R e s e t, 
D e scr i ption. 



Ox20d 



HcCommandStatu 



R e f e r to [10] for #Bits, Rosot, 



Doscr i pt l on. 



0x2OC 



Hc l ntorruptStatus 



Rofor to [19] for #Bits, Rosot, 
Descr i pt i on. 



0x240 



HclntorruptEnab le 



R e f e r to [19] for #B i ts, Rosot, 

D e scr i pt i on. 



9x244 



Ho l ntorruptD i sablo 



Rofor to [19] for #Bits, Rosot, 
Description. 



0x248 



HoHCCA 



R e f e r to [1 0] for #Bits, R e s e t, 
Descr i ption. 



0x21 C 



HcPeriodCurr e ntE 



Ref e r to [1 9] for #B i ts, R e set, 



D e scr i pt i on. 



0x220 



HcContro l HoadED 



Rofor to [19] for #B i ts, Res e t, 
Description. 



0x224 



HcControlCurront 
ED 



Rofor to [19] for #B i ts, Rosot, 



Descr i ption. 



0x228 



HoBulkHoadED 



Ref e r to [19] for #B l ts, R e s e t, 



Descr i ption. 



0x22C 



HcBu l kCurrentED 



Rofor to [19] for #Bits, Rosot, 
Descr i ption. 



0x230 



HoDon e H e ad 



Refer to [1 9 ] for ffBits, R e s e t, 
D e script i on. 



0x234 



HcFmlntorva l 



Refer to [19] for ffBits, R e set, 
Doscriptlon. 



0x238 



HcFmRoma i ning 



R e f e r to [10] for #B i ts, Rosot, 
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Doscr i pt i on. 



HcFm Numb e r 



Rofor to [19] for #Bits. Rosot. 



Doscr i ption. 



9x240 



HcPoriodicStart 



R e f e r to [19] for #B i ts, Rosot, 



Descript i on. 



9)^44 



HcLSThoGho l d 



Refer to [19] for ffBits, R e s e t, 

Doscript i on. 



9}(248 



HcRhD e scriptorA 



Rofor to [1 9 ] for #B i ts, R e s e t, 
D o scription. 



9x246 



HoRhDosoriptorB 



Rofor to [1 9] for #Bits, Rosot, 



Doscript i on. 



9x2§0 



HcRhStatus 



Rofor to [19] for #B i ts, Rosot, 
Description. 



0x25 4 



HcRhPortStatus[1] 



R e f e r to [19] for #B i ts, Reset, 
D e scr i ption. 



9x2§S 



USBHStatus 



0x00000000 



USBH status reg i ster. 



9x2§C 



USBHMask 



0x00000000 



USBH i nt e rrupt mask register. 



9x260 



USBHD o bug 



0x00000000 



USBH d e bug regist e r. 



9x300 



ISiCntr l 



OxOOOOOOOB 



I S I Control r e gist e r 



0x30^ 



l3H(j 



0x00000000 



IS II d for this SoPEC. 



9x308 



IS I NumR e trios 



0x00000002 



Number of I SI retransm i ssions r e g i st e r. 



0x30G 



IS I PingSchedu l oO 



0x00000000 



I SI P i ng schedu le 0 r e g i st e r. 



0x340 



I S I P i ngSch e dulol 



0x00000000 



I SI P i ng sch e du l e 1 r e gister. 



9x344 



iS I PingSch e du l e2 



45 



0x00000000 



I SI P i ng sch e dul e 2 r e gist e r. 



0x34« 



IS I TotalPoriod 



OxOOOOOOOF 



Rolood va l u e of the ISITotalPonod 



count e r. 



9x346 



I S I Loca l Per i od 



OxOOOOOOOF 



Re l oad va l ue of the ISILocaiP B riod 



count e r. 



9x320 



I S II ntStatus 



0x00000000 



I S I I nt e rrupt status r e g i ster. 



9x324 



I S I TxBuffStatus 



27 



0x00000000 



I S I Tx buff e r status r e g i ster. 



9x328 



I S I RxBuffStatus 



27 



0x00000000 



I S I Rx buff e r status register. 



9x326 



iSIMask 



0x00000000 



I SI Interrupt mask rog i stor. 



0x330 0x3^0 



ISITxBuffEntry0[7: 



32x8 



0} 



I SI transm i t Buff, packet entry #0. 
32 byt e packet entry i n tho ISITxBuff, 



contain i ng the payload of an I S I Tx 



packet. 

GPU r e ad acc e ss to ISITxBuffEntryO i s 



prov i ded for observab ili ty on l y i. e . CPU 
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reads of the iSiTxBuffEntryO do not 


alter the state of the buffer. The CPU 


does not have write access to the 


ISiTxBuffEntryO. 


0x350 - 0x36C 




32x8 








ISITxBuffEntry1[7: 

0} 


ISI transmit Buff, packet entry #1 . 

As per ISiTxBuffEntryO. 


0x370 0x38C 


ISIRxBuffEntryO[7: 


32xd 














32 byto packet ontry in tho ISIRxBuff, 
containing the payload of an ISI Rx 


packet — Note that the only error free 


lono packets are placed in the 
ISIRxBuffEntryO, Both ping and ACKs 


are consumed in tho ISI. 

CPU access to ISIRxBuffEntryO is 


provided for observability only i.e. CPU 


roods of tho ISIRxBuffEntryO do not 


alter the state of the buffer. 


0x390 - 0x3AC 


iSIRxBuffEntryl [7: 


32x8 




iSI receive Buff, packet entry #1 . 








As per ISIRxBuffEntryO. 


0x3B0 




1- 


0x00000000 


ISI sub ID 0 sequence bit register. 




ISISubldOSeq 






0x361 


ISISubldlSoq 


1- 


0x00000000 


ISI sub ID 1 sequence bit register. 










0x3B8 


ISISubldSeqMask 


2 


0x00000000 


ISI sub ID soquonco bit mask register. 










0x3BC 


ISINumPins 


\ 


OxOQQOQQOO 


ISI number of pins register. 










0x3C0 


ISITurnAround 


4 


OxOOOOOOOF 


ISI bus turn around register. 










Qx3G4 






0x0000001 F 






ISITShortRoplyWi 

R 




ISI short packet reply window. 


0x368 




8 


0x000001 FF 


ISI long packet reply window. 




ISITLongRopiyWin 








Ox3GG 


ISIDebug 


4 


0x00000000 










ISI debug rogistor. 



A dota i lod descript i on of oach rogistor format follows. Tho CPU has fu l l road ocooss to al l rog i stors. 
Write access to the fi el ds of e ach r e g i st e r is d e f i ned as: 

Fulk Th e CPU has ful l wr i te access to the field, i . e . th e CPU can wr i t e a 1 or a 0 to e ach 

5 bit. 

^ C l ear: Th e CPU can cl e ar th e fi e ld by writing a 1 to e ach bit. Wr i t i ng a 0 to th i s typ e of fi e ld 

w ill hav e no e ffect. 

Non e : Th e CPU has no wr i t e access to the field, i .e. a CPU writ e w ill hav e no e ff e ct on th e 

10 12.5.5.2.1 SCBRoGOtN 

Table 30. SCBR e s e tN r e gist e r format 
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CTRL Q FuH Gcbjotrl sub block rosot. 



S e tting this f i eld wi l l rosot tho SCB contro l sub block l ogic, 
includ i ng a l l configuration registers. 

0 - r e sot 

1 ~ defau l t stoto 

ISi 4- FuH scbjsi sub b l ock rosot. 

Sett i ng this fiold wil l rosot tho I S I sub b l ock l ogic. 

0 ~ r e s o t 

1 - default state 

USBH 2 Full GGbjuiGbh sub block r esetr 

S e tt i ng this fi el d w i l l r e set th e USB host control le r cor e 
and assoc i at e d log i c. 

0 ~ rosot 

1 - d e fault stat e 

USBD 3 FuS GGbjJGbd sub - block r esets 

S e tting th i s field w ill r e s e t th e USB d e v i c e control l er core 
and associated l og i c. 

0 ~ r e set 

1 ~ defau l t state 

12.5.5.2.2 SCBGo 

Tab l e 4 0. SCBGo r e g i st e r format 





Bit^Sjl 








B^igMaMgi 






0 


Pull 








GGbjGtrl sub block go. 

0 - halted 

1 - running 








GcbjGi sub ■ block go. 

0 - halted 

1 ~ running 



12.5.5.2.3 SCBWakoUpEn 

Th i s reg i ster is usod to gat e th e propagation of th e USB and I SI reset signals to the CPR block. 
Tab l e 4 1 . SCBWak e UpEn r e gist e r format 











m 






USBWakoUpEn 






uGb_cprjrQGot_n propagation enable. 
1 ~ enable 
0 ~ disable 
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4- 




iGi_cprjroGotjn propagation onablo. 


ISIWakoUpEn 


1 - onabio 
0 ~ disable 



12.5.5.2.1 SCBiS I TxBufforArb 

This r e gist e r d e termines which sourc e has pr i ority at th e I S I TxBuffer int e rfac e on the I SI b l ock. 
When a bit i s sot prior i ty i s givon to tho ro l ovant source. When both b i ts have tho oomo va l ue, 
arbitration will bo p e rform e d in a round rob i n manner. 

Tabl e 42. SCBiSITxBufforArb r e gist e r format 







CPUPriority 



CPU pr i ority 
1 - high prior i ty 



0 - low priority 



USBPriority 



Py(| 



USB priority 



1 ~ high prior i ty 

0 - l ow pr i ority 



12.5.5.2.5 



SCBD e bugS e l 



Contains addr e ss of tho reg i st e r se l octod for dobug observation as it wou l d app e ar on cpujadr. Tho 
contents of tho S Glcctod register are output in the scb_cpu_cfato bus whi l e cpu_Gcb_G o / is l ow and 
GGb_cpu_d e bug_valid is ass e rt e d to i nd i cat e th e d e bug data i s va l id. It is e xpected that a numb e r of 
ps e udo - r e g i st e rs wil l b e mad e ava i lab le for d e bug obs e rvation and th e s e w i l l be outlined with th e 
Imp l ementat i on deta il s. 

Table 43. SCBDobugSo l register format 





wn. 




cpujadr r e g i st e r addr e ss. 



12.5.5.2.6 



USBEPnDost 



Th i s register descr i ption app li es to USBEPODoGt USBEPIDoGt, USBEP2DoGt, USBEPSDoGt, 
USBEP^DoGt. Tho SCB has two rout i ng options for each packet rocoived, based on tho DoGtiSUd 
associated w i th the packets source EP: 

^ To th e DMA Manager 

To tho IS I 



The SCB map ther e fore doos not nood opoc i al f i elds to ident i fy tho DMAChann el s on the I SIMast e r 
SoPEC as this i s tak e n care of by th e SCB hardware. Thus th e USBEPODest and USBEPID e et 
r e gist e rs shou l d b e programmed w i th 0x20 and 0x21 (for I S I O.O and I S I 0.1) respoctivo l y to ensure 
data arr i v i ng on th e s e e ndpoints i s moved directly to DRAM. 
Tab le 4 4. USBEPnDost r e g i ster format 



PEA23US 



153 



Writ ^c oess# 



SoquoncoB i t 



FmH 



Sequence bit for pack e ts go i ng from 
USBEPn to DostlS ll d.Dost l S I SubId, 



Ev e ry CPU wr i t e to this register 
in i tial i ses tho voluo of tho soquonco 



bit and th i s is subs e qu e ntly updatod 
by tho I SI after ev e ry successfu l long 



pack e t transm i ss i on. 



DostlS l ld 



4^ 



Pull 



D e st i nation I S I I D- 



D e not e s th e I S I Id of the target 
SoPEC as per Table 



Dost l SISub I d 



Destinat i on I S I sub I D. 



Ind i cates which DMAChanno l of tho 



targ e t SoPEC the e ndpo i nt i s 



mapped onto: 



0 - DMAChann e lO 



1 - DMAChannoM 



Chann e lEn 



6 



Pyll 



Communicat i on channel onabio bit 



for EPn. 



This enabl e s/d i sables th e 



commun i cat i on chann el for EPn. 



Wh e n disab le d, th e SCB w i ll not 



accept USB pack e ts addr e ssed to 



0 " Chann el disabl e d 



1 - Chann e l e nab le d 



10 



I f th e l oca l SoPEC i s conn e cted to an e xt e rnal USB host, it is r e comm e nd e d that tho EPO 
commun i cat i on chann el should a l ways r e main e nab l ed and mapped to DMAChanne l O on the loca l 
SoPEC, as this is intended as th e primary control commun i cat i on chann e l b e tween the e xt e rnal 

USB host and tho local SoPEC. 

A SoPEC I SIMaster should map as many USB ondpo i nts, under the contro l of the ext e rna l host, as 
ar e requ i red for tho mu l t i SoPEC system i t is part of. As a l r e ady m e ntion e d this mapping may b e 
dynamica l ly r e configured . 
12.5.5.2.7 DMAnBottomAdr 

Th i s r e g i ster descr i ption appl ie s to OA^QBotfomAc/r and DMAIBottomAdr. 
Tab l e 45. DMAnBottomAdr regist e r format 
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Writo 
access 






DMAnBottomAdr 




Futt 


Tho 256 bit aligned DRAM address of tho 






bottom of the circular buffer (inclusivo) 
serviced by DMAChannoln 



12.5.5.2.8 



DMAnTopAdr 



This r e gist e r doscription appl i es to DMAOTopAdr and DMAITopAdr. 
Tab le 4 6. DMAnTopAdr r e g i st e r format 



ElolBBSlam^ ei 



Bif(g)] 



DMAnTopAdr 





2^ 




Th e 256 bit aligned DRAM address of 



tho top of th e c i rcular buff e r ( i nclus i v e ) 



sorv i cod by DMAChannoln 



12.5.5.2.0 



DMAnCurrWPtr 



Th i s regist e r d e scription app l i e s to DMAOCurrWRr and DMA1 CurrWRr. 
Tabl e 47. DMAnCurrWptr r e gist e r format 





HI 






DMAnCurrWPtr 






The 256-bit aligned DRAM address of 






tho noxt location DMAChannolO will 


writo to. This register is sot by tho CPU 


at the start of a DMA oporation and 




dynamically — updated — by — tho DMA 


manager during tho oporation. 



10 12.5.5.2.10 DMAn l ntAdr 

This r e g i st e r d e script i on app lie s to DMAOIntAdr and DMAIintAdr. 
Tabl e 48. DMAn l ntAdr r e g i ster format 









DT^'gSrlptiorlg^^^^l ^' 




DMAnlntAdr 


24^ 




The 256 bit aligned DRAM address 




of the location that will trigger an 


interrupt when reached by 


DMAChannoln buffer. 



12.5.5.2.11 DMAnMaxAdr 

15 Th i s r e gist e r d e scr i pt i on app l ios to DMAOMaxAdr and DMAIMaxAdr. 
Tab le 4 9. DMAnMaxAdr register format 
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12.5.5.2.1 



DMAnMaxAdr 



Th e 256 bit align e d DRAM address of tho 
l ast froo l ocat i on that i n t l io DMAC I iannoln 



c i rcu l ar buff e r. DMAChannelO transf e r 



wi l l stop whon it roaches th i s addross. 



3- 



DMAAcooGsEn 



This r e gist e r e nab l es DMA acc e ss for tho various requestors, on a p e r channe l bas i s. 
Tab l e 50. DMAAccossEn regist e r format 




DMAChanno l OEn 



DMAChann e llEn 



DMAChanne l 2En 



DMA Chann el #0 accoss enable 



Th i s un i directional wr i te chann el i s us e d 



FuU 



by tho USBD and tho IS I . 



1 - enab l e 



0 - d i sab le 



As por USBDISIOEn, 



DMA Chann e l #2 acc e ss e nabl e . 



Th i s b i d i roctiona l road/write channo l is 



us e d by the USBH. 



~ enablo 



0 ~ d i sable 
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12.5.5.2.13 DMAStatus 

Th e status b i ts ar e not st i cky b i ts i . e . they r e fl e ct th e 'liv e ' status of th e chann e l. 
DMAChann e lNlntAdrHIt and DMAChannolNMoxAdrHit status bits may only be cleared by wr i t i ng to 
th e r e levant DMAnintAdr or DMAnMaxAdr r e g i st e r. 

Table 61 . DMAStatus register format 



Rejdpame ^ ""^ ^ 


B4t{e} 


access 




DMAChannelOlntAdrHit 


9 


None 






DMA channel #0 interrupt address hit. 
1 - DMAChannelO has reached the 


address contained in the DMAOIntAdr 


register. 

0 ~ default state 


DMAChannolOMaxAdrHit 


A- 




DMA channel #0 max address hit. 




1 - DMAChannelO has reached the 
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DMAChann e ll IntAdrHit 



DMAChonnon MaxAdrHit 4 



address containod in tho DMAOMaxAdr 



r e gist e r. 

0 - d e fault stato 



NoRe As p e r DMAChannolOlntAdrHIt 



None | As p e r DMAChannoiOMaxAdrHit 



12.5.5.2.1^ DMAMask r e gister 

Al l b i ts of the DMAMaek are both r e adab le and wr i tab le by tho CPU. Tho DMA managor cannot 
a l t e r th e va l ue of th i s r e gist e r. All i nterrupts ore gonoratod in an edgo s e nsitive manner i .e. tho DMA 
manag e r w i l l generate a dmojcujrq pulse oaoh tim e a status b i t goes high and its corrosponding 

mask bit is e nabl e d. 

Tab l e 52. DMAMask reg i ster format 





Blt(s) 


access 




DMAChannelOlntAdrHltintEn 


9 


FuH 






DMAChannoiOintAdrHit status interrupt 

enable. 

1 - enable 

0 ~ disable 


DMAChannelOMaxAdrHltlntEn 


1- 


Pyll 






DMAChannelOMaxAdrHit status interrupt 
enable. 
1 - enable 
0 - disable 


DMAChannell IntAdrHitlntEn 


2 


Pyjl 


As per DMAChannolOlntAdrHftlntEn 






DMAChannell MaxAdrHitlntEn 


3 


Pull 






As per DMAChanneiOMaxAdrHitlntEn 



12.5.5.2.15 CPUIS I TxBuffCtrl reg i ster 

Tab l e 53. CPU I SITxBufFCtr l rogistor format 




; 



teescrlptf ef^ 





9 



futt 



This f ie ld shou l d be s e t by th e CPU to 
ind i cat e th e va li d i ty of tho 



CW/S/7xSi//f contents. This fie l d w ill 



b e cl e ar e d by the SCB once th o 



contents of the CPUISfTxBuffhas boon 



copi e d to th e iSITxBuff. 

NOTE: Th e CPU shou l d not clear this 



fi e ld und e r norma l op e rat i on, i f th e 
CPU c le ars this fio l d dur i ng a packet 



transfer to tho ISITxBuff, th e transfer 
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will bo abortod — this is not 
recommendod. 
1 ~ valid packot. 
0 " default state. 


PktDesc 




full 
rCrTT 






PktDoGC field, as per Table — , of the 
packet contained In the CPUISITxBuff. 


The CPU is responsible for maintaining 


the correct sequence bit value for oach 


ISffd.lSfSub/d channel it communicatos 


Only valid when CPU 


ISITxBuffCtrLPktVolid - 1 . 


DostlSild 


7^ 


fyll 






Denotes the iSlld of the target SoPEC 
as por Tablo — r 


DostlSISubId 


8 




Indicatos which DMAChannol of tho 






target SoPEC the packet in tho 
CPUISITxBuff to doGtinod for. 
1 - DMAChannoM 
0 " DMAChannolO 



12.5.5.2.16 USBD I ntStatuo 

Th e USBDIntStatus r e g i ster conta i ns status b i ts that ar e r el ated to cond i tions that can caus e an 
i nt e rrupt to tho CPU, if tho correspond i ng i nterrupt onablo b i ts are sot in tho USBDMoek reg i ster. 
Th e fi e ld nam e ext e nsion Sticky i mp l ies that th e status condit i on w ill rema i n rogistorcd unt i l clear e d 
by a CPU wr i t e of 1 to oach bit of tho fiold. 

NOTE: There is no Ep0lrr e gPktStickyf \e\ 6 becaus e th e d e fault contro l EP w ill fr e qu e ntly r e c e ive 
pack e ts that are not mu l tip l es of 32 bytos dur i ng normal op e ration. 
Table 5^. USBDIntStatus reg i st e r format 





^^^^^^^^ 






CoreSuspondSticky 


0 




Device core USB suspend flag. Sticky. 






1 ~ USB suspend state. Sot when device core 
udcvci_GU6pend signal transitions from 1^0. 


0 ~ default value. 


CoroUSBRosotSticky 


A- 


deaf 








Device core USB reset flag. Sticky. 
1 ~ USB reset. Set when device core 


udcvcljroBOt signal transitions from 1^0. 


0 ~ dofault value. 


CoreUSBSOFSticky 


2 


Clear 


Dovico core USB Start Of Frame (SOF) flag. 




Sticky. 
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1 ~ USB SOF. Set when dovice core 


udcvci_€of o\gnQ\ transitions from 1 > 0 


0 ~ default valuo. 


CPUISITxBuffEmptyStioky 


i 


GleaF 








CPU ISi transmit buffer empty flag. Sticky. 
1 "empty. 

0 - default valuo. 


CPUEpOlnBuffEmptyStioky 


4 


Clcor 






CPU EPO IN buffer empty flag. Sticky, 

1 " empty. 

0 ~ default value. 


CPUEpSlnBuffEmptySticky 


S 








CPU EPS IN buffer empty flag Sticky 

1 — empty. 

0 ~ default value. 


EpOlnNAKSticky 


S 




EPO-IN NAKfiao Stickv 




This flag is set if the USB device core issues 


a read request for EPQ IN and there is not a 


valid packet present in the EPO IN buffer. The 


core will therefore send a NAK response to 


the IN token that was received from external 


USB host. This is an indicator of any back- 


pressure on the USB caused by EPO-IN. 


1 - NAK sent. 
0 ~ default value 


EpSlnNAKSticky 


? 


Qleaf 


As per EpOlnNAK, 








EpOOutNAKSticky 


8 




EPO OUT NAK flao Stickv 




This flao is sot if the USB device core issues 


a write request for EPQ OUT and there is no 


*M «v 1 ik^^ I wVi|Vi^w« ■ ^1 ■ w m wii i^i I VI ^ iw 1 1^^ 

spoco in the OUT BP buffer for a the packet 


The core will thorofore send a NAK response 


to the OUT token that was received from 


external USB hoot. This is an indicator of any 


back pressure on the USB caused by EPO 


/^l IT 

OUT. 

1 - NAK sent. 
0 default value 


cpi VJUllNAIXOuOKy 


f\ 

B 




AS per tzpUL^utriAix. 


Ep20utNAKStioky 


4e 




As por EpOOutNAK. 


Ep30utNAKStioky 


44 


Clojr 


As per EpOOutNAK. 


EpdOutNAKSticky 


42 








As por EpOOutNAK. 


Ep1 IrregPktStioky 


43 








EP1 OUT irregular sizod packet flag. Sticky. 
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0 ~ d e fau l t valu e . 



I nd i cat e s a packet that i s not a mu l t i pl e of 32 
bytes In s i z e was r e c ei ved by EP1 - OUT. 



1 ~ i rregu l ar s i zed packet roco i vod. 



Ep2lrr e gPktSticky 



44 



C lea r 



As p e r EpIlrregPktSticky. 



EpS l nr e gPktStioky 



4^ 



Qleaf 



As p e r EpIlrrogPktSticky. 



Ep 4l rregPktSticky 



Gleaf 



As p e r EpIlrr e gPktSticky. 



OutBuffOvorF l owSticky 



4^ 



Qleaf 



OUT EP buff e r ov e rflow flag. St i cky. 
This flag i s set i f the USB devic e cor e 



att e mpted to wr i te a packet of more than 6 4 



byt e s to th e OUT EP buff e r. This is a fata l 
error, suggesting a problem In tho USB dev i ce 
IP core. Th e SCB wil l tak e no furth e r action. 



~ overflow cond i t i on detected. 



0 - d e fault valu e . 



I nBuffUnd e rRunSt i cky 



4« 



I N EP buffer underrun f l ag. St i cky. 



This flag is set i f the USB dev i ce core 
att e mpt e d to r e ad mor e data than was 



pr e s e nt from th e I N EP buffer. This i s a fatal 



e rror, sugg e sting a problem in tho USB device 
IP cor e . Th e SCB wi l l take no further action. 



- und e rrun cond i tion d e t e ct e d. 



0 - defau l t va l u e . 



12.5.5.2.17 USBD I S I F I FOStotus 

Th i s register contains the status of tho I S I mapped OUT EP packet FIFO. This i s a secondary status 
r e g i st e r and wi l l not caus e any i nt e rrupts to th e CPU. 
Tabl e 55. USBD I S I F I FOStatus r e g i st e r format 




EntryOVa li d 



F I FO entry #0 va li d fio l d. 
This flag w i ll bo sot by tho USBD wh e n tho USB devic e cor e 



indicat e s th e va li d i ty of packet e ntry #0 i n the FIFO. 



1 - valid USB packet in I S I OUT EP buff e r 0. 



0 ~ default va l u e . 



EntryOSourc o 3^4- 



none 



F I FO entry #0 source fio l d. 



Conta i ns tho EP associat e d with pack e t e ntry #0 in the F I FO. 



B i nary Cod e d D e cima l . 

On l y val i d when ISIBuffOPktValid - 1 . 
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Entryl Val i d 



none 



As por EntryOVQiid. 



Entryl Sourc e 



745 



Ag por EntryOSourco. 



Entry2Val i d 3 



Rene Ao por EntryOVQiid. 



Entry2SourG e 44^ 



Rene As per EntryOSourc e . 



Entry3Val i d ^ 



Rene As per EntryOVQiid. 



Entry3Sourco 



Rene As por EntryOSourc e . 



12.5.5.2.18 USBDPMAOFIFOStatus 

Th i s rog i stor dosoript i on app l i e s to USBDDMAOFIFOStatue and USBDDMAIFIFOStQtue. 
Th i s r e gister conta i ns th e status of th e DMAChanno l N mapp e d OUT EP paokot FIFO. This i s a 
s e condary status regist e r and will not causo any interrupts to tho CPU. 

Table 56. USBDDMANFIFOStatus r e gist e r format 



Fi el d Name :^ 




EntryOVa li d Q 



nono 



F I FO ontry #0 va li d f i e l d. 

Th i s flag wi l l b e s e t by the USBD when the USB dev i ce core 



nd i catos tho va li dity of packot ontry HO I n th e F I FO. 
1 - va l id USB packet i n I S! OUT EP buffer 0. 

0 - default valu e . 



0« ^ nono 



F I FO ontry #0 sourc e f iel d. 

Contains tho EP associat e d w i th pack e t e ntry #0 i n th e FIFO. Binary 
Coded D e cima l . 



Only val i d when EntryOValid " 1 . 



Entryl Val i d 



As p e r EntryOValid. 



745 



As p o r EntryOSourc e . 



10 



12.5.5.2.19 USBDRosumo 

Th i s r e gister caus e s th e USB d e v i c e core to initiat e r e eumo signa l l i ng to th e e xt e rna l USB host. 
Only app l icab le when tho dev i c e cor e i s in tho susp e nd state. 
Table 57. USBDR e sume r e g i st e r format 



B el d Name 



Write acces 



USBDR e sum e 



full 



USBD core resum e r e g i st e r. 



Tho USBD w i l l c le ar th i s rog i stor upon r e sum e 



notif i cat i on from tho dov i co core. 



1 - g e n e rate resume signa l l i ng. 



0 ~ default va l u e . 



12.5.5.2.20 USBDSotup 

Th i s rog i stor contro l s tho general setup/configuration of tho USBD. 
Tabl e 58. USBDS e tup rog i stor format 
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EpIlrrogPktCntrl 0 



EP 1 OUT i rr e gular siz e d pack e t oontroi. 

An irr e gular sized pack e t is d e fin e d as a pack e t that is not a 



mu l t i pl e of 32 byt e s. 

1 ~ d i scard irregular sized pack e ts. 



0 ~ road 32 bytes from buffer, r e gardl e ss of packet s i ze. 



Ep2 l rrogPktCntr l 



fy{| 



As per Ep1 IrrogPktD i scard 



Ep3lrrogPktCntr l 



As p e r EpI l rr e gPktD i scard 



EpIlrrogPktCntr l 3 



As p e r EpI l rregPktD i scard 



12.5.5.2.21 USBDEpN I nBuffCtr l r e g i st e r 

Th i s r e g i ster descr i pt i on appl ie s to USBDEpOlnBuffCtrl and USBDEpdlnBuffCtrl. 
Tab l e 59. USBDEpN I nBuffCtrl register format 



Fie l d Namo 



poces£ 



Description 




PktVaUd 



S o tting th i s r e g i st e r validat e s th e contents of USBDEpNInBuff. This 
field will bo cloarod by tho SCB once the packet has boon 



successfully transmitted to the external USB host. 

NOTE: Th e CPU should not c le ar th i s fi el d und e r norma l op e ration. 



I f th o CPU cl e ars this fi e ld during a packet transf e r to the USB, the 
transf e r w il l b o aborted — th i s is not recommended. 



- va li d packet. 
0 ~ d e fault stat e . 
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12.5.5.2.22 USBDMaok 

This reg i st e r s e rv e s as an I nt e rrupt mask for a l l USBD status conditions that can caus e a CPU 
i nt e rrupt. S e tt i ng a fi e ld e nables i nterrupt generation for the associated status event. Clearing a field 
disab l es interrupt generation for tho assoc i at e d status e v e nt. A l l i nterrupts will be g e n e rat e d in an 
e dg e sensitive mann e r, i. e . when th e associated status register trans i t i ons from 0 - > 1 . 
Table 60. USBDMask register format 







f • 1 1 

access 




j^^^^Nqme i : ^~ ^^ 






Q 


fy{{ 


CoroSuepondSticky status interrupt enable. 


CoreSuspendStickyEn 




CoreUSBResetStickyEn 


4- 




CoreUSBRoGotSticky status interrupt enable. 


CoreUSBSOFStickyEn 


2 


FuU 


CoreUSBSOFSticky status interrupt enable. 


CPUISITxBuffEmptyStickyEn 


3 


fillt 
rCrtT 


CPUISITxBuffEmptyStiGky status internjpt enable. 




4 


FuU 


CPUEpOlnBuffEmptyStlGky status interrupt enable. 


C PU EpO 1 nBuffEm ptyStickyEn 
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CPU Ep5I nBuff EmatvStiGkvEn 






CPUEoSinBulfEFnDtvStickv ^itatufi interrupt enable 


EpOlnNAKStiokyEn 




fyll 


EoOinNAKStickv Btntus intQrrupt onablo 


EpSlnNAKStiokyEn 


1 


Putt 


EpSlnNAKStiGky status intorrupt onablo 


EoOOutNAKStickvEn 


g 




EoO0utNAKStiGkv status interrupt enable 


Ed1 OutNAKStickvEn 


g 


Futt 




ED20utNAKStickvEn 




Futt 


ED20utNAKStickv G.t^tu^ intorrupt enable 


Ep30utNAKStlckyEn 




fyll 


EoSOutNAKStickv status interrupt enablo 


Ep40utNAKStickyEn 


4^ 


fyll 


Ep^OutNAKStickv status interrupt enable 


Ep1 IrregPktStickyEn 




fyll 


Ed i/rrGoPkt Sticky states intprrunt pnnhio 




■T-*f 


fyjj 


cp^trreyr^nt^ucKy siuius inierrupi enaoio. 


EpSlrregPktStickyEn 




fyll 


Ep3lrregPktSticky status intorrupt enablo. 


Ep4lrrogPktStickyEn 


^% 


fl til 


Ep^lrregPktStioky status intorrupt enable. 


QutBuffOverFlowStickyEn 


M- 


fyll 


OutBuffOvorFlowSticky status interrupt enablo. 


InBuffUnderRunStickyEn 


\% 


fyll 


InBuffUnderRunSticky status Intorrupt enablo. 



12.5.5.2.23 USBDD o bug 

Th i s r e gist e r I s int e nded for debug purpos e s on l y. Contains non - sticky v e rsions of al l int e rrupt 
capab l o status b i ts, which ar e referr e d to as dynamic In th e table. 
Tabl e 61. USBDD e bug r e gister format 




Cor e T i m e Stamp 



nono 



USB d e v i c e cor e fram e number. 



Cor e Susp e nd 



44 



nono 



Dynam i c v e rs i on of CoroSucp e ndSticky, 



Cor e USBR e s e t 



45 



Dynam i c vorsion of CoroUSBRosotStioky. 



CoroUSBSOF 



4a 



none 



Dynom i o voro i on of Cor e USBSOFSticky. 



CPU I S I TxBuffEmpty 



44 



none 



Dynam i c version of CPUISITxBuffEmpty Sticky. 



CPUEpO l nBuffEmpty 



45 



nono 



Dynamic vers i on of CPUEpOlnBuffEmptySticky. 



CPUEpS l nBuffEmpty 



EpO l nNAK 



46 



none 



Dynamic v e rsion of CPUEpSlnBuffEmptySticky. 



4? 



none 



Dynamic v e rs i on of EpOlnNAKSticky. 



EpSlnNAK 



48 



Dynam i c v e rs i on of Ep6fnNAKSticky. 



EpOOutNAK 



4« 



none 



Dynamic v e rs i on of EpOOutNAKStioky. 



EpIOutNAK 



20 



none 



Dynam i c version of EpIOutNAKStioky. 



Ep20utNAK 



24 



Dynamic v e rsion of EpQOutNAKStioky. 



Ep30utNAK 



22 



Dynam i c v e rsion of EpSOutNAKStioky. 



EpIOutNAK 



23 



nono 



Dynamic version of Ep^OutNAKSticky. 



EpI l rr e gPkt 



24 



Dynam i c v e rsion of EpIlrrogPktSticky. 



Ep2 l rrogPkt 



2§ none Dynam i c v e rsion of Ep2lrr e gPktSticky. 



Ep3 l rrGgPkt 



26 



none 



Dynamic v e rsion of EpSlrr e gPktSticky. 
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Ep 4l rr e gPkt 



27 



none 



Dynam i c v e rs i on of Ep^lrrogPktStioky. 



OutBuffOvorF l ow 



2g 



noRe Dynamic v e rs i on of OutBuffOv e rFfowSticky. 



I nBuffUnderRun 



29 



nono 



Dynamic vorsion of InBuffUndorRunStioky. 



12.5.5.2.2 4 USBHStatuo 

Th i s rog i stor oonto i no al l status b i ts associated w i th th e USBH. Tho fioid nam e e xt e ns i on Sticky 
i mp l i e s that tho status cond i tion w il l rema i n r e gist e r e d unt i l c l oarod by a CPU wr i te. 
Tabic 62. USBHStatus reg i ster format 




Cor el RQSticky 



Sot whon HO corQ UHOSTCJrqN output signa l 
transit i ons from 0 ^> 1 . Rofor to QHC I spec for details on 



HC i nt e rrupt proc e ss i ng. 
- IRQ interrupt from coro. 



0 - defau l t va l ue. 



HC cor e I RQ interrupt flag. Sticky 



Cor e SM I Sticky 



HC coro SM I i nt e rrupt flag. St i cky 

S e t wh e n HC cor e UHOSTC_SmiN output s i gnal transi 



t i ons from 0 > 1 . Ref e r to QHCI sp e c for d e tails on HC 
i nt e rrupt proc e ssing. 



~ SM I i nterrupt from HC. 



0 ~ defau l t value. 



CoroBuffAcc 



none 



HC cor e buff e r access flag. 

HC cer e UHOSTC_BufAcc output s i gna l . Ind i cates 



wh e th e r th e HC i s acc e ss i ng a descr i ptor or a buffer in 
shar e d syst e m m e mory. 



- buff e r acc e ss 



0 ~ descriptor access. 



12.5.5.2.25 USBHMask 

This register serv e s as an int e rrupt mask for a ll USBH status conditions that can caus e a CPU 
i nterrupt. A ll i nterrupts wil l be generated in an e dg e s e ns i tive manner, i.e. whon the assoc i ated 
status regist e r transit i ons from 0 > 1 . 
Tab l e 63. USBHMask register format 







tf^rite^CjC^^ 




CorelRQIntEn 


0 


fuH 






Coro//?QStfcAy status interrupt enable. 
1 - enable. 
0 - disable. 


CoreSMIintEn 


4 








CoreSMISticky status interrupt enable. 
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1 - enable. 
0 - disablo. 



12.5.5.2.26 USBHDobug 

This reg i ster is int e nd e d for d e bug purpos e s only. Conta i ns non sticky vers i ons of al l i nt e rrupt 
capab le status b i ts, which are roforrod to as dynamic i n th e tab le . 
Tabl e 64. USBHDobug regist e r format 



FielUlglame 






De^cHption^^l;;;!^:^;' ^; ^ \ 


Corel RQ 


0 


nono 


Dynamic version of CorelRQSticky. 


CoreSMI 


4- 




Dynamic version of CoroSMiSticky. 



12.5.5.2.27 I S I Cntrl 

This rog i stor controls th e g e nera l s e tup/configurat i on of the I SL 

Not e that th e r e set valu e of this r e gist e r al l ows th e SoPEC to automatical l y b e come an I S I Mast o r 
(AutoMaet e rEnabl e - 1) If any USB pack e ts ar e reco i vod on ondpoints 2 4 . On becom i ng an 
10 I S I Mast e r the fSiMaeterSel b i t i s s e t and any USB or CPU packets d e stin e d for other IS ! dev i ces 

ar e transmitt e d. Th e CPU can ov e rrid e this capabi l ity at any time by cl e aring th e AutoMaetorEnabio 
bitr 

Tab le 65. I S I Cntrl r e gist e r format 




Blt{s) 



Ck£lCt£Si£tJCL 



D e scriptjon 



|«pl 




TxEnabl e 



I SI transmit e nabl e . 



Enab l oG I S I transmiss i on of l ong or p i ng packets. ACKs 
may still bo transm i tted when th i s b i t i s 0. 



This i s c l ear e d by transmit e rrors and noods to bo 
r e start e d by the CPU. 



- Transm i ssion e nabled 



0 " Transm i ssion disabl e d 



RxEnab le 



I SI r e ceive onablo. 



Enables ISI reception. This is can only b e cl e ared by 
tho CPU and it is only antic i pat e d that r e cept i on wil l b e 



d i sab l ed wh e n th e I S I i n not i n use and th e I SI p i ns are 
b e ing used by th e GPIO for another purpos e . 



- Rocopt i on onablod 



0 ~ Rocopt i on d i sab l ed 



I S I Mast e rS e l 



pyll 



I SI master ooloct. 



D e t e rm i nes wheth e r the SoPEC is an I SIMast e r or not 



1 - IS I Mastor 



0 - I S I S I ovo 
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AutoMast e rEnab l e 



PjII 



I S I auto mast e r e nab l e. 



Enabl e s th e devic e to automat i ooliy bocom e the 
ISIMastor if activity I s dotoctod on USB endpo i nts2 -4 . 



1 - auto mast e r op e rat i on enab l ed 



0 - auto master operat i on disabled 



12.5.5.2.28 



-ASM 



Tab le 66. ISI I d r e g i st e r format 




I S II d for this SoPEC 



SoPEC r e sets to boing an IS I SIavo with I SI I dQ. QxF (tho 
broadcast I S II d) is an il l egal va l u e and shou l d not bo written 



to this r e gister. 



12.5.5.2.29 



IS I NumRetries 



Tab le 67. I S I NumR e tr ie s r e gist e r format 




8lt(s) 




Description 




I S I NumRotr i os ^ 



Py|j 



Number — ef — \S\ — r e transmiss i ons — to — att e mpt — ifi 
rosponso to an i nferred NAK b e for e aborting a l ong 



pack e t transmission 



12.5.5.2.30 



I SIPingSchedui e N 



This r e g i st e r description appl ie s to ISIPingSoh e dul e O, ISiPingSchedulel and iSiPingSch e duf e 2. 
10 Tabl e 68. ISIP i ngSch e du ie N r e g i ster format 







access^ 


i^^MK- ^ - - . 


ISIPingSchedule 


44^0 


Full 

1 Ull 






Denotes which ISI Ids will be receive ping packets. 
Noto that bitO refers to ISIIdO, bit1 to ISIId1...bit14 to 


ISIIdll. 



12.5.5.2.31 



iSITotalP e riod 



Table 69. IS I TotalPoriod register format 













ISITotalPoriod 


3^ 




Relood value of the ISITotalPeriod counter 







15 12.5.5.2.32 I S I Loca l Poriod 

Tab l e 70. I SILoca l Period register format 
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Write accoc^c 






ISILocalPeriod 




Pull 


Roload valuo of tho iSILooalPenod counter 



12.5.5.2.33 I SI I ntStatus 

The iSflntStatuG reg i ster contains status b i ts that ar e r el at e d to conditions that can cause an 
interrupt to tho CPU, i f tho corrospondlng interrupt enab le b i ts aro set i n tho iSiMaek reg i st e r. 



Tabl e 71. I S I IntStatus register 











TxErrorSticky 


& 








loi iransmn-error iiag. oiiCKy. 

Rocoiving ISi devico would not accept tho transmitted 


packet. Only set after NumRetries unsuccossful 


retransmissions, (excluding ping packets). 






1- transmit error. 
0 - default state. 


RxFrameErrorSticky 


4- 


Clear 


ISI receive framing error flag. Sticky. 






Thi'i hit i*^ *^f=»t hv thr* 1^1 whf^n ^ "fnininn i=*rmr Hf*t#=*r^tf^H 


1 1 iio un. lo Liy 11 1^ wi i\Ji lull eii 1 1 ii i^ vsf i v/i ijc;lc70LC7U 




incorrect S^a/t or Stop field or by bit stuffing errors. 
0 •" default state. 


RxCRCErrorSticky 


2 


Clear 


ISI receive CRC error flag. 

This bit Is sot by the ISI when a CRC error is detected 


in an incoming packet. Other than dropping the 




orrorod pocket ISI reception is unaffected by a CRC 
Error. 

1 - CRC error 
0 - default state. 


RxBuffOvorFlowStlcky 


3 


deaf 


ISI receive buffer over flow flag. Sticky. 






An overflow has occurred in the ISI receive buffer and 


a packet had to bo dropped. 
1 ~ over flow condition detected. 


0 ~ default state. 



12.5.5.2.3 4 ISITxBuffStatUG 

Th e fSiTxBuifStQtuc r e g i ster conta i ns status b i ts that ar e r e lat e d to tho I S I Tx buffer. Th i s is a 
secondary status reg i ster and wi ll not cause any i nt e rrupts to th e CPU. 



Tabl e 72. I S I TxBuffStatus register format 
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MP^^^ ^ ^^^^^^^^^^^^^^^^^^ 






Mono 


ISI Tx buffer entry #0 packet valid flag. 


EntryOPktValid 




This flag will be set by the ISI when o valid ISI packet is 


written to entry #0 in the ISlTxBuff for transnriissipn over the 
ISI bus. A Tx packet is considered valid when it is 32 bytos 


in size and the ISI has written the packet header information 




to Entry OPkiDeGO, EntryODestlSlld and EntryODestlSfSuoia. 
1 - packet valid. 
0 - default value. 


EntryOPktDesG 






ISI Tx buffer ontry #0 packet descriptor. 

PktDesc field as per Table — for the packet entry #0 in the 


ISlTxBuff, Only valid when EntryORktValid ~ 1 . 




EntryODestlSlld 


?^ 




ISI Tx buffor ontry ffO dostination ISI ID. 

Denotes the ISIId of tho target SoPEC as per Table . Only 


valid when EntryOPktValid ~ 1 . 


EntryQDestlSISubId 


8 




ISI Tx buffer entry #0 destination ISI sub ID. 

Indicates which DMAChannol on the target SoPEC that 




packet ontry ffu in tno ii>i ixoutr is oestineci Tor. <Jniy vaiia 
wnen cniryuHKivsiiu — +t 
-H — UMAonannen 
0 - DMAChannelO 


EntrylPktVolid 


9 


Monc 


As per EntryOPktValid. 


Entryl PktDeso 






As per EntryOPktDeec. 


EntrylDestlSHd 




Mono 


As per EntryODestlSlld. 


Entryl DostlSISubid 






As per EntryODoGtlSISubld. 



12.5.5.2.35 



I S I RxBuffStatus 



Th e ISIRxBuffStQtuG r e gister conta i ns status b i ts that arc related to th e I S I Rx buff e r. Th i s is a 
secondary status reg i ster and w ill not caus e any I nt e rrupts to tho CPU. 
Tabl e 73. I SIRxBuffStatus register format 



F ie ld^^ame ^ 



B4t(s) 



TrTrTTt^ 

acc e ss 





EntryOPktVa li d 



9 



I SI Rx buffer ontry #0 packet valid flag. 



This flag will bo cot by tho I S I wh e n a va l id IS I packet Is 
rocoivod and writt e n to e ntry #0 of th e ISIRxBuff. A Rx 



pack e t i s cons i dered val i d when i t is 32 bytos in size and 



no framing or CRC errors w e r e d e t e ct e d. 
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1 ~ valid packet 
0 ~ default value 


EntryOPktDesc 




None 


ISI Rx buffer entry #0 packet dosoriptor. 

PktDosc field as por Tablo — for packet entry #0 of the 




fxyiHxBUfT. Only valid when cntryOPKtVQha 1 . 


EntryODoptlSlld 






ISI Rx buffer 0 dootlnatlon iSI ID. 

Denotes the ISI Id of tho target SoPEC as per Table — . This 


should alwoyo corrospond to tho local SoPEC ISIId. Only 


valid when EntryOPktValid - 1 . 


EntryODostlSISubId 


8 


None 


ISI Rx buffer 0 destination ISI sub ID. 

Indicates which DMAChonnol on the target SoPEC that 


entry #0 of the ISiRxBuffis destined for. Only valid whon 


cniryUHKtVQHu — +-r 
1 - DMAChanneh 
-w — UMAunanneiu 


EntrylPktValid 


9 


Nono 


As per EntryOPktValid. 






EntrylPktDeso 






As por EntryOPktDesc. 


Entryl DestlSlld 




Nono 


As por EntryODestlSdd. 










EntrylDestlSISubId 


As por EntryODeetlSfSubid. 



12.5.5.2.36 ISIM a sk regist e r 

An interrupt w i ll b e g e nerated i n an odgo sensitiv e manner i . e . the ISI w ill gen e rat e an ieijcujrq 
pulse e ach tim e a status bit goes high and tho correspond i ng bit of th e ISIMask r e gister is enabled. 



Tabl e 7 4 . IS I Mask register 



F-ield Name 



~i S. »■ 't 




acc e ss 



Descflp^qn 




TxError l ntEn 



0 



Pull 



TxErrorSticky status i nterrupt onab l o. 



1 - e nable. 



0 - d i sabl e . 



RxFram eError l ntEn 



Pull 



RxFramoErrorSticky status i nt e rrupt enab l o. 
1 ~ e nab l e. 



0 ~ disab l e. 



RxCRCErrorlntEn 



Ct ill 



RxCRCErrorSticky status interrupt enabl e . 
1 ~ e nab l o. 



0 ~ disab l e. 



RxBuffOvorFlow l ntEn 3 



Pyll 



RxBuffOv e rFlowStfcky status i nt e rrupt e nable. 



1 - e nabl e . 



0 - d i sab l e. 
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12.5.5.2.37 



I SISub l dNSoq 



Th i s reg i ster d e scr i pt i on app li es to ISISubldOSoq and ISlSubidOS e q. 
Tab l e 75. iS I SubldNS e q reg i st e r format 




I S I Sub l dNSoq 



I S! sub I D channol N soquonc e b i t. 



Th i s b i t may be i nit i al i s e d by th e CPU but i s 



updat e d by the IS I each t i me an e rror - fr ee l ong 



pack e t is r e c ei v e d. 



12.5.5.2.38 



iS I Sub l dS e qMask 



Tab l o 76. I SISub l dSoqMask rog i otor format 



10 



15 





B^6) 




Description 


ISISubldSeqOMask 


0 


Pyll 


ISI sub ID channel 0 sequence bit mask. 

Sotting this bit onsuros that the soquonco bit will bo 




ignored for incoming packets for the ISISubld. 
1 - ignore sequence bit. 
0 ~ default state. 


ISISubldSoqIMaok 


1- 


Pull 


As per iSiSubldSeqOMask. 



12.5.5.2.30 



IS I NumP i no 



Tablo 77. IS I NumP i ns reg i ster format 



IS I NumPins 



Description , ^ v-^^^ .c.^^-r.*^ -^r 



S e lect numb e r of activ e IS I p i ns. 



1- 4 pins 



0-2 pins 



12.5.5.2.^0 



I SITurnAround 



Th e I SI bus turnaround time will reset to its maximum va l ue of OxF to provide a safer start i ng modo 
for th e I S I bus. Th i s va l ue should be sot to a valu e that is su i tabl e for th e phys i cal i mpl e m e ntation of 
th e ISI bus, i. e . the l owest turn around time that the physica l i mplementat i on wil l al l ow w i thout 
sign i ficant degradation of s i gna l i ntegrity. 

Tab le 78. I S I TurnAround r e gist e r format 




Q.n Euli 



I S I bus turn around t i me in I S I c l ock 



cycles (32MHz). 



12.5.5.2.41 



IS I ShortRep l yWin 
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Th e I S I short pack e t r e ply w i ndow tim e w i ll res e t to its max i mum va l u e of 0x1 F to provide a safer 
start i ng mode for tho IS ! bus. This valuo should bo sot to a valuo that wi ll allow for exp e ct e d 
fr e qu e ncy of bit stuffing and r e c e ivor rosponso timing. 

Tab l o 70. IS I ShortRoplyWin r e g i ster format 



10 











ISIShortReplyWin 


4^ 








ISI long packet reply window in ISI 
clock cycles (32MH2). 



12.5.5.2.42 



IS I LongR e plyW i n 



Tho I S I l ong p a ck e t r e ply window t i m e wi ll r e s e t to its maximum va l ue of 0x1 FF to provide a saf e r 
start i ng mode for th e I SI bus. Th i s valu e shou l d be sot to a value that wil l allow for e xpected 
fr e quency of b i t stuffing and receiver response t i m i ng. 

Table 80. I S I LongReplyWin reg i ster format 




I SILongRep l yW i n 



Q-n c« ill 



I S I l ong packet roply window i n IS I clock cyc l os 
(32MHz). 



15 



12.5.5.2.43 ISIDobug 

This regist e r i s i nt e nded for debug purposes only. Contains non sticky versions of a l l interrupt 
capab le status b i ts, which ar e r e f e rred to as dynamic in tho tablo. 
Tab l o 81 . IS I Dobug reg i ster format 











TxError 


0 


None 


Dynamic version of TxErrorSticky. 


RxFrameError 


A- 


None 


Dynamic version of RxFramoErrorSticky. 


RxCRCError 


2 


None 


Dynamic version of RxCRCErrorSticky, 


RxBuffOvorFlow 


3 


None 


Dynamic version of RxBuffOverFlowSt'icky, 



12.5.5.3 CPU Bus int e rfac e 

12.5.5.4 Control Cor e Logic 

12.5.5.5 DiU Bus int e rface 
20 42.6 DMA RECS 

A l l of the c i rcular buff e r r e gist e rs are 256 b i t word al i gned as r e quired by the D I U. The 
DMAnBottomAdr an6 D/U/\nrop/\c/r reg i st e rs ar e inc l usive i . e . th e addresses contain e d i n thes e 
registers form part of tho circu l ar buffer. The DMAnCurrWPtr always po i nts to th e next l ocation th e 
DMA manager w i l l wr i to to so interrupts are gonorat e d whonovor th e DMA manager r e aches tho 
25 addr e ss in ei th e r the DMAnintAdr or DMAnMaxAdr r e gister s rath e r than wh e n it actual l y wr i t e s to 
thes e locat i ons. It ther e fore can not wr i te to tho l ocation i n tho DMAnMaxAdr r e g i ster. 
SCB Map regs 
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Tho SCB map is configur e d by mapping a USB ondpo i nt on to a data s i nk. This iG porformod on a 
endpo i nt bas i c i. e . e ach e ndpoint has a configuration reg i st e r to al l ow its data s i nk be se le ct e d. 
Mapp i ng an ondpoint on to a data sink do e s not initiate any data flow each ondpo i nt/data sink 
noeds to b e enabled by writing to tho appropriat e configuration r e gist e rs for the USBD, I S ! and DMA 
5 manager. 

13. Gonora l Purpose l O (GP I O) 
4^7^! Overview 

The Gen e ra l Purposo IQ block (GP I O) i s r e spons i b l e for control and i nterfac i ng of GP I O pins to the 
rest of th e SoPEC syst e m. I t prov i des easi l y programmabl e control l ogic to s implify control of GP I O 
10 funct i ons. I n al l th e ro are 32 GPIO pins of which any pin can assume any output or I nput function. 
Poss i b l e output functions are 
A Stopper Motor contro l Outputs 

12 Brushloss DC Motor Contro l Output (total of 2 diff e r e nt control l ers each w i th 6 outputs) 

4 Gonora l purpos e high driv e pu l s e d output s capable of dr i ving LEDs. 

15 ^ 4 Opon drain l Os us e d for LSS int e rfac e s 

4 Normal drive l ow imp e danc e l Os us e d for th e I S I intorfooo in Multi SoPEC mod e 

Each of th e p i ns can b e configur e d i n ei ther input or output mod e , e ach pin i s i nd e p e ndently 
controlled. A programmabl e d e- g li tch i ng circu i t ex i sts for a fix e d numb e r of i nput p i ns. Each i nput is 
a Schmidt trigger to incroaso nois e immunity should the i nput b e us e d without tho do glitch circuit. 
20 Th e mapp i ng of tho abov e functions and th ei r a l ternate us e i n a slav e SoPEC to GP I O pins is 
shown in Tab l o 82 below. 

Tab l e 82. GPIO p i n typ e 



GPIO pin(s) 


Pin lO Type 


Default Function 


gpio[3:0] 


Normal drive, low impedance lO 


Pins 1 and 0 in ISI Mode, pins 
2 and 3 in input mode 


(35 — Ohm), — Integrated — pull up 
resistor 






High drive, normal impedance lO 


Input Mode 


gpio[7:^] 


(65 Ohm), — intended for LED 




drivers 


gpio[31 :8] 


Normal drivo, normal impedance 
lO (65 Ohm), no pull up 


Input Mode 



43r2 Stepp e r Motor contro l 

25 Tho motor contro l pins can bo d i r e ct l y control l ed by th e GPU or th e motor contro l l ogic can be used 
to g e nerate the phase pu l ses for the stepper motors. The control le r consists of two c e ntral count e rs 
from which tho contro l pins are derived. Tho centra l counters hav e sev e ra l registers (see Table ) 
us e d to conf i gure the cycl e period, tho phase, tho duty cyc l e, and counter granu l ar i ty. 
Th e r e ar e two motor mast e r counters (0 and 1 ) w i th I d e nt i ca l f e atur e s. Tho period of th e mast e r 

30 counters are def i n e d by the MotorMastorCikPoriodfl :0] and MotorMoGtorClkSro rog i stors i .o. both 
mast e r count e rs ar e d e rived from tho same MotorMaet e rClkSro, The MotorMaetorCikSro d e fin e s 
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the t i m i ng pu l sos usod by tho mast e r count e rs to d e term i n e th e tim i ng poriod. Tho 
MotorMQBt e rClkSrc can soloot olook sourcos of 1^s,100fis,10ms and pc/fr t i m i ng pu l oos. 
Tho MotorMaGtorCikPoriod[1 :0] rog i storo oro cot to tho number of tim i ng pu l soo roqu i rod boforo tho 
tim i ng p e riod ro starts. Each master counter i s set to th e r e l e vant MotorMaeterCikPeriod va\u e and 
5 counts down a un i t each t i me a timing pulso is rec e iv e d. 

Tho master count e rs rosot to MotorMaetorCfkRoriod ya l u e and count down. Onc e th e va l u e h i ts 
z e ro a now value i s r el oaded from th e MotorMasterClkP e riodfl :0] r e g i sters. Th i s ensur e s that no 
master clock glitch i s gonoratod whon chang i ng tho clock p e r i od. 

Each of the lO p i ns for tho motor contro l lor aro d e riv e d from th e master counters. Each pin has 
10 ind e p e nd e nt configurat i on rogistors. Tho MotorMast&rClkS e f e ct[3:0} r e gist e rs d e f i n e wh i ch of th e 
two master counters to uso as tho source for oach motor contro l p i n. Tho master counter value is 
compared with tho configured MotorCtrfLow and MotorCtrlHigh r e gisters (b i tfields of tho 
MotorCtriConfig r e g i ster). If th e count i s equa l to MotorCtriHigh valu e th e motor control is s e t to 1 , i f 
tho count is equal to MotorCtriLow va l ue tho motor contro l p i n i s sot to 0. 
15 Th i s allows th e phase and duty cycl e of the motor control p i ns to b e var i ed at pcfk granularity. 

Tho motor control generators keep a working copy of tho MotorCtriLow, MotorCtriHigh values and 
updat e the configured va l ue to tho working copy wh e n it Is saf e to do so. This a l lows th e phas e or 
duty cycio of a motor contro l p i n to bo safe l y adjusted by tho CPU w i thout caus i ng a glitch on tho 
output pin. 

20 Not e that wh e n r e programming th e IsAotorCtrlLow, f^otorCtriiHigii r e g i st e rs to r e order th e s e qu e nc e 
of tho transition points ( e .g changing from l ow point l e ss than h i gh point to low point greater than 
high point and v i c e v e rsa) car e must sti ll tak e n to avoid i ntroducing g li tching on th e output p i n. 
4^73 LED CONTROL 

LED l if e t i m e and br i ghtness can b e i mprov e d and power consumption r e duced by dr i ving the LEDs 
25 with a pu l s e d rather than a DC s i gnal. Th e sourc e clock for e ach of th e LED p i ns is a 7.8kHz (128^s 
p e r i od) clock g e n e rat e d from tho 1 ^s c l ock puls e from th e T i m e rs block. Tho LEDDutySei e ct 
rog i stors aro usod to create a s i gnal with the des i r e d waveform. Unpulsed operat i on of the LED pins 
can b e achi e ved by using CPU i O dir e ct contro l , or s e tting LEDDutyS e i e ct to 0. By d e fault th e LED 
pins are contro l led by tho LED control log i c. 

30 LSS I NTERFACE V I A GP I O 

In some SoPEC system configurations on e or more of tho LSS i nt e rfac e s may not b e us e d. Unus e d 
LSS i nterface p i ns can bo rousod as gonora l I O p i ns by configuring th e iOModoSoioct reg i st e rs. 
When a mode select roglstor for a part i cular GPIO pin i s set to 23,22,21,20 tho GPIO p i n i s 
conn e ct e d to LSS control l Oo 3 to 0 rospoct i vely. 

35 43t€ i SI I NTERFACE V I A GP I O 

I n Multi SoPEC mode tho SCB block ( i n part i cular the IS I sub block) requ i res direct access to and 
from th e GP I O pins. Contro l of tho I SI i nterface p i ns is d e t e rm i ned by the iOi^od e S e ioct reg i sters. 
When a mod e select reg i st e r for a part i cu l ar GPIO p i n i s set to 27,26,25,2^ tho GP I O p i n connected 
to tho ISI control bits 3 to 0 r e spect i ve l y. By d e fault th e GP I O pins 1 to 0 ar e d i r e ctly contro l l e d by 
40 tho IS I b l ock. 
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In s i ng l e SoPEC systoms tho p i ns can bo ro uood by tho GPIO. 
4^.6 CPU GPIO CONTROL 

The CPU can assume diroot contro l of any (or ai l ) of tho l O pins individual l y. On q por pin bas i s tho 
CPU can turn on dir e ct acc e ss to the p i n by conf i guring th e lOModoSeloot reg i ster to CPU direct 
5 mode. Once set the l O p i n assumes the direct i on specified by the CpulODirootion reg i ster. When in 
output mod e th e valu e i n register Cpi//OOu/ w i ll be d i rectly reflected to the output driver. When i n 
input mod e th e status of the input p i n can bo road by reading CpuiOln regist e r. Wh e n writing to tho 
CpulOOut register tho value being wr i tt e n is XORod w i th th e current va l ue in CpuiOOut. The CPU 
can a l so read th e status of th e 10 se l ect e d d e glitched i nputs by reading th e CpulOlnDoGlitch 
10 register. 

4dr7 Programma b le be cl i tgh i nc log i c 

Each l O p i n can b e filtered through a d e g li tch i ng logic c i rcuit, tho p i n that th e d e- g l itch i ng logic is 
conn e cted to is configured by the InputPlnSoloct registers. There are 10 do g l itching circu i ts, so a 
max i mum of 10 input p i n can bo de gl i tch e d at any t i m e . 

15 The d e- glitch circu i t can be configured to sample tho lO p i n for a predetermined t i mo before 

conc l ud i ng that a p i n is i n a part i cular state. The exact sampl i ng le ngth i s configurab le , but e ach d e 
glitch circu i t must use on e of two possib le configur e d va l ues (selected by DoGlitchSofoct), Tho 
samp li ng l e ngth is the same for both high and l ow stat e s. Th e DeGfitchCount is programm e d to th e 
numb e r of syst e m time units that a stat e must b e v alid f or befor e th e stat e i s pass e d on. Tho t i me 

20 un i ts are so i eotod by D e GlitchClkS e l and can b e on e of 1}is,100^s,10ms and pclk puls e s. 

For e xamp l e if DoGlitchCount is set to 10 and DoGlitchClkSol sot to 3, then the selocted input p i n 
must cons i stent l y r e tain its value for 10 system c l ock cycles (pclk) before tho input state w i ll be 
propagated from CpulOln to CpulOlnD e glitch. 
4^18 I nterrupt generation 

25 Any of the sel e ct e d i nput p i ns (s ele ct e d by InputPinSeloct) can g e n e rat e an int e rrupt from th e raw 
or deglitched vers i on of the input p i n. There are 10 possib l e i nterrupt sources from tho GPIO to the 
interrupt contro lle r, on e int e rrupt p e r i nput pin. Th e fntorruptSrcS e f e ct r e giQi e r d e t e rm i n e s wh e th e r 
th e raw input or the deglitch e d v e rs i on is us e d as tho interrupt source. 
The i nterrupt typo, masking and priority can b e programmed i n the i nterrupt contro l l e r. 

30 4^r9 Frequency analyser 

Th e fr e qu e ncy ana l yser measures the duration between successiv e positive edges on a selected 
input p i n (se l ected by InputPinSoiocf) and reports the l ast per i od m e asur e d {Fr e qAnaLaetP e riod) 
and a running av e rage p e r i od (Fr e qAnaAverag e ). 

The runn i ng average i s updated each t i mo a now pos i tive edge i s d e t e ct e d and i s oa l culatod by 
35 FreqAnaAv e rag e - ( FroqAnoAverago / 8 ) * 7 » Fr e qAnoLastPonod / 8. 

The analys e r can be used with any se l ected i nput pin (or i ts deg l itched form), but on l y one input at a 
timo can bo se l ected. Tho input is se l ected by th e FroqAnaPinS e iect (range of 0 to 9) and its 
d e gl i tched form can be s e l e ct e d by Fr e qAnaPinFormS e l e ct. 
13.10 BrushLess DC (BLDC) Motor Controllers 
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Th e GPiO conta i ns 2 brushiess DC (BLDC) motor control le rs. Each contro l lor consists of 3 hal l 
I nputs, a d i rection input, and six poss i blo outputs. Tho outputs oro dorivod from the i nput stato and 
a puls e width modu l at e d (PWM) input from th e St e pp e r Motor contro l ler, and is g i v e n by th e truth 
table i n Tab l o 83. 
5 Tab l e 83. Truth Table for BLDC Motor Contro l l e rs 



direction 


he 










q4 




q3 




0 


9 


Q 


4- 


0 


Q 


0 


4- 


PWM 


9 




9 


4- 


4- 


PWM 


Q 


Q 


4- 


0 


9 




9 


4- 


9 


PWM 


0 


9 


Q 


9 


4- 


Q 


^ 


4- 


9 


0 


0 


PWM 


9 


9 


4- 


9 


4- 


9 


9 


9 


4- 


PWM 


9 


9 


0 


Q 


4- 


0 


4- 


0 


4- 


0 


9 


PWM 


9 


9 


9 


9 


9 


9 


9 


9 


9 


9 


9 


9 


4- 


4- 


4- 


9 


9 


9 


9 


9 


9 










4- 


9 


9 


4- 


9 


9 


PWM 


9 


9 


4- 


4- 


9 


4- 


4- 


PWM 


9 


0 


9 


9 


4- 


1- 


9 


4^ 


9 


PWM 


9 


9 


4- 


9 


9 


4- 


4- 


4- 


9 


0 


9 


0 


4- 




0 


4- 


4 


0 


9 


0 


A- 


0 


0 




0 


4- 


4- 


9 


4- 


9 


X 


PWM 


9 


9 


9 


4- 


0 


9 


9 


9 


9 


9 


9 


0 


9 


4- 


4- 


4- 


4- 


9 


9 


9 


9 


9 


9 



All i nputs to a BLDC contro ll er must bo do glitch e d. Each control le r has i ts in puts hardw i red to d e- 
g l itch circuits. Contro l l e r 1 ha l l i nputs are d e g l itchod by circu i ts 2 to 0, and its direction input i s d e- 
10 g li tch e d by c i rcu i t 3. Contro lle r 2 i nputs arc do gl i tchod by c i rcu i ts 6 to 4 for hall i nputs and 7 for 
d i r e ction input. 

Each contro l l e r also requires a PWM input. Tho stopper motor contro ll or outputs aro roused, output 
0 is conn e cted to BLDC contro l l e r 1 , and output 1 to BLDC contro lle r 2. 

Th e control le rs hav e two mod e s of operation, interna l and external dir e ct i on contro l (configur e d by 
15 BLDCMod e ). If a control le r is i n ext e rna l dir e ct i on modo the d i rection i nput i s tak e n from a de - 
gl i tch e d c i rcu i t, if it is in i nt e rna l direction modo tho d i r e ct i on i nput i s configur e d by the 
BLDCDir e ction r e gist e r. 

Tho BLDC controll e r outputs are conn e ct e d to th e GPIO output pins by conf i guring th e 
lOModoS e ioGt rog i stor for oach pin. o.g S e tting th e mode r e g i st e r to 8 w i ll connect q1 Control l or 1 to 
20 dr i ve tho p i n. 

13.11 I mplementat i on 



PEA23US 



175 



13.11.1 — Dof i nitions of I /O 

Tabio 84. I/O dofin i t i on 



Port name 


Pin*? 








Description 


Clocks and Resets 




4- 


In 


System Clock 




1- 


l« 


System reset, synchronouG active low 


prGt_n 




tim_pulso[2:0] 


3 


In 






Timers block gonoratod timing pulsoo. 

0 — 1 fis pulse 

1 — 100 ^is pulse 

2 — 10 ms pulse 


CPU Intorface 


cpu_adr[8:2] 


S 




CPU address bus. Only 7 bits are required to 






decode the address space for this block 


Gpu_dataout[31 :0] 


32 


(ft 


bnared write data bus from the CPU 


gpio_cpu_data[31 :0] 


32 


Out 


Road data bus to tho CPU 








4- 


In 


Common read/not write signal from the CPU 


cpu_rwn 






4- 


In 


Block select from tho CPU. When cpu_gpio_Gel is 


cpu_gpio_sel 


high both cpu_adr and cpu_datQout are valid 






4- 


Out 


Ready signal to tho CPU. When gpio_cpu_rdy is 


gplo_Gpu_rdy 


high it indicates the last cycle of the access. For a 


write cycle this moans opujdQtQOut has boon 




registered by the GPIO block and for a read cycle 
this means the data on gpio_cpu_data is valid. 






4- 


Out 




gplo_cpu_bQrr 


Bus error signal to tho CPU indicating an invalid 

access. 


gpio_opu_dobug_valid 


4- 


Out 


Debug Data valid on gpio_cpu_data bus. Active high 


Gpu_aG0de[1 :0] 


2 


In 






CPU Access Codo signals. Those decode as 
follows: 

-00 — User program access 

■Q^ — Usor data access 

AQ — Supervisor program access 


4^ — Supervisor data access 


lO Pins 


gpio_o[31 :0] 


32 


Oi it 






General purpose lO output to lO driver 


gpioJ[31 :0] 


32 


In 


General purpose lO input from lO receiver 






gpio_e[31 :0] 


32 


Out 






General purpose lO output control. Active high 
driving 


GPIO to LSS 
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lss_gpio_dout[1 :0] 


2 


(n 


LSS bus data output 




Bit 0 LSS bus 0 
Bit1 LSS bus 1 


gpioJss_din[1 :0] 


2 


Out 


LSS bus data input 




Bit 0 LSS bus 0 
Bit 1 LSS bus 1 


lss_jgpio_e[1 :0] 


2 


tn 


LSS bus data output enable, active high 




BitO LSS bus 0 
B*W — LSS bus 1 


Iss gpio clkf1:0] 


2 


In 


LSS bus clock output 




Bit 0 - LSS bus 0 
Bit 1 LSS bus 1 


GPIO to ISI 








gpioJsLdin[1 :0] 


2 


Qiif 


Input data from lO receivers to ISL 


ioi gpio dout[1:0l 


2 


In 


Data output from ISI to lO drivers 






isi^pio_e[1 :0] 


2 


In 


GPIO ISI pins output enable (active high) from ISI 




intorfaco 




4- 


(n 


Port Power onablo from tho USB host core, active 


usbh_gpio_powor_on 


hinh 


gpio_usbh_over_ourront 




Out 


Over current detect to the USB host core, active 






Miooollanoous 


gpio_iou_irq[9:0] 




©trt 


GPIO pin interrupts 






gpio_cpr_wakoup 










SoPEC wakeup to the CPR block active high. 


Debug 


debug_data_out[31 :0] 


32 




Output debug data to bo muxod on to the GPIO pins 








S2 


In 




debug_ontrl[31 :0] 


Control signal for oach GPIO bound debug data lino 


indicating whether or not the debug data should bo 
soloctod by tho pin mux 



13.11.2 — Configurat i on registers 

The conf i guration registers in th e GPIO ar e programm e d via th e CPU i nt e rface. Refer to s e ction 
11.^.3 on page 1 for a descr i pt i on of the protoco l and timing diagrams for reading and wr i t i ng 
r e gist e rs i n th e GPIO. Not e that si nce addr e ss e s i n SoPEC ar e byt e al i gn e d and the CPU on l y 
supports 32 b i t regist e r r e ads and writes, th e low e r 2 b i ts of th e CPU addr e ss bus are not r e qu i r e d 
to docode the address space for tho GPIO. When reading a register that is l oss than 32 b i ts w i d e 
z e ros shou l d b e r e turned on th e upper unused bit(s) of gpio^cpu^data. Table 85 li sts the 
configurat i on reg i sters in th e GP I O block 
Table 85. GP I O Register Defin i tion 
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0x000 0x07C 



I OMod e S ele Gt[ 



Tablo — *Gf 



Sp e c i fi e s the mod e of operation for e ach 
GP I O p i n. Ono 5 bit bus per pin. 



d e fau l t valu e s 



Possib l e assignment va l u e s and corr e spond 



contro l l e r outputs ar e as follows 



Valu e Contro l l e d by 



34e-0 Output, LED controllor A to 1 



7 to 4 Output St e pp e r Motor contro l 4 1 



3 to 8 Output BLDC 1 Motor control 6 1 



9 to 1 4 — Output BLDC 2 Motor control 6 1 



23 to 20 LSS contro l 4 1 



27 to 24 I SI control 4 1 



2^ 



CPU Dir e ct Contro l 



29- 



30- 



USB pow e r e nabl e output 

i nput Mod e 



0x080 OxA^ 



l nputP i nSoloct[ 



Q^QQ 



Specifi e s which pins shou l d b e s e l e ct e d as 



Inputs. Used to soloct tho p i n sourco to tho 



D e G l itch C i rcu i ts 



CPU I Q Control 



QxQBO 



Cpu l OUs e rMod|32 
oMask 



l OxOOOO 
OQQO 



User Mode Acc e ss Mask to CPU GPIO 



contro l r e gist e r. Whon 1 usor accoss i s 
e nab le d. On e bit por gp i o p i n. Enab le s 



aocoQS to Cpu/ODiroction, CpuiOOut and 
CpulOln i n us e r mod e . 



9xOB4 



Cpu l OSup e rMo 



32 



doMask 



lOxFFFF 



Sup e rv i sor Mode Access Mask to CPU 



GPIO control reg i st e r. Wh e n 1 sup e rv i sor 
acc e ss is enab le d. On e b i t p e r gp i o p i n. 



Enabl e s access to CpulODir e ction, 



CpuiOOut and CpulOln i n supervisor modo. 



OxOBS 



CpulOD i r e ct i on 



32 



0x0000 



I nd i cat e s the d i r e ction of e ach lO p i n, whon 



contro ll ed by tho CPU 
0 — I nd i cat e s I nput Modo 



1 — I nd i cat e s Output Mod e 



OxOBG 



CpuiOOut 



32 0x0009 



Value us e d to driv e output p i n i n CPU d i r e ct 



^000 



mod e . 



b i tsSI :Q - Valu e to dr i v e on output GPIO 



Wh e n writt e n to the r e g i st e r assumes th e 
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new value XORed with the current value. 












Value received on each input pin rogardloss 




CpulOln 


External — piR 


of mode. Road Only register. 


9xOG4 




40 


QxOQO 






CpuDeGlitohUs 
orModeMask 










CpulO/nDeglitoh control register. When 1 
user access is enabled otherwise bit reads 




0x0C8 




40 


OxOOQ 






CpulOlnDeglito 
h 








The input pins are selected by the 
InputPinSelect register- 
Note that after reset this register will reflect 


the external pin values 256 pclk cycles after 




they have stabilized. Read Only register. 


Doglitch control 


0x0D0-0x0D4 




2xS 


QxFF 






DoGlitohCount[ 




Deglitch circuit sample count in 
DeG/itchCikSrc selected units. 


0x0D8 OxODC 


DeGlitchClkSrc 


2x2 


9x3 






I ' '"J 




Specifies the unit use of the GPIO deglitch 

circuits: 

0 — 1 ^is pulso 

A — 100 |is pulse 

2 — 10 mo puloo 

3 pcfk 


QxOEO 


DeGlitchSelect 




oxoeo 


Spocifios which doglitch count 








{DoGlitchCount) and unit select 


{DeGlitchClkSrc) should be usod with each 
do glitch circuit 


0 Specifies DeG/ltchCount[0] and 

DoGlitchClkSrG[0] 

A — Specifies DeGlitchCount[1] and 


DoGlitchClkSrcll] 


Motor Control 


9x9E4 


MotorCtrlUser 




rwn 


User Mode Access enable to Motor control 




ModeEnablo 






configuration registers. When 1 user access 
is onabled. 

Enables user access to 

Motor MastorClkPoriod, Motor MQctorClkSrc, 


MotorDutySelect, MotorPhaseSeloGt, 


MotorMQGtorClockErjabie, Motor- 


MQGtorCikSelect, BLDCMode and 
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BLDCDirection registers 


0x0E8 OxOEC 


MotorMastorCI 






Spooifios the motor controllor master clock 










periods in MotorMaeterCikSro selected units 


kPoriod[1:0] 




OxOFO 


MotorMasterCI 


2 


QyQ 








Specifios tho unit use by the motor controllor 

master clock generator: 

0 1 ^is pulso 

A — 100 \xQ pulse 

2 — 10 ms pulse 

3 - pcfk 


OxOF<1 0x100 


MotorCtrlConfig 




0x0000 


Snecilfip^ thp tfaQsition onint^-in U^^-^U^nk 








0000 


period for each motor control pin. One 




register per pin 


bits 15i0 MotorCtrlLow, high to low 

transition point 

bits 31 :16 - MotorCtrlHigh, low to high 


transition point 


0k4«4 


MotorMasterCI 


4 




Specifies which motor master clock should 




kSelect 






be used as a pin generator source 

0 — Clock dorivod from MotorMsGtorClockPo 


fiedfO} 

1 — Clock dorivod from MotorMQGterClookPo 


riod[1] 


Ox4«S 


MotorMasterCI 


2 




Enable the motor master clock counter. 




ockEnablo 


Whon 1 count is enabled 




Bit-0 — Enable motor master clock 0 
BiM — Enable motor master clock 1 




BLDC Motor Controllors 




BLDCModo 


2 










Specifies the Mode of operation of tho 
BLDC Controllor. One bit per Controller. 


0 External direction control 

1 Internal direction control 




BLDCDirection 


2 




Specifies the direction input of the BLDC 






controller. Only used when BLDC controller 


is an internal direction control modo. Ono bit 


per controller. 


LED control 


0x444 


LEDCtrlUsorMo 


4 


0x0 


User Mode Access enable to LED control 




doEnable 








configuration rogistoro. Whon 1 user access 
is enabled. 
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Ono bit por LEDDutySefect soloot rogistor. 


0x118 0x1 2d 


LEDDutySeleot 


4x3 


0x0 






ro.m 


Specifies the duty cycio for oach LED 


control output, Soo Figure 5*1 for oncoding 
details. The LEDDutySelect[3:0] registers 




determine the duty cycle of the LED 

controller outputs 


Froquonoy Analyser 






+ 


0x0 






odoEnabio 


analyser configuration registors. Whon 1 




1 lopr ^pfNficc- jo pnihlpH Onntrolt '^opf^fi to 


FroqAnaPinFormSoloct, 
FfoqAnoLoGtP&nodj Fr&QAnQAv&rogo and 


FreqAnQCountlnc. 


0x4^ 


FroqAnaPinSol 


4 


0x00 








KJ\Jt\^\Jl.iJ VVI 1 iJ\JI^WlVlU II l|<^Ut'OI IVfUIVI IJ\^ UOWVI 
lUI U lU 1 1 Uli|U wl iUJf UllUIJfOUUa 


0x138 




4 


0x0 






1 1 11 lUI II II Wl 

mSelect 


UVil^Ulk^ II U lU 1 1 UV>I lU^ Ul rCIIJfO^^I iJI lUUlU U*JW« 




the raw input or the degl itched form. 
0 Deglitched form of input pin 
A — Raw form of input pin 


0x4^ 


FreqAnaLastPo 


4§ 


0x0000 


Frequency Analyser last period of solootod 










input pin. 


0x446 




4€ 


0x0000 






FreqAnaAverag 
e 






e^fsif^f^ff^fi inniit nin 


0x444 


FroqAnaCountI 


20 


0x0000 0 






Re 






Frequency Analyser counter incromont 
amount. For oach clock cycle no edge Is 


detected on the selected input oln the 


accumulator is incremented by this amount. 




0x448 


FroqAnaCount 


32 


0x6000 


Frequency Analyser running counter 






-0000 


(Working register) 


Miooollonoouc 










0x4^ 


InterruptSrcSel 


40 


OxSFF 


Interrupt source select.1 bit per selected 


input. Dotorminos whether the interrupt 
source is direct form the selected Input pin 




or the deglitched version. Input pins are 


selected by the DeGlitchPinSoloGt register. 

0 Selected input direct 

1 — Deglitched celoctod input 




DobugSoloot[8: 


? 


nvoo 


Debug addross select. Indicates the address 




2} 


of the register to report on the 
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gpio_cpu__dQta buG whon it is not otherwise 


being used. 


0x158 0x1 5C 


MotorMastorCo 






Motor master clock oountor values. 




unt[1 :0] 






Bus 0 — Master clock count 0 




Bus 1 — Master clock count 1 

Read Only registers 


0x460 


WakoUplnputM 




oxooe 












Indicates which deglitchod inputs should be 


oonsidorod to gonorate the CPR wakeup. 
Aotivo high 


0x164 


WakeUpLevel 


4- 


0 


Defines the level to detect on tho masked 






GPIO inputs to generate a wakoup to tho 


0 - Level 0 

1 Lovol 1 


0x468 


USBOvorCurro 


4 


0x00 






ntPinSeloot 


Selects which doglitched input should be 
used for the USB over current detect. 







13. 11.2.1 Suporv'iGor and us e r mod e acc e ss 

Th e conf i gurat i on registers b l ock e xam i n e s th e CPU acc e ss typ e {cpu_acodo signal) and 
d e term i nes if th e access is allow e d to that particular register, based on configured user access 
registers. I f an acc e ss is not allowed th e GP I O w ill i ssue a bus error by ass e rting the gpio_cpu_borr 



5 s i gna l . 

All sup e rv i sor and us e r program mod e acc e ss e s w ill resu l t in a bus e rror. 

Acc e ss to th e CpulODir e ction, CpuiOOut and CpulOln is f i ltered by th e CpulOUserModeMask and 
CpufOSup e rMod e Mask r e g i st e rs. Each b i t masks access to tho conrospond i ng bits in th e CpulO* 
reg i sters for each mode, with Cpu/OUsorMocfoMas/c filtering user data mode access and 
10 CpulOSuperModeMask f i ltering supervisor data mod e acc e ss. 

Th e add i t i on of tho CpulOSup e rMod e Mask r e gist e r h e lps pr e vent potentia l conflicts between user 
and supervisor cod e r e ad mod i fy wr i te operat i ons. For examp le a confl i ct cou l d e xist i f the user 
cod e is interrupt e d during a r e ad modify write op e rat i on by a sup e rv i sor I SR which a l so modifies tho 
CpulO* r e g i sters. 

15 An att e mpt to wr i t e to a d i sabled b i t in us e r or sup e rvisor mod e w i l l b e i gnored, and an attempt to 
r e ad a d i sabl e d b i t r e turns z e ro. I f there ar e no us e r mod e e nabl e d bits th e n access i s not a l lowed 
i n user mode and a bus error w i l l result. Sim il arly for supervisor mode. 

Whon wr i t i ng to tho CpuiOOut reg i ster, tho value be i ng wr i tten is XORed with tho current va l u e i n 
th e CpuiOOut r e g i st e r, and th e resu l t i s reflected on th e GP I O pins. 
20 Tho pseudocod e for d e t e rmin i ng access to tho CpuiOOut register is shown below. S i m i lar code 
cou l d b e shown for th e CpulODir e ction and CpulOln r e g i st e rs. Not e that when wr i ting to 
CpulODir e ction data i s d e posited d i rect l y and not XORed with tho ex i st i ng data (as i n the CpuiOOut 
cas e ). 
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10 



15 



20 



25 



30 



if (apu_aGodQ ° - SUPERVICOR_DATA_MODE) then 
// oupcrvioor mode 



-ar# — (CpuIOSupcrModcMaok [31 1 0] 



-0— ) — then 



// acGGoo io denied, — and buo error 
gpio_cpu_berr ° 1 



- cloif — (cpu__rwn °= 1) — then 

// read mode — (no filtering needed) 

gpio_Gpu_data [3 1 ; 0 ] — « CpuIQOut [31 ; 0] 

eloe 



// write mode, filtered by maok 
maok [31:0] =- 



( cpu^dataout [ 3 1 g 0 ] 



CpuIOSuperModeMaok [31 s 0] ) 

CpuIOOut [31 i 0] = ( cpu_da t aou t [ 3 1 ! 0 ] 

//bitwioe XOR operator 

cloif (epu acode UCER_DATA_MODB ) then 

// uaer datamodc 

if (CpuIOUacrModcMaak [31:0] 



maok [31 = 0] h 



0 ) then 



// acceoo io denied, — and buo error 
gpio_Gpu_berr ° 1 



cloif (cpu^rwn 1) — then 
// read mode, — filtered by maok 



gp io_Gpu_dat a « 

CpuIQUoerModcMaok [31 g 0] ) 
eloe 

// write mode, filtered by maok 

maok [31 ! 0] =- 



-f- 



CpuIOOut [31 ; 0] 



(cpu__dataout [31:0] 



CpuIOUoerModeMaok [31:0] ) 

CpuIOOut [31 i O] = ( opu_dataout [ 3 1 ; 0 ] 

//bitwioe XOR operator 
eloe 

// acceoo io denied, buo error 

gpio_cpu_bcrr ° 1 



maok [31 i O] h 



Tabl e 86 d e tai l s the access mod e s al l owod for r e gisters i n tho GPIO block. In sup e rvisor mod e all 
35 rogistors oro acoess i b l o. I n user modo forbidden accossos w i ll result i n a bus e rror {gpio_cpu_borr 
ass e rt e d). 

Tabl e 86. GP I O sup e rvisor and us e r access mod e s 



R e gist e r Addr e ss 



Registers 



AcGoss Permitt e d 



0x000 0x07C 



I OMod e Seloct[3i:0] 



Suporv i sor data mod e on l y 
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0x080 - 0x9 4 



l nputP i nS e leGt[9:0] 



Superv i sor data mod e on l y 



CPU l O Contro l 



OxOBO 



Cpu l OUs e rMod e Mask 



Sup e rvisor data modo only 



QxQB4 



Cpu l OSup e rMod e Mask 



Sup e rvisor data mod e only 



Qx0B8 



Cpu l ODIreot i on 



Cpu l OUs e rMod e Mask and 



Cpu l OSuporModoMask f i ltorod 



OxOBC 



CpulOOut 



CpuiOUserModoMask and 



Cpu l OSuperModoMask f il t e r e d 



OxOGO 



Cpu l O l n 



CpulOUserModeMask and 
Cpu l OSuperModeMask f i lt e r e d 



OxOCI 



CpuDeG li tchUserMod e Mask 



Supervisor data mod e only 



QxOC8 



Cpu l O l nDoglitch 



CpuD e G li tchUserMod e Mask filtered. 



Unr e str i ct e d Supervisor data mode 



acc e ss 



Deg li tch contro l 



OxODO 0x0D 4 



D e GlitohCount[1 :0] 



Superv i sor data mod e on l y 



OxOD8 OxODC 



DoG l itchClkSrG[1:0] 



Sup e rvisor data mod e only 



OxOEO 



DeGlitchSo l oct 



Superv i sor data mod e only 



Motor Contro l 



9xOE4 



MotorCtr l UsorModoEnab l e Supervisor data mode only 



0x0E8 OxOEC 



MotorMastorClkPor i od[1 :0] 



MotorCtr l UsorModoEnab l e enabled. 



MotorMast e rC l kSrc 



MotorCtr l Us e rMod e Enab ie e nab le d. 



OxOFA 0x100 



MotorCtrlConf i g[3:0] 



MotorCtr l UsorModoEnab l e enabled 



0x4«4 



MotorMast e rClkSoloct 



MotorCtr l UsorModoEnab le e nab le d 



0x4^ 



MotorMast e rClookEnable MotorCtrlUserModeEnab ie e nab le d 



BLDC Motor Controll e rs 



i QxIOC 



BLDCModo 



MotorCtr l Us e rMod e Enab i e Enabled 



0x440 



BLDCDirect i on 



MotorCtr l UserModoEnab l o Enabled 



LED control 



LEDCtr l Us e rMod e Enab l o 



Sup e rv i sor data mod e only 



0x118 0x12 4 



LEDDutySe l ect[3:0] 



LEDCtr l UserModoEnab l o[3:0] 
enab le d 



Fr e qu e ncy Ana l ys e r 



0x4^0 



Fr e qAnaUserModeEnablo 



Sup e rvisor data mod e only 



0x134 



Fr e qAnaP i nSo le ot 



FreqAnaUs e rMod e Enabl e e nab le d 



9x4d8 



Fr e qAnaPinFormSoloot 



FreqAnaUs e rMod e Enab le e nabled 



0 x1 3C 



FroqAnoLostPer i od 



FreqAnaUs e rMod e Enab le e nab le d 



0x440 



Fr e qAnaAv o rag o 



Fr e qAnaUs e rMod e Enabl e e nabl e d 
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0x444 



FroqAnaCountlno 



FreqAnaUs e rModoEnab l o onabl e d 



0x448 



FroqAnaCount 



FroqAnaUserModoEnablo onab l od 



M i sc ell an e ous 



0x4^ 



I nt e rruptSrcSoloct 



Sup e rvisor data mod e only 



0x4€4 



DebugSe l eGt[8:2] 



Sup e rv i sor data mode on l y 



0x158 0x1 5C 



MotorMast e rCount[1 :0] Sup e rv i sor data mode only 



Ox4€e 



Wak e UplnputMask 



Sup e rvisor data modo on l y 



0x4€4 



Wak e UpL e ve l 



Sup e rv i sor data modo only 



Ox4€S 



lUSBOverCurr e ntPinSe l oct 



Superv i sor data mod e on l y 



13.11.3 GPIQ partition 
13.11. 4 — lO control 

Th e lO control b l ock connects the lO pin driv e rs to int e rnal s i gna lli ng bas e d on conf i gur e d s e tup 
r e g i sters and d e bug contro l s i gnals. 

/ / Output Control 

for (i a O; — i<32 — ; — i l l) — f- 

— (dGbug_Gntrl [i] — == 1) — then // debug mode 

gpio_G -Nrj — ° l;gpio_o[i] — ■ dcbug_data__out [i] 



// LED 



// LED 



cloc // normal mode 
— caoc io_modc_oclcGt [i] — ie 

0 — J — gpio__G ^ — — ;gpio_o 4^ — = lod_ctrl [0] 

output 1 

i — : — gpio_c {4r^ — *i — ; gpio_Q 43d — =lcd_ctrl [1] 

output 2 

3 — ! gpio_G [i] — =»i — ;gpio_o -t^ — g lGd_Gtrl [2] ^ — tiBB 

output 3 

3 — . gpio_G[i] — =»i — ; gpio_o -t^ — = lGd_Gtrl [3] /-/^ — l^SB 

output 4 

4 — i — gpio__G t4=i — «»i — ; gpio_o -t^ — ■i motor_Gtrl [0] // Stopper 

Motor Control 1 

5 — : — gpio_c [-3d — « 1 ;gpio_o[i3 — gmotor_ctrl [1] / / Stepper 

Motor Control 2 

6 — : — gpio_c fad — »i — ; gpio_Q -far3 — gmotor_ctrl [2] // Stepper 

Motor Control 3 

7 — ! — gpio_c — »i — , gpio_o 

Motor Control 4 

8 — ! — gpio_e [i] — ^ — ;gpio_o H 

Motor Control 1, output 1 

9 — : — gpio_c [i] — =^i — ;gpio_o[i] — ° bldG_ctrl [0] [1] // BLDC 

Motor Control 1 , output 2 



— =motor_Gtrl [3] // Stepper 

— -blde^Gtrl [0] [0] // BLDC 
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3:9-! — gpio_G [i] — — ;gpio_o [i] — n , bldc_Gtrl [0] [2] // BLDC 

Motor Control 1 , output 3 

lii — gpio_c[i] — »i — ;gpio_o [i] — -^i bldc^ctrl [0] [3] // BLDC 

Motor Control 1, output 4 

5 IS-t — gpio_c[i] al — ;gpio_o [i] — = bldo_ctrl [0] [4] // BLDC 

Motor Control 1, output 5 

3r3-: — gpio_c [i] — =^i — ;gpio_o [i] — «bldG_ctrl [0] [5] // BLDC 

Motor Control 1 , output 6 

14-: — gpio_c [i] — =»i — ;gpio_o [i] — = bldc_ctrl [1] [0] — BLDC 

1 0 Motor Control 2 , output 1 

3r&-: — gpio_c [i] — — ;gpio_o [i] — -bldc_Gtrl [1] [1] // BLDC 

Motor Control 2, output 2 

3r€-s — gpio_G [i] — — ;gpio_o [i] — « ibldG_Gtrl [1] [2] // BLDC 

Motor Control 2 , output 3 

15 i^?-! — gpio_G [i] — =^ — ;gpio_o[i] — = bldG_Gtrl [1] [3] // BLDC 

Motor Control 2 , output 4 

3r«-: — gpio_G [i] — =^ — ;gpio_o [i] — « bldG_Gtrl [1] [4] // BLDC 

Motor Control 2 , output 5 

-^^9-: — gpio_G [i] — — ;gpio_o [i] — «bldc_ctrl [1] [5] // BLDC 

20 Motor Control 2, output 6 

— gpio_G yti — = 1 ;gpio_o[i] — " loo_gpio_Glk [0] // LSS C13c 

S^r^ — gpio_G t^ri — al ;gpio_o[i] — a lao_gpio_Glk [1] // LSS C13c 

25 2^. gpio_c [i] ^loo_g p io_G [0] ; gpio_o +i4- 

= loo_gpio_dout [0] ; // LGS Data 0 

gpio_loa_din [0] — = gpio^i [i] 

23 i gpio_G[i3 \ ° loo_gpio_G [1] ; gpio_o -Fa4- 

« loa_gpio_dout [1] ; // LSS Data 1 

30 gpio_loo_din [1] — « gpio_i [i] 

24 : gpio_G[i] " ioi_gpio_G [0] ; gpio_o -N4- 

« ioi_gpio_dout [0] ; // ISI Control 1 

gpio_ioi_din [0] — ■ gpio_i [i] 

2-5-: gpio_c -E^ = iai _gpio_G [1] , 9p l o _ o [1] 

35 « iai_gpio_dout [1] ; // ICI Control 2 

gpio_ioi_din [1] — = gpio_i [i] 

&€-5 gpio_G tjiai_gpio_o [2] , gpio^o [i] 

^ioi_gpio_dout [2] ; // ISI Control 3 

gpio_ioi_din [2] — lj gpio^i [i] 

40 27 ; gpio_G[i3 ^iai_gpio_G [3] ;gpio_o [i] 

» ioi_gpio_dout [3] ; // ISI Control 4 
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gpio_ioi_din [3] — ° gpio_i [i] 



20. gpio_c[i] — «Gpu_io_dir [i] ; gpio_o -^ — =Gpu_io_out [i] ; 

// CPU Direct 

SS^. gpio_c *i ; gpio_o hH = uobh_gpio_j)owcr_cn 

5 // USB hoot power cnablG 

3-0-: gpio_e [ -ad ;gpio_o[i] ^ 

/ / Input only mode 
end caoc 

// all gpio are alwaya readable by the CPU 

1 0 Gpu__io_in [i] — ° gpio^i [i] ; 

The input soloot i on pGOudocodo, for dotormrn i ng wh i ch pin oonnocts to which d e 
g li tch circu i t. 

for( ± ^ 0 — ; i < 10 — ; — i m ) — f 

1 5 pin_num = input_pin_o elect [i] 

deglitch_input [i] — = gpio_i [pin_num] 

Th e gpio_uebh_qvor_curront output to tho USB coro is dr i ven by a soloot o d 
d e glitch e d input (configured by tho USBOvorCurr e ntPinSolect reg i ster). 

20 

index « USBOverCurrentPinSeleGt 

€f pio_uobh_over_current = cpu_io_in_degl itch [index] 

13.11.5 — Wakoup generator 

The wa l <oup generator compares the dogi i tchod inputs with th e configur e d mask 
25 (WakoUplnputMask) and l ovo l (WakoUpLevoi), and dotorminos whothor to g e n e rat e a wak e up to 
tho CPR b l ock. 

#e3e — (i gO;i<10; — i M ) — f 

i€ — (wakeup_level ■ 0) — then — // level 0 active 

30 walceup a walccup GR wa3ceup_input maok [ i ] ftNB 5JG¥ 

cpu_io_in_deglitch [i] 

— eloe // level 1 active 

walceup = wakeup OR wakeup_input_maa3c [i] MTO 

cpu_io_in_degliteh [i] 
35 — ]- 

// aooign the output 
g pio__cpr_wa3ceup ■= » walceup 

13.11.6 — LED puls e gonorator 
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Th e pu l s e gonorator l og i c cons i sts of a 7 - b i t countor that i s i ncromont e d on a pu l s e from tho 
t i mers b l ock (tim _pulGo[OJ). The LED control signa l i s generated by compar i ng th e count valu e with 
th e conf i gur e d duty cyc i o for tho LED {iod_duty_6ol), 
Tho log i c I s g i ven by: 

•§e3f — (i ^ O i<4 — ; i I I ) — { — // for each LED pin 

// period divided into 8 ocgmcnfe -& 

pcriod_div 8 = Gnt[6 i 4]; 

ar^ — (pcriod_div8 — < lGd__duty_oel [i] ) — then 

lcd_ctrl [i] = 1 

eloG 

led_Gtrl [i] ° 0 

// update the counter every luo puloo 
4r€ — (tiin_j)ulae [0] — 1) — then 

eat — M- 

13.11.7 — Stepper Motor control 

Tho motor oontroK e r consists of 2 count e rs, and 1 phase g e n e rator logic b l ocks, on e per motor 
contro l p i n. Th e count e rs decr e m e nt each t i mo a tim i ng pu l so {cnt_on) i s roco i vod. Tho counters 
start at th e configurod c l ock per i od valuo {motor_mas_cfk jDoriod) and docromont to zoro. if tho 
counters are enabled (via motor_mQG_cik_onable), th e count e rs w i ll automat i ca ll y restart at the 
configur e d clock period va l uo, othorw i so thoy will wa i t until tho oountors ore ro onablod. 

Tho t i ming pu l so per i od i s one of pcik, 1^s, lOOfis, 1ms d e pend i ng on the 

motor_mQe_cik_e e i si gnal. Th e count e rs ar e used to dorivo tho phase and duty 

cyc le of e ach motor control pin. 

// deerement logic 
— (Gnt_cn == — — then 

1# — ( (maa_cnt — == 0 ) — AND — (motor_maa_clk_cnable =~ 1) ) — then 

mao^cnt = motor_mao_clk_jpcriod [15 ; 0] 

elaif — ( (maa_cnt °= 0 ) — — (motor_mao_clk_enQblc == 0) ) — then 

maa^ent « 0 

eloe 

mao__cnt 

eloe // hold the value 

— mao_cnt ° mao_cnt 

Th e phas e gen e rator b l ock generat e s th e motor control l ogic basod on tho soiocted c l ock gonorator 
(motor_ma6_c/k_G e f) th e motor contro l h i gh trans i t i on po i nt (curr_motor_ctri_high) and th e motor 
contro l low trans i t i on po i nt (curr_motor_ctri_low). 

Tho phase gonorator ma i ntains curr e nt cop ie s of the motor_ctrl_config conf i gurat i on value 
(motor_ctri__config[31:16] becom e s curr_motor_ctrl_h§gh and motor_ctrl_config[15:0] becomes * 
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curr_motor_ctrl_low). It updat e s th e s e valu e s to th e current reg i st e r values whon i t is saf e to do so 
without causing a g l itch on th e output motor p i n. 

Note that whon roprogromming tho motorjGtrljoonfig rogistor to reorder tho soquonco of tho 
trans i t i on points ( e .g changing from l ow po i nt l ess than h i gh point to l ow po i nt groator than high 
5 po i nt and vice versa) car e must takon to avo i d i ntroducing g l itch i ng on the output p i n. 
Thoro aro A i nstancos ono per motor control pin. 
The l ogic is giv e n by: 

// aclcct the input counter to uoc 
— (tnQtor_mao_cl3c_ocl 1) — then 

10 count — = mao_cnt[l] 

cloc 

count — a mao_Gnt[03 

// Generate the phaoc and duty cycle 
i€ — ( count ■ cur r^mo t or_c t r ow ) — then 
1 5 — motor_ctrl = 0 

claif — (count == curr_motor_ctrl_high) — then 
motor__ctrl = — i 

ClOG 

— motor_ctrl « motor_ctrl // remain the aame 
20 // update the current rogistcra at period boundary 

if — (count == 0) — then 

curr_motor_ctrl_high — « — motor_ctrl_conf ig [31 ; 1(5] // 

update to nfcw high value 

curr_motor_ctrl_low « — motoric trl__config [15 ; 03 // 

25 update to new high value 



13.11.8 — I nput d e g l itch 

Th e i nput d e g l itoh l ogic r e j e ct s i nput states of duration less than the configur e d numb e r of t i me units 
{doglitch_cnt), i nput states of gr e ater duration ar e rofloctod on tho output cpu_io_in_doglitch. Th e 
30 t i m e units used (e i ther pc//c, 1 ^is, lOO^is, 1ms) by th e d e g l itch circuit is s el ect e d by th e 
doglftch_clk_erc bus. 

Thoro aro 2 poss i ble s e ts of d e glitoh_cnt and d e gi/tch_clk_Grc that can be usod to deg l itch tho i nput 
pins. Th e values us e d ar e se le ct e d by the degiitch_e e ! signa l . 

There are 10 d e glitch c i rcu i ts i n the GPIO. Any GP I O p i n can be conn e cted to a deg li tch circu i t 
35 P i ns are s e l e ct e d for d e glitching by the InputPinS e l e ct r e gist e rs. 

Each s e l e ct e d input can b e us e d to g e n e rat e an i nt e rrupt. Tho i nterrupt can bo gonoratod from th e 

raw i nput signa l (doglitchjnput) or a d e gl i tchod vers i on of th e i nput (GpuJoJnjdoglitGh). Th e 

i nterrupt source i s so l octed by th e int e rruptjSjrojGoloct s i gna l . 

Th e count e r l ogic i s giv e n by 
40 if — (deglitch_input — deglitGh_input__dclay) — then 
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eafe a dcglitGh_Gnt 

output_Gn ° 0 

Qloif — (cnt °« 0 ) — then 

eat o cnt 

— output_Gn ° 1 

cloif — (Gnt_Gn == 1) then 

efit 

output^cn B — 0- 

13.11.9 — Froquonoy Analyser 

The frequ e ncy ana l ys e r block monitors a s e l e ct e d d e g li tchod i nput (cpujojnjdi e glitoh) or a d i rect 
s ele ct e d i nput {d e glitchjnput) and d e t e cts pos i t i v e e dg e s. Th e s ele ct e d i nput i s conf i gur e d by 
FreqAnaPinS e l e ot and Fr e qAnaPinFormSol regist e rs. B e twoon succ e ss i v e positive edgos detoctod 
on tho input i t incr e m e nts a counter {FroqAnaCount) by a programm e d amount (FreqAnaCountino) 
on oach clock cycio. Wh e n a pos i tiv e e dge Is detect e d tho FroqAnaLactPoriod rog \ oior Is updated 
with th e top 16 bits of th e oountor and the counter is rosot. The fr e qu e ncy analys e r also ma i ntains a 
running avorago of th e Fr e qAnaLaetPenod r e gist e r. Each time a positiv e e dg e is d e t e ct e d on the 
i nput th e FroqAnaAverag o r e g i st e r i s updat e d with th e n e w ca l cu l ated FroqAnaLaetP e riod. Th e 
av e rage is calcu l ated as 7/8 tho current va l ue p l us 1/8 of the new valuo. Tho FroqAn a L a st P e riod, 
FreqAnaCount and FroqAnaAvorago regist e rs can b e writt e n to by tho CPU. 
Tho pseudocode Is g i ven by 

if — ( (pin == — 1) AND pin_dGlay ==0 — ) ) then // pooitivc cdgo 

dGtOGtod 

f rQq_ana_laatpGriod [15 ; 0] — ■ f r cq_ana_count [ 3 1 ; 1 6 ] 

f rcq_ana_avGragQ [15 ; 0] m f roq_ana_avQragc [15 ; 0] 

f rGq_ana_avGragG [15 ; 3] 



f rcq_anQ_lQotpQriod [15 ; 3] 

f rGqL_ana_GOunt [15 g 0] »— 0^ 

ClOG 

f roq_ana_count [31 : 0] = f rGq_ana_GOunt [31 ; 0] h 

f roq_ana_count_inQ [19 : 0] 

// implement tho configuration rogiotor write 
4^ — (wr_laot_cn °° 1) — then 

f rcq_QnQ_laotpcriod « wr^data 

eloif — (wr_avcragc_cn l ) — then 

f roq_ana_averagc « wr_data 

Gloif — (wr_f req_Gount_Gn °° 1) — then 
f rccL_ana_Gount = wr_data 

1 3.1 1 .1 0 BLDC I VIotor Control l er 
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Tho BLDC controlior log i c is id e ntioal for both instanc e s, only th e input connoot i ons aro d i fferont. 
Th e l ogic imp le m e nts tho truth tabl e shown I n Tablo . Tho s i x q outputs ar e comblnat l onal l y bas e d 
on tho diroction, ha, hb, he and pwm i nputs. Tho d i rection i nput has 2 poss i b l e sourcos solootod by 
tho modo, tho pseudocod e i s as fo ll ows 
5 // dQtormiriQ if in internal or external diroction itiodG 

4r€ — (mode 1) — then // internal mode 

direction « int_direGtion 

cloc // external mode 

direction = cxt_dircction 

10 1 A interrupt Controlior Un i t (ICU) 

The i nt e rrupt controll e r accepts up to N i nput interrupt sources, d e term i n e s th e ir pr i ority, arb i trates 
based on tho highest pr i ority and gonoratos an i nterrupt request to tho CPU. Tho ICU comp l ies with 
th e i nt e rrupt acknowl e dg e protocol of th e CPU. Onc e th e CPU acc e pts an i nt e rrupt ( i . e . proc e ss i ng 
of i ts sorvico routin e b e g i ns) the int e rrupt controlior wi ll assert tho noxt arbitrat e d int e rrupt i f on e is 
15 ponding. 

Each int e rrupt sourc e has a fix e d vector number N, and an associat e d configurat i on reg i ster, 
lntR e g[N]. Th e format of th e lntR e g[N] r e gist e r i s shown i n Tab l o 87 below. 
Tabl e 87. l ntR e g[N] r e gist e r format 



20 



25 



Poerity 



3^ 



§44 



M a sK 



R e s e rv e d 



D e scr i pt i on 



Interrupt pr i or i ty 



D e t e rmin e s the tr i gger i ng cond i t i ons for th e int e rrupt 
00 - Pos i t i ve e dg e 



4^ — N e gat i v e e dg e 
04 — Pos i tive leve l 



AA — N e gat i v e l e v e l 



Mask bit. 



1 — I nterrupts from this sourc e aro enabled, 
0 — I nterrupts from this source aro disab l ed. 



Not e that th e r e may bo additiona l masks i n operat i on at 



th e sourc e of th e i nterrupt. 



R e s e rv e d. Writ e as 0. 



Onc e an int e rrupt i s r e c ei v e d the i nt e rrupt contro ll er d e termin e s the priority and maps th e 
programm e d prior i ty to th e appropr i at e CPU priority leve l s, and th e n i ssues an interrupt to the CPU. 
Tho programm e d i nterrupt pr i or i ty maps d i rectly to tho LEON CPU i nt e rrupt le vels. L e v e l 0 is no 
i nterrupt. L e vel 15 is tho high e st int e rrupt l eve l . 
44r4 I nterrupt prccmpt i on 
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W i th standard LEON pro omption an intorrupt can only bo pr e e mptod by an int e rrupt with a h i gh e r 
prior i ty l e v e l. I f an Int e rrupt with th e sam e prior i ty l ev el (1 to 1 4 ) as tho intorrupt b ei ng sorviood 
b e oom e s p e nding then it is not acknowl e dged unt il the curr e nt serv i co rout i n e has comp l otod. 
Note that th e l ovol 15 i nterrupt is a spocia l case, i n that tho LEON proc e ssor w ill continu e to tak e 
5 l ovol 15 interrupts (i.o ro ontor tho I SR) as l ong as lovo l 16 is assorted on tho icujcpu^llevol. 

Leve l 0 is also a sp e c i al cas e , i n that LEON consider l ovel 0 interrupts as no i nt e rrupt, and wil l not 
Issuo an acknowlodgo whon l ovol 0 i s pres e nt e d on tho icu_cpu_il e vol bus. 

Thus wh e n pr e e mption i s r e quired, interrupts shou l d be programm e d to difforont lovols as intorrupt 
priorit ie s of th e sam e l ev el have no guarant e ed s e rv i c i ng order. Should severa l i nt e rrupt sourc e s be 
10 programmed with tho same prior i ty lev e l, th e l ow e st va l u e i nt e rrupt source wi ll be s e rv i ced first and 
so on i n Increasing order. 

Tho intorrupt i s d i rectly ooknowlodgod by the CPU and the I CU automatically clears th e pending b i t 
of the l ow e st va l u e p e nding interrupt sourc e mapped to th e acknowl e dg e d I nt e rrupt l e v e l. 
A l l I ntorrupt contro ll er registers ar e only acc e ssib le In sup e rv i sor data modo. I f tho user cod e w is hes 
15 to mask an int e rrupt it must r e quest this from th e sup e rvisor and th e sup e rv i sor software wi ll r e solve 
us e r acc e ss le v e ls. 
44t2 I nterrupt sources 

The mapping of interrupt sourc e s to int e rrupt v e ctors (and th e r e fore lntRog[N] registers) i s shown in 
Table 88 below. P le ase r e f e r to th e appropr i ate section of this sp e cification for mor e d e ta i ls of th e 
20 intorrupt sources- 
Tab le 88. I nterrupt sourc e s v e ctor tab le 



Veetef 


Source 








Description 




Timers 






WatchDog Timer Update request 


\ 


Timorc 


Generic Timer 1 Interrupt 








2 


Timors 








Generic Timer 2 interrupt 


3 


PGU 


PEP Sub-system Intorrupt TE finished band 






4 




PEP Sub-system Interrupt- LBD finished band 


§ 


PGU 


PEP Sub system Intorrupt GDU finished band 


S 


ppi \ 


PEP Sub system Intorrupt CDU error 


7 


PQIJ 


PEP Sub system Interrupt PGU finished band 


8 


PGU 






PEP Sub system Interrupt- PGU Invalid address interrupt 


9 


PHI 


PEP Sub system Interrupt PHI Line Sync Interrupt 


W 


PHI 


PEP Sub system Interrupt- PHI Buffer underrun 


44 


PHI 


PEP Sub system Interrupt PHI Page finished 


42 


PHI 


PEP Sub-system Interrupt- PHI Print ready 


4^ 


SGS 


USB Host interrupt 


44 


SGB 


USB Dovico intorrupt 


4€ 




ISI intorrupt 
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+© 


COP 


LJivi/\ interrfaipt 






LSS interrupt, LSS interface 0 interrupt roquost 




1 QQ 
r 


LSS interrupt, LSS interface 1 interrupt roquoct 


40-28 


gpiQ 


GPIO general purpose intorrupto 


28 


Timers 


Generic Timer 3 Interrupt 



4473 Implementat i on 

1 4 .3.1 D e fin i tiens ef I /O 

Tab l e 89. I nt e rrupt Centre lle r Unit I/O dofinit i en 



Port name 




m 






Description 


Clocks and Resets 






In 


System Clock 


prst_n 




(n 


System reset, synchronous active low 






CPU interface 


cpu_adr[7:2] 


s 


lA 






CPU address bus. Only 6 bits are required to 




opu_dataeut[31:0] 


32 


\B 


Shared write data bus from the CPU 






icu_cpu_data[31 :0] 


32 




Road data bus to tho CPU 








4- 


\B 


Common read/not write signal from the CPU 


cpu_rwn 




cpujcu_sel 


4- 








Block select from the CPU. When cpujoujsol is 
high both cpo_adir and opujetataout are valid 




icu_cpu_rdy 


4 








Ready signal to the CPU. When icujopujrdy is 
high it indicatos the last cycle ef the access. For 


a write cycle this means cpajdatoout has been 


registered by the ICU block and for a read cycle 




this means the data on icu_cpu__data is valid. 


icu_cpuJlovel[3:Q] 


4 


Cii it 






Indicates the priority level of the current active 
interrupt. 


cpujack 


4 








Interrupt request acknowledge from the LEON 
core 


cpu_icujlevol[3:0] 


4 








Interrupt acknowledged level from the LEON 


icu_cpu_borr 


4 


Oi if 






Bus error signal to tho CPU indicating an invalid 
access. 


cpu_acede[1 :0] 


2 








CPU Access Code signals. These decode as 

follows: 

-00 — User program access 

-0^ — User data access 

-4^ — Supervisor program access 
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4A — Supervisor data aocoss 



iou_opu_d e bug_val 4d 



Out 



Dobug Data va l id on icu_cpu_datQ bus. Active 



int e rrupts 



t i mjcu_wd_irq 



Watchdog t i m e r I nterrupt s i gnal from tlio T i mors 



timjcujrq[2:0] 



In 



G e ner i c t i m e r int e rrupt s i gna l s from tli e T i m e rs 



gpiojcujrq[9:0] 



40 



GP I O pin i nt e rrupts 



usb_ i oujrq[1:0] 



USB host and d e vico interrupts from tli e SCB 



Bit 0 USB Host i nterrupt 



— USB D e vic e int e rrupt 



5 i _ i oujrq 



I S ! i nterrupt from the SCB 



dmajcujrq 



DMA int e rrupt from the SCB 



l ssjcujrq[1 :0] 



LSS i nt e rfac e int e rrupt request 



odu finish e dband 



In 



Finished band interrupt requ e st from th e GDU 



odujcujp e g e rror 



JPEG error i nt e nrupt from th e CDU 



Ibd f i nishedband 



In 



Finish e d band i nterrupt request from th e LBD 



to f i n i shedband 



In 



F i nish e d band i ntenrupt r e qu e st from th e TE 



pcu_finishod band 



In 



Fin i sh e d band i nterrupt r e qu e st from th e PGU 



pcuJcu_addrossJnvalid 



In 



I nva li d addr e ss i nt e rrupt r e quest from the PGU 



ph i _ i cu_und e rrun 



In 



Buff e r und e rrun int e rrupt r e qu e st from the PIHI 



ph i jcu_pag e _fin i sh 



In 



Pag e finished i nterrupt request from the PH I 



ph i jcu_pr i nt_rdy 



In 



Print r e ady i nterrupt r e qu e st from th e PH I 



phijcuj i nesyncjnt 



In 



Lin e sync int e rrupt r e qu e st from th e PHI 



14.3.2 Configurat i on r o gistors 

The configuration rog i Gtoro i n the I CU are programmed v i a th e CPU int e rfac e . Refer to sect i on 1 1 A 
on page 1 for a description of th e protoco l and timing diagrams for r e ading and wr i ting r e g i sters in 
5 the I GU. Note that sinc e addr e sses i n SoPEG are byte align e d and the GPU only supports 32 - b i t 
r e gist e r reads and wr i tes, th e lower 2 b i ts of the GPU address bus are not required to decodo the 
addr e ss space for the I GU. Wh e n r e ading a r e gist e r that is l e ss than 32 bits w i de z e ros should b e 
r e turn e d on th e upp e r unused bit(s) of icu j:>Gu_dQtQ. Tab l e 90 l ists the configurat i on reg i sters i n 
the I GU block. 

10 The I CU block w i l l only oilow sup e rv i sor data mod e acc e sses ( i .e. cpu_acodo[1:0] ~ 
SUPERV!SOR_DATA). A l l othor accesses w i l l r e sult i n /Gu_cpu_d e rr b ei ng ass e rt e d. 
Tabl e 90. IGU Register Map 
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J 



- ,-f:i ^ - 




X 






0x00 — 0x74 






QyQQ 


Interrupt vector configuration registor 




lntRog[20:0] 




0x88 


IntCloar 


30 


0x0000 






^0000 


Interrupt pending clear rogister. If written with a 
one it clears corresponding interrupt 




Bits[30:0] — Interrupts souroos 30 to 0 


(Reads as zero) 


OxQO 




30 


0x0000 




IntPending 


-0000 


Interrupt pending register. (Read Only) 




Bits[30:0]- Interrupts sources 30 to 0 




IntSource 


5 


Ox4-F 


Indicates the interrupt source of the last aoknowl 






edged interrupt. The Nointorrupt value is defined 
as all bits sot to one. 
(Read Only) 


QyQQ 


DebugSeiect[7:2] 


6 




Debug address select. Indicates the address of 






the registor to report on the icujopujdiata bus 


when it is not otherwise being used. 



14.3.3 ICU part i tion 



14.3.4 Interrupt detect 

The ICU conta i ns mu l t i p le i nstanc e s of th e i nt e rrupt det e ct block, on e p e r int e rrupt source. Th e 
5 interrupt detect b l ock examin e s the I nt e rrupt sourc e signal, and d e t e rm i n e s wh e th e r i t shou l d 

generate request ponding (int _j>ond) based on th e configur e d i nt e rrupt typ e and the interrupt source 
cond i tions. If the i nt e rrupt i s not mask e d th e int e rrupt w i ll b e r e fl e ct e d to th e int e rrupt arb i ter v i a the 
intjaGtlv e s i gnal. Once an int e rrupt is p e nding it r e mains ponding unt il the i nterrupt is acc e pt e d by 
th e CPU or it i s level s e nsit i v e and g e ts r e mov e d. Masking a p e nd i ng i nterrupt has th e e ff e ct of 

10 removing the interrupt from arb i trat i on but the interrupt wi l l stil l remain ponding. 

Wh e n th e CPU acc e pts th e int e rrupt (us i ng tho normal ISR m e chanism), th e i nt e rrupt control l er 
automat i ca ll y generates an i nterrupt c l ear for that interrupt source (cpuJntjQloar). A l tornativo l y i f 
th e int e rrupt is mask e d, th e CPU can determin e pend i ng i nt e rrupts by po ll ing th e IntP e nding 
r e gist e rs. Any active p e nding i nt e rrupts can be cl e ared by tho CPU w i thout us i ng an I SR via the 

15 IntCloar reg i sters. 

Shou l d an i nt e rrupt c le ar s i gna l ( e ith e r from th e I nt e rrupt clear unit or the CPU) and a n e w int e rrupt 
condition happ e n at the sam e time, th e interrupt w i l l r e ma i n p e nd i ng. I n the part i cu l ar cas e of a le v el 
s e nsit i ve i nterrupt, if the leve l remains the interrupt w i ll stay active regard l ess of the clear signal. 
Th e log i c is shown below: 

20 maok = int_conf ig [6] 

typo ° int_oonfig[5 t4 ] 

int_pcnd = — laot_int_jpend — fcfee — laot pending 

interrupt 

// update the pending FF 
25 // toot for interrupt condition 
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— (type NEG__IiEVEIj) — then 

int^pcnd ° NOT(int_orc) 

Qloif (type °° rOS^LEVEL) 
int_pGnd « int_orc 

cloif ( (type -« POS_EDCE ) ANB (int^orc — i-) ANB 

(laat_int_orc =° 0)) 
int jcnd = 1 

cloif ( ( tv^c ~ NEG_EDGE ) AND (int_orc ~ 0-) AN© 

(laot_int_c3rc 1) ) 
intjcnd ° 1 

cloif — ( (int_olcar 1 ) OR — (Gpu_int_clcar ea l) ) — then 

int_pend ■ 0 

cloe 

int_pcnd = laot_intjcnd // otay the same ao before 

// maok the pending bit 

4r€ — (maok = «=■ — — then 

int_aGtivc = int_pcnd 

cloe 

int_activc = 0 

// aooign the regiotero 
laat_int_orc — = int_orc 
laot_int_pend « int_pend 

1 4 .3.5 Int e rrupt arb i ter 

The int e rrupt arbit e r logic arbitrat e s a winning i nt e rrupt r e qu e st from multipio pending r e qu e sts 
bas e d on configur e d pr i ority. I t gonorat e s th e interrupt to the CPU by sott i ng icu_cpu_il e v e l to a 
non - z e ro va l u e . Th e priority of th e i nt e rrupt i s r e flect e d i n th e va l u e assign e d to icu_cpu_ilovol, the 
h i gh e r th e va l u e the high e r th e prior i ty, 15 b ei ng th e h i gh e st, and 0 cons i dorod no i nterrupt. 

// arbitrate with the current winner 

int_ilevel = — 9- 

for (ig0;i<30;i i i) — f 

ir§ — ( int^act i ve [ i ] — = ^ 1) — then { 

if — (int_conf ig [i] [3 s 0] — > win_int_i level [3 : 0] — ) — then 

win__int_i level [3 s 0] — « int_Gonf ig [i] [3 ; 0] 

y 

)■ 

—y 

// aooign the CPU interrupt level 
int_ilevel « win_int_ilcvel [3 ! 0] 

14.3.6 I nt e rrupt c le ar unit 
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Th e i nt e rrupt d e ar unit is responsiblo for accept i ng an intera i pt acknowledgo from th e CPU, 
det e rmining wh i ch i nterrupt souroo gonoratod tho i nterrupt, c l oar i ng the pend i ng bit for that sourc e 
and updat i ng the IntSouro e r e g i st e r. 

When an i nt e rrupt acl<nowl e dgo is rec ei v e d from th e CPU, th e int e rrupt c l ear un i t searches through 
5 each i nterrupt sourco looking for i nterrupt sourc e s that match th e acknowlodgod interrupt l ovol 

(opujcujl e v e f) and dotorm i n e s th e w i nn i ng interrupt (lower i nterrupt source numbers have h i gher 
pr i or i ty). Wh e n found th e i nt e rrupt sourc e ponding bit Is clear e d and tho intSource r e gister is 
updated w i th tho i nterrupt sourco number. 

Th e LEON int e rrupt acknow le dgo mechanism automat i cally disab l es a ll oth e r int e rrupts t e mporari l y 

10 unti l i t has correct l y savod state and jump e d to th e iSR routin e . I t i s th e r e sponsib i l i ty of tho I SR to 
re enable the i nterrupts. To prev e nt th e intSourc e r e gister ind i cating the i ncorroct souroo for an 
int e rrupt l ev e l, th e I SR must r e ad and stor e the intSourco va l u e before ro enabling tho interrupts v i a 
the Enab l e Traps (ET) field i n the Processor Stat e R e gist e r (PSR) of th e LEON. 
See sect i on 11 .9 on page 1 for a comp l ete descr i ption of tho interrupt hand li ng proc e dur e . 

15 Aft e r r e s e t th e stat e machin e r e mains in idi e stat e unti l an int e rrupt acknowledgo is r e c e iv e d from 
tho CPU (indicated by cpu_iack). Wh e n the acknowledg e is r e c e iv e d the state mach i n e transitions 
to tho Comparo state, r e s e tting tho sourc e count e r (cnt) to th e numb e r of int e rrupt sources. 
Wh i l e in th e Compare stat e th e stat e mach i n e cyc le s through e ach poss i ble interrupt sourco in 
docromonting ordor. For oach act i ve interrupt sourco tho program mod prior i ty {mt _priority[cnt][3:0J) 

20 is compar e d with th e acknow le dg e d interrupt lev el from th e CPU {cpu_icu_il e vef), i f they match th e n 
the interrupt is cons i dered the n e w w i nn e r. This impli e s th e last i nt e rrupt sourc e check e d has th e 
h i ghest pr i or i ty, e.g i nterrupt source zero has the h i gh e st pr i ority and th e f i rst sourc e ch e ck e d has 
the l owest prior i ty. After all interrupt sources ar e checked tho state machin e transit i ons to the 
IntCfoar state, and updat e s th e int_eourc e r e gist e r on th e trans i tion. 

25 Should th e r e be no active i nterrupts for the acknowlodgod le v el ( e .g. a le v e l s e ns i t i v e i nt e rrupt was 
r e mov e d), th e lr)tSource r e g i st e r wi ll b e s e t to No/nt e rrupt . Nolnt e rrupt \ q d e fin e d as th e high e st 
poss i ble value that IntSourc e can b e se t to (in this cas e 0x1 F), and th e stat e machin e wi ll r e turn to 

Th e e xact number of compares performed p e r clock cyc io i s d e p e ndent tho number of int e rrupts, 
30 and logic ar e a to l og i c speed trad e off, and i s l e ft to the i mpl e m e ntor to determine. A compar i son of 
a l l int e rrupt sourc e s must comp l ete w i thin 8 c l ock cyc le s (d e t e rm i ned by the CPU acknowledge 
hardwar e ). 

Wh e n in th e /nfC/ e ar state tho state machine has determ i ned th e i nt e rrupt sourco to c l oar (ind i cated 
by th e int_sourc e r e gister). I t res e ts th e p e nd i ng bit for that int e rrupt sourc e , trans i t i ons back to the 
35 Idle state and waits for tho noxt acknowledgo from the CPU. 

Th e m i nimum time between success i v e i nterrupt acknowledges from th e CPU is 8 cyc le s. 
45 T i mers Block (TIM) 

Tho T i m e rs block conta i ns g e n e ra l purpos e tim e rs, a watchdog t i m e r and t i ming puls e g e n e rator for 
us e i n oth e r sect i ons of SoPEC. 
40 4^T^ Watchdog timcr 
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Tho watchdog t i mer is a 32 bit count e r valuo which counts down e ach t i mo a t i ming pulso is 
r e c ei v e d. Th e p e riod of th e tim i ng pulse is s e l e ct e d by th e W a tchDogUnitSot rogistor. Th e valu e at 
any timo can bo road from the WatohQog 77mor rog i stor and tho counter can bo rosot by wr i t i ng a 
non zero va l ue to the r e gist e r. Wh e n th e count e r transit i ons from 1 to 0, a system w i do res e t wil l bo 
triggorod as if tho reset cam e from a hardwar e pin. 

Tho watchdog timer can bo polled by tho CPU and rosot each tim e it gets oloso to 1 , or alt e rnative l y 
a thr e shold (WatchDoglntThroe) can be sot to trigg e r an int e rrupt for th e watchdog tim e r to b e 
s e rvic e d by tho CPU. I f th e WatchDogintThros I s s e t to N, th e n th e int e rrupt wi ll b e tr i gg e r e d on th e 
N to N 1 transit i on of tho WatchDogTimor. This interrupt can bo offoct i voly masked by sotting tho 
thr e shold to zero. The watchdog tim e r can bo d i sabled, w i thout caus i ng a r e s e t, by writ i ng z e ro to 
the WatchDogTim e r r e g i st e r. 
4^t2 Timing pul s e generator 

Th e t i ming b l ock conta i ns a timing puls e gen e rator clock e d by the syst e m c l ock, us e d to gonorato 
timing pu l ses of programmabl e periods. Th e p e r i od is programm e d by acc e ssing th e 
T/'m e rStartVaiu e r e g i st e rs. Each puls e is of on e system clock duration and i s activ e high, with th e 
pu l so per i od accurate to tho system clock frequency. Tho periods after reset aro sot to 1 us, 100us 
and 100 ms. 

Th e t i ming pulse g e nerator a l so contains a 6^ bit froo running counter that can bo read or r e set by 
accessing tho FreoRunCount registers. The free runn i ng counter can bo used to dotormino olapsod 
time b e tw ee n e v e nts at system clock accuracy or could bo u s ed a s an input source i n l ow secur i ty 
random numb e r generator. 
4^7^ Gener i c timers 

SoPEC contains 3 programmab le g e n e ric tim i ng counters, for use by the CPU to t i me the syst e m. 
Tho timers aro programmed to a part i cu l ar va l uo and count down e ach tim e a t i ming puls e is 
r e c e iv e d. Wh e n a part i cular t i m e r d e cr e m e nts from 1 to 0, an int e rrupt is generat e d. Th e count e r 
can bo programm e d to automat i ca ll y restart the count, or wait unt i l re programmed by th e CPU. At 
any time the status of tho counter con b e r e ad from G e nCntValuo, or can bo rosot by wr i t i ng to 
G e nCntValu e r e gist e r. Th e auto r e start i s act i vat e d by s e tting tho GonCntAuto register, wh e n 
activated the counter restarts at GonCntStartValuo. A counter can bo stopped or started at any 
time, without affecting tho contents of the GonCntValuo register, by writ i ng a 1 or 0 to the ro l ovent 
GonCntEnablo rogistor. 

45:4 I mplementation 

15.^.1 



D e fin i tions of I/O 

Tab l e 01 . Timers b l ock I /O defin i t i on 



Port nam e 



C l ocks and Rosots 



QiAc i/n 



Pdk 



prst_n 



tim_pulso[2:0] 



Descript i on 



in System Clock 



If! System rosot, synchronous act i ve l ow 



3 Out T i mers b l ock gen e rat e d tim i ng pulses, each one pdk 
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wido 

0 — Nominal 1 pulse 

1 — Nominal 100 |is pulse 

2 — Nominal 10ms pulse 


CPU interface 




cpu_adr[6:2] 


§ 


fn 


1 Iti K. I^it^ ^MMi lirM^ ^^^^^^ 




the address space for the ICU block 




Gpu_dataout[31 :0] 










Oflafc?U Wf lie Uciia UUo llUiM llio K^r^KJ 


tim_cpu_data[31 :0] 


32 


Hi if 


Read data bus to the CPU 








1- 






opu_rwn 


oommon reau/noi- wriie signal rrom me oku 


opu_tim_sel 


1- 


In 






Block soloct from the CPU. Whon opujtimjsol is high 
both cpu_adr and cpu_dataout are valid 






A- 


Out 


Ready signal to the CPU. Whon tlm_cpu_rdy is high 


tim cpu rdy 


it indicates tho last cycle of the access. For a write 




cycio this means cpu_QQiQout has Been rogistorod by 
tho TIM block and for a road cycle this means the 


data on timjspujdIatQ is valid. 


tim_cpu_berr 


1- 


Otrt 






Bus error signal to the CPU indicating an invalid 
access. 




2 






cpu acode[1:0] 


CPU Access Code signals. These decode as follows: 
-60 — User program qccoss 
-04 — User data access 


4^ — Supervisor program access 
AA — Supervisor data access 


— — 


4- 


Oi it 




tim_cpu_dobug_^vaiid 


Debug Data valid on timjopujdoto bus. Active high 


Miscellaneous 




timjcu_wd_irq 


4- 


Otrt 






Watchdog timer interrupt signal to tho iCU block 




3 


Out 




timjcu_irq[2:0] 


Gonorio timer interrupt signals to tho ICU block 


tim_cpr_reset_n 


1- 


Out 






Watch dog timer system rosot. 



15.4.2 Timers sub b l ock partition 

15. 4 .3 Watchdog tim e r 

Th e watchdog t i mor counts down from pro programmed valuo, and gonoratos a system wido rosot 
wh e n e qual to on e . Wh e n th e count e r pass e s a pr e programm e d thr e shold {wdogjtimjthroe) va l uo 
5 an i nterrupt is g e n e rat e d {tlm_icu_wd_Jrq) requ e st i ng th e CPU to updat e tho counter. Sotting tho 
counter to z e ro disabl e s the watchdog rosot. I n supervisor mode tho watchdog counter can b e 
wr i tten to or road from at any t i m e , in user mode acc e ss is denied. Any acc e sses in user mode w i l l 
gonorato a bus error. 

10 Th e count e r l og i c is g i ven by 



PEA23US 



199 



■ari — (wdog_wcn ■ « 1) — then 

— wdog_tim_Gnt « writo_data // load now data 

cloif — ( wdog_tim_cnt ==■ 0) — thon 

— wdog_tim_Gnt « wdog_tini_cnt // count dioablod 

oloif — ( cnt_cn 1 ) — then 

— wdog_t im_cnt — 

clac 

wdog_tim_Gnt wdog_tim_cnt 

The t i mer docode l og i c is 

— H — wdog_t im_cnt — ■ « wdog_t im_threo ) — AND — ( wdog_t itn_cnt — i-« — 0- 
) AND — (ont_cn i) ) — then 

1 im_i Gu_wd_ i r q ° i 

cloc 

tini_iGu_wd_irq ■ 0 

// rcoct generator logic 

4r€ — ( wdog_t im_cnt = = 1 ) — AND — (Gnt_en 1) — then 

tim_epr_rcaet_n = 0 

eloe 

tim_Gpr_reoet_n « 1 

15.4.^ Genorlo timers 

The gonoric t i mers block consists of 3 id e ntical count e rs. A tim e r i s s e t to a pr e -oonfigur e d va l u e 
{GonCntStartVafuo) and counts down onc e p e r s e l e ct e d t i m i ng puls e {g e n_unit_e e l). Th e t i m e r can 
b e e nabled or disabled at any t i m e {g e n_tim_ e n), wh e n disabl e d th e count e r is stopp e d but not 
cl e ar e d. Th e tim e r can bo set to automatic all y restart (gon_tim_Quto) aft e r I t g e n e rat e s an i nt e rrupt. 
I n supervisor mod e a t i m e r can b e writt e n to or r e ad from at any t i m e , i n us e r mod e acc e ss is 
det e rmined by the GonCntUe e rMod e Enabi e r e gist e r s e ttings. 

Th e count e r logic is giv e n by 

4ri — (gon_wen °° 1) — thon 

— gGn_tim_cnt « write_data 

eloif — ( ( Gnt_en =° 1 )AND — (gon_tiTn_cn °° 1 ) ) thon 

if ( — gen_ t iin_cnt — — 3r^ — OR — ( — gon_t im_Gnt — »« — 9-) then 

counter may need ro otarting 

^ — (gcn_tim_auto ■== — — then 

gcn_tim_cnt = gen_tim__cnt_at_valuc 

eloe 

gGn_tim_ont ° 0 // hold 

count at Bcro 
eloe 

gGn_t im_Gnt — 
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JUL 2 1 o 
, ^ ■ ^^n>Ap^!^ 

gcn_tim_Gnt ° gon_txm_Gnr ' 

Th e d e cod e log i c is 

if — ( gcn_t im_Gnt — 1 ) AND — ( — cnt_on — i — ) AND — ( gGn_ t im__on «=■ 1 
. 5 ) then 

tim^icu^irq « 1 

OlOG 

tim_iGu_irq « 0 

15. 4 .5 Timing puls e g e n e rator 

10 Th e tim i ng puls e g e nerator contains a gonoral froo runn i ng 6A bit t i mer and 3 tim i ng puls e 

g e n e rators produc i ng t i m i ng pu l sos of on e cyc le duration w i th a programmabl e p e riod. Th e per i od i s 
programmed by changed tho TimorStartVeiue r e g i st e rs, but have a nom i nal starting p e r i od of 1^s, 
lOOjiis and 1ms. I n sup e rvisor mode the froo running t i m e r r e g i st e r can bo writt e n to or r e ad from at 
any tim e , i n user mode accoss is d e ni e d. Th e status of e ach of th e t i m e rs can bo road by accossing 

15 tho PulGoTimorStatuG r e g i st e rs in superv i sor modo. Any acc e ss e s i n usor modo w i ll r e su l t i n a bus 
e rror. 

1 5. 4. 5. 1 Froo Run Timor 

Th e incromont log i c block incromontG tho timor count on e ach clock oyo l o. Tho count e r wraps 
around to z e ro and cont i nu e s Incremonting if ov e rflow occurs. Whon tho timing regist e r 
20 {FrooRunCount) is writt e n to. th e configurat i on reg i sters b l ock wi ll s e t th e fr e ejrun_won high for a 

clock cycle and th e value on wnte_data wi ll b e com e th e new count valu e . I f fr ee _run__w e n[1] i s 1 tho 
h i gher 32 b i ts of tho counter wi l l b e wr i tt e n to, oth e rwise if froe_run_won[0} th e l ow e r 32 b i ts aro 
wr i tt e n to. I t i s th e r e sponsibi li ty of software to hand l e th e s e writes i n a sensibl e mann e r. 
Tho incromont log i c i s g i v e n by 
25 if — ( f rQO_run__wcn [1] — °° 1) — thon 

f rGG_r\in_Gnt [ 6 3 ; 32] — ■= writc_data 

eloif — ( f rco_run_wcn [ 0 ] — ==■ 1) — then 

f roo_run_Gnt [31 : 0] = writc^data 

gIoc 

30 free run cnt — m- 

15.4.5.2 Puls e Tim e rs 

Th e pu l s e t i m e r l og i c gen e rates t i m i ng pu l s e s of 1 c l ock cycio iongth and programmab l e per i od. 
Nom i na ll y th e y g e n e rat e pu l s e per i ods of l^is, 100^s and Ims. Th e l ogic for tim e r 0 i s giv e n by: 

// Nominal lug gGncrator 
35 i€ — (puloG_0_Gnt a s 0 ) — thGn 

— pulDO_0_Qnt => timGr_otart_valuQ [03 

tim_jpuloc [0] = 1 

cloc 

puloG_0_Gnt 

40 tim_puloc [0] 0 
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Tho log i c for tim e r 1 i s giv e n by: 

// lOOuo generator 

•ari — ( (puloc_l_Gnt o) AND — ( tim_j>uloe [0] — 1) ) — then 
5 — puloc_l_ant ■ timer_otart_valuo [1] 

tim_puloc [1] = 1 

cloif — (tim_j)ulao [0] — 1) — then 

pulao_l_Gnt 

tim_jpuloc [1] = 0 

10 e^rse 

— puloe^l^ent » puloe^l^cnt 
— tim_j)uloG [1] - 0 



Tho logic for the t i mer 2 is given by: 

1 5 // lOma generator 

i€ — ( (puloc_2_cnt 0 ) AND ( t im_puloe [1] — ==■ 1) ) — then 

— puloe_2_cnt = timer_otart_value [2] 

timjuloe[2] « 1 

eloif — (tim_puloe [1] — 1) — then 
20 — puloe_2_cnt 

tim^puloe [2] ° 0 

eloe 

— puloe_2_Gnt « puloe_2_cnt 

tim_pulae [2] =■ 0 

25 15.^.6 Configuration rog i stors 

Th e conf i gurat i on r e g i st e rs I n tho TIM or o programmed v i a th e CPU i nt e rfac e . R e f e r to s e ct i on 
1 1 .^.3 on pag e 1 for a d e scription of the protocol and timing d i agrams for r e ading and wr i ting 
r e g i st e rs in th e T I M. Not e that sinc e addr e ss e s i n SoPEC are byto a l igned and the CPU only 
supports 32 bit reg i ster roods and wr i tes, the l owor 2 b i ts of th e CPU addr e ss bus ar e not r e qu i r e d 
30 to d e cod e th e addr e ss spac e for th e TIM. Wh e n reading a rogistor that is l e ss than 32 b i ts w i d e 
zoros shou l d bo returned on the upper unused b l t(s) of tim jycu_data. Tab le 92 l ists the 
configuration r e gist e rs i n th e T I M block . 

Tob l o 02. Timers R e gister Map 





Spoc i fios tho units us e d for the 
watchdog t i m e r: 



0 — Nom i na l 1 |is pu l s e 



1 — Nom i nal 100 ^is puls e 
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2 — Nominal 10 ms puloo 
3 - poik 




WatohDogTimor 


32 


OxFFFF 


Spooiflos the number of units to count 




FFFF 






before watchdog timer triggors. 




WatohDoglntThros 


32 


0x0000 


Specifies tho threshold value bolow 






rOOOO 






which the watchdog timer issues an 
interrupt 


OxOC 0x10 


FreeRunCount[1 :Q] 


2x32 


0x0000 










0000 


Diroot access to tho froo running 
counter rogistor. 
Bus 0 Access to bits 31 0 
Bus 1 — Access to bits 63 32 


0x14 to 0x1 C 


GenCntStartValuo[ 


3x32 


0x0000 


Generic timer counter start value, 




2^ 




--0000 


number of units to count before event 






0x20 to 0x28 


GonCntValuo[2:0] 


3x32 


0x0000 










-0000 


Direct access to generic timer counter 
registers 


Ox2C to 0x34 


GonCntUnitSol[2:0 


3x2 


0x0 


Gonoric counter unit select. Solocts 




1 




the timing units used with 
corresponding counter: 

0 — NominaH \iG pulse 

1 — NominallOO ^s pulse 

2 — Nominal 10 ms pulse 
3 pclk 


0x38 to 0x40 


GonCntAuto[2:0] 


3x4- 




GGnoric counter auto ro start select. 






When high timer automatically 


restarts, otherwise timer stops. 


0x44 toOx4C 


GonCntEnablo[2:0] 


3x1- 


0x0 


Gonoric counter onablo. 








0 — Counter disabled 
4 — Counter enabled 




GonCntUserModo 


3 


0x0 




Enable 


User Mode Access onablo to generic 
timer oonfiouration roaister When 1 




user access is enabled. 
3lt-0 — Generic timer 0 
BiM — Generic timer 1- 
Brt-2 — Generic timor 2 


0x54 to Qx5C 


TimerStairtValue[2: 


3x8 


Ox?Fr 






0} 




0x637 


Timing pulso gonorator start value. 
Indicates tho start value for each 




timing pulso timers. For timor 0 tho 




start value speoifios tho timor period 
in pdk oycloG — 1-r 
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0x60 



Road 



On l y 



Registers 



D e bugS e l e ct[6:2] § 



th e tim e r por i od i n t i mer 0 i nt e rvals - 1 



th e t i m e r p e riod in t i mer 1 int e rvals 



QyQQ 



For timer 1 the start value specifies 



For t i mor 2 the start voluo sp e c i fi e s 



Nominally th e t i m e rs gonorato pulses 



at 1us,100us and 10ms intorvak 



r e specit i vo l y. 



Debug address soloct. Ind i cates tho 
addr e ss of th e r e gister to r e port on 



the tim_cpu_data bus whon it is not 
oth e rw i s e b e ing us e d. 



Pu l soTimorStatus 



24 



Current pu l se t i mor va l ues, and 



pulses 

7^0 Tim e r 0 count 



— T i m e r 1 count 



23:16 T i m e r 2 count 



24- 



Timor 0 puls e 



2€ T i mor 1 pulse 

26 T i mor 2 pu l se 



1 5. 4. 6. 1 Suporvieor and ueor modo qcco€g 

Th e configuration r e gist e rs b l ock e xamin e s th e CPU acc e ss typ e {cpujacod e s i gna l ) and 
det e rm i nes i f the access i s a ll owed to that particular reg i ster, based on conf i gured user access 
regist e rs. If an access i s not al l owed th e b l ock wi ll i ssu e a bus error by assert i ng th e tim_cpu_b e rr 
5 s i gna l . 

Tho timers block is fu l ly accosGtblo i n sup e rvisor data modo, all registers can wr i tt e n to and r e ad 
from. I n us e r mode access i s d e n ie d to all regist e rs i n the block e xc e pt for th e g e n e r i c t i m e r 
configurat i on r e g i st e rs that aro grant e d us e r data access. User data acc e ss for a gonor i c timor is 
grant e d by s e tt i ng corr e sponding b i t in tho GenCntUs e rModeEn a bl e r e gister. This can only b e 
10 chang e d i n sup e rvisor data mode. If a part i cular timer is grant e d us e r data access th e n a ll registers 
for configuring that t i m e r w i ll b e acc e ssible. For e xamp le if t i mor 0 i s grant e d user data acc e ss th e 
G e nCntStartVQ{ue[Ol GonCntUnitS e lfOl GonCntAuto[Ol GenCntEnable[0] and GonCntVaiuofO] 
registers can all bo wr i tten to and road from without any restrict i on. 

Attempts to acc e ss a us e r data mod e disab l ed tim e r configurat i on r e gister w i l l resu l t in a bus e rror. 
15 Table 9 3 dotai l s tho access modes al l owed for r e gist e rs in th e T I M block. I n supervisor data mod e 
a ll reg i sters aro accossab le . A ll forbidden accesses w i l l resu l t i n a bus e rror {tim_cpu_b e rr 
assorted). 
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Tab l o 93, T I M sup e rvisor and usor accoss modos 



Address 






QyQQ 


WatohPogUnitSel 


Supervisor data mode only 




Watch DogTimer 


SuDorviBor data mode only 


OxOS 


Watch Dog i ntTh res 


S4JDervisQr data modp onl-v 




U ImT 1 V 1 ^ V^l W4 111 V*^ \m/ ■ 1 I Y 


UXUU-UX1 u 




Supervisor data mode only 




GenCntStartValuerOI 






GenCntStartValuen 1 


GpnC^ntl J^prMndpFnahl^t-l-J 


UXI O 


vj e no n t ota rt va i u e [ii j 


(jenCntUserMoaeEnable[2j 


Qx20 


GenCntValueroi 




Qx2A 


GenCntValuefH 




0x28 


<jenontvaiue[^j 


vjenontUserModebnaplet^j 


0x2C 


iGonCntU n itSel [0] 


GenCntUserModeE-ftablerOl 










GonCntUnitSol[1] 


GenCntUserModeEnablen 1 


0x34 


GenCntUnitSel[2] 


GenCntUsorModeEnablef21 


0x38 


GenCntAuto[0] 






GenCntUsorModeEnable[0] 


Qx3C 


GonCntAutof 1 1 






vjenontAUtO[<£j 


oonuntusorMOQecnapie[j£ j 


QxAA 










rwAft 


GenCntEnablo[1] 


GonCntUsorModoEnoblo[1 ] 




GenCntEnabio[2] 


GonCntUserModeEnable[2] 




GenCntUsorModoEnabio 


SuporviGor data modo only 


OxS'l 0x5C 


TimerStartValuo[2:0] 


Supervisor data mode only 


0x60 


DebugSoloct 


Supervisor data modo only 




PuisoTimerStatus 






Supervisor data modo only 



4€ Clocking, Power and Reset (CPR) 

The CPR block provides all of the clock, power enable and reset signals to the SoPEC device. 

4^7^1 POWERDOWN MODES 

The CPR block is capable of powering down certain sections of the SoPEC device. When a section 
is powered down (i.e. put in sleep mode) no state is retained(except the PSS storage), the CPU 
must re-initialize the section before it can be used again. 
For the purpose of powerdown the SoPEC device is divided into sections: 

Tabl e 94 T able 4 . Powerdown sectioning 



Section 


Block 


Print Engine Pipeline 
Subsystem (Section 0) 


PCU 
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10 



15 



CPU-DRAM (Section 1) 



IS I Subsystem (Section 2) 



USB Subsystem (Section 3) 



CDU 

CPU 

LBD 

SFU 

TE 

TFU 

HCU 

DNC 

DWU 

LLU 

PHI 

DRAM 



CPU/MMU 



DIU 



TIM 



ROM 



LSS 



PSS 



ICU 



ISI (SCB) 



DMA Ctrl (SCB) 



GPIO 



USB (SCB) 



Note that the CPR block is not located in any section. All configuration registers in the CPR block 
are clocked by ah ungateable clock and have special reset conditions. 
16.1.1 Sleep mode 

Each section can be put into sleep mode by setting the corresponding bit in the SleepModeEnable 
register. To re-enable the section the sleep mode bit needs to be cleared and then the section 
should be reset by writing to the relevant bit in the ResetSection register. Each block within the 
section should then be re-configured by the CPU. 

If the CPU system (section 1) is put into sleep mode, the SoPEC device will remain in sleep mode 
until a system level reset is initiated from the reset pin, or a wakeup reset by the SCB block as a 
result of activity on either the USB or ISI bus. The watchdog timer cannot reset the device as it is in 
section 1 also, and will be in sleep mode. 

If the CPU and ISI subsystem are in sleep mode only a reset from the USB or a hardware reset will 
re-activate the SoPEC device. 

If all sections are put into sleep mode, then only a system level reset initiated by the reset pin will 
re-activate the SoPEC device. 
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Like all software resets in SoPEC the ResetSection register is active-low i.e. a 0 should be written 
to each bit position requiring a reset. The ResetSection register Is self-reseting. 
16.1.2 Steep Mode powerdown procedure 

When powering down a section, the section may retain it's current state (although not gauranteed 
5 to). It is possible when powering back up a section that Inconsistancies between interface state 
machines could cause incorrect operation. In order to prevent such condition from happening, all 
blocks in a section must be disabled before powering down. This will ensure that blocks are 
restored in a benign state when powered back up. 

In the case of PEP section units setting the Go bit to zero will disable the block. The DRAM 
1 0 subsystem can be effectively disabled by setting the RotationSync bit to zero, and the SCB system 
disabled by setting the DMAAccessEn bits to zero turning off the DMA access to DRAM. Other CPU 
subsystem blocks without any DRAM access do not need to be disabled. 
4^72 Reset source 

The SoPEC device can be reset by a number of sources. When a reset from an internal source is 
1 5 initiated the reset source register (ResetSrc) stores the reset source value. This register can then 
be used by the CPU to determine the type of boot sequence required. 
4€t3 Clock RELATiONSHip 

The crystal oscillator excites a 32MHz crystal through the xtalin and xtalout pins. The 32MHz output 
is used by the PLL to derive the master VCO frequency of 960MHz. The master clock is then 
20 divided to produce 320MHz clock {clk320), 160MHz clock {clk160) and 48MHz {clk48) clock 
sources. 

The phase relationship of each clock from the PLL will be defined. The relationship of internal 
clocks clk320, c!k48 and clk160 to xtaiin will be undefined. 

At the output of the clock block, the skew between each pcik domain {pclk_section[2:0] and Jclk) 
25 should be within skew tolerances of their respective domains (defined as less than the hold time of 
a D-type flip flop). 

The skew between docik and pcik should also be less than the skew tolerances of their respective 
domains. 

The usbclk is derived from the PLL output and has no relationship with the other clocks in the 
30 system and is considered asynchronous. 
4^74 PLL Control 

The PLL in SoPEC can be adjusted by programming the PLLRangeA, PLLRangeB, PLLTunebits 
and PLLl^uit registers. If these registers are changed by the CPU the values are not updated until 
the PLLUpdate register is written to. Writing to the PLLUpdate register triggers the PLL control state 
35 machine to update the PLL configuration in a safe way. When an update is active (as indicated by 
PLLUpdate register) the CPU must not change any of the configuration registers, doing so could 
cause the PLL to lose lock indefintely, requiring a hardware reset to recover. Configuring the PLL 
registers in an inconsistent way can also cause the PLL to lose lock, care must taken to keep the 
PLL configuration within specified parameters. 
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The VCO frequency of the PLL is calculated by the number of divider In the feedback path. PLL 
output A is used as the feedback source. 

VCOfreq = REFCLKx PLLMult x PLLRangeA x External divider 
VCOfreq = 32 x 3 x 10 x 1 = 960 Mhz. 
5 In the default PLL setup, PLLMult is set to 3, PLLRangeA is set to 3 which corresponds to a divide 
by 10, PLLRangeB is set to 5 which corresponds to a divide by 3. 
PLLouta = VCOfreq / PLLRangeA = 960Mhz / 10 = 96 Mhz 
PLLoutb = VCOfreq / PLLRangeS = 960Mhz / 3 = 320 Mhz 
See [16] for complete PLL setup parameters. 

1 0 4^75 Implementation 

16.5.1 Definitions of I/O 

Tab le QST able 5. CPR I/O definition 



Port name 


Pins 

y 


I/O 


Description 


Clocks and Resets 


Xtalin 




In 


Crystal input, direct from lO pin. 


Xtalout 




Inout 


Crystal output, direct to lO pin. 


pclk_section[3:0] 




Out 


System clocks for each section 


Doclk 




Out 


Data out clock (2x pclk) for the PHI block 


Jclk 




Out 


Gated version of system clock used to clock the 
JPEG decoder core in the CDU 


Usbclk 




Out 


USB clock, nominally at 48 Mhz 


jclk_enable 




In 


Gating signal for jclk. When 1 jclk is enabled 


reset_n 




In 


Reset signal from the reset_n pin 


usb_cpr_reset_n 




In 


Reset signal from the USB block 


isi_cpr_reset_n 




In 


Reset signal from the IS! block 


tim_cpr_reset_n 




In 


Reset signal from watch dog timer. 


gplo__cpr_wakeup 




In 


SoPEC wake up from the GPIO, active high. 


prst_n_section[3:0] 


4 


Out 


System resets for each section, synchronous 
active low 


dorst_n 




Out 


Reset for PHI block, synchronous to doclk 


jrst_n 




Out 


Reset for JPEG decoder core in CDU block, 
synchronous to jclk 


usbrst__n 


1 


Out 


Reset for the USB block, synchronous to usbclk 


CPU Interface 


cpu_adr[5:2] 


3 


In 


CPU address bus. Only 4 bits are required to 
decode the address space for the CPR block 


cpu_dataout[31 :0] 


32 


In 


Shared write data bus from the CPU 


cpr_cpu_data[31 :0] 


32 


Out 


Read data bus to the CPU 
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cpu_rwn 


1 


In 


Common read/not-write signal from the CPU 


cpu_cpr_sel 


1 


In 


Block select from the CPU. When cpu_cpr_sel is 
high both cpujadr and cpu_dataout are valid 


cpr_cpu_rdy 


1 


Out 


Ready signal to the CPU. When cprjcpujrdy is 
high it indicates the last cycle of the access. For a 
write cycle this means cpu_dataout has been 
registered by the block and for a read cycle this 
means the data on cpr_cpu_data is valid. 


cpr_cpu_berr 


1 


Out 


Bus error signal to the CPU indicating an invalid 
access. 


cpu_acode[1 :0] 


2 


In 


CPU Access Code signals. These decode as 

follows: 

00 - User program access 

01 - User data access 

10 - Supervisor program access 

1 1 - Supervisor data access 


cpr_cpu_debug_valicl 


1 


Out 


Debug Data valid on cpr_cpu_data bus. Active 
high 



16.5.2 Configuration registers 

The configuration registers in the CPR are programmed via the CPU interface. Rofor to soct i on 1 1 . 4 
on pag e 1 for a descr i ption of tho protocol and t i m i ng diagrams for read i ng and writing rogistors i n 
tho CPR. Note that since addresses in SoPEC are byte aligned and the CPU only supports 32-bit 
register reads and writes, the lower 2 bits of the CPU address bus are not required to decode the 
address space for the CPR. When reading a register that is less than 32 bits wide zeros should be 
returned on the upper unused bit(s) of cpr jpcujdata. Tabl e 96 T able 6 lists the configuration 
registers in the CPR block. 

The CPR block will only allow supervisor data mode accesses (i.e. cpu_acode[1:0] = 
SUPERVISOR_DATA ). All other accesses will result in cprjopujberr being asserted . 
Table 96 T able 6 . CPR Register Map 









Big§etl 




0x00 


SleepModeEnable 


4 


0x0^ 


Sleep Mode enable, when high a section 

of logic is put into powerdown. 

Bit 0 - Controls section 0 

Bit 1 - Controls section 1 

Bit 2 - Controls section 2 

Bit 3 - Controls section 3 

Note that the SleepModeEnable register 
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has special reset conditions. See 
Section 16.5.6 for details 


0x04 


ResetSrc 


5 


0x1^ 


Reset Source register, indicating the 
source of the last reset (or wake-up) 
Bit 0 - External Reset 
Bit 1 - USB wakeup reset 
Bit 2 - ISI wakeup reset 
Bit 3 - Watchdog timer reset 
Bit 4 - GPIO wake-up 
(Read Only Register) 


0x08 


ResetSection 


4 


OxF 


Active-low synchronous reset for each 

section, self-resetting. 

Bit 0 - Controls section 0 

Bit 1 - Controls section 1 

Bit 2 - Controls section 2 

Bit 3 - Controls section 3 


OxOC 


DebugSelect[5:2] 


4 


0x0 


Debug address select. Indicates the 
address of the register to report on the 
cpr_cpu_data bus when it is not 
otherwise being used. 


PLL Control 


0x10 


PLLTuneBits 


10 


0x3BC 


PLL tuning bits 


0x14 


PLLRangeA 


4 


0x3 


PLLOUT A frequency selector (defaults 
to 60Mhz to 125Mhz) 


0x18 


PLLRangeB 


3 


0x5 


PLLOUT B frequency selector (defaults 
to200Mhzto400Mhz) 


0x1 C 


PLLMultiplier 


5 


0x03 


PLL multiplier selector, defaults to 
refclk X 3 


0x20 


PLLUpdate 


1 


0x0 


PLL update control. A write (of any 
value) to this register will cause the 
PLL to lose lock for -lOOus. Reading 
the register indicates the status of the 
update. 

0 - PLL update complete 

1 - PLL update active 
No writes to 

PLL TuneBits, PLLRangeAPLL- 
RangeB,PLLMu!tiplier or PLLUpdate 
are allowed while the PLL update is 
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active. 



a. Reset value depends on reset source. External reset shown. 



16.5.3 CPR Sub-block partition 

16.5.^ reset_n deglltch 

The external reset_n signal is deglitched for about 1 ^s. reset_n must maintain a state for 1 us 
5 second before the state is passed Into the rest of the device. All deglitch logic is clocked on 
bufirefdk. 

16.5.5 Sync reset 

The reset synchronizer retimes an asynchronous reset signal to the clock domain that It resets. The 
circuit prevents the inactive edge of reset occurring when the clock is rising 

1 0 16.5.6 Reset generator logic 

The reset generator logic is used to determine which clock domains should be reset, based on 
configured reset values {reset_section_n), the external reset (rese(__n), watchdog timer reset 
(tim_cpr_reset__n), the USB reset (usb_cpr_reset_n), the GPIO wakeup control {gpio_cpr_wakeup) 
and the ISI reset {isi_cpr_reset_n). The reset direct from the lO pin {reset_n) is synchronized and 

1 5 de-glltched before feeding the reset logic. 

All resets are lengthened to at least ^6pc^k cycles, regardless of the duration of the input reset. The 
clock for a particular section must be running for the reset to have an effect. The clocks to each 
section can be enabled/disabled using the SleepModeEnable register. 
Resets from the ISI or USB block reset everything except its own section (section 2 or 3). 

20 Tab le 9 7T able 7 . Reset domains 



Reset signal 


Domain 


reset_dom[0] 


Section 0 pclk domain (PEP) 


reset_dom[1] 


Section 1 pclk domain (CPU) 


reset_dom[2] 


Section 2 pclk domain (ISI) 


reset_dom[3] 


Section 3 usbclk/pclk domain 
(USB) 


reset_dom[4] 


doclk domain 


reset_dom[5] 


jclk domain 



The logic is given by 

if (reset_dg_n == 0) then 

25 reset_dom [5 : 0] = 0x00 // reset everything 

reset_src [4 : 0] = 0x01 

cfg_reset_n = 0 

sleep__mode_en[3:0] = 0x0 // re-awaken all sections 
elsif (tim_cpr_reset__n == 0) then 

30 reset_ciom[5:0] = 0x00 // reset everything except 
CPR config 
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10 



15 



20 



25 



30 



35 



reset_src [4:0] = 0x08 

cfg__reset_n = 1 

s 1 eep_mode_en [ 1 ] =0 
(awake already) 

elsif (usb_cpr_reset_n == 0) then 

reset_dom [5:0] 
CPR config 

reset_src [4 : 0] 

cf g_reset_n 

sleep_mode_en [1] 
section 3 is awalce 
elsif {isi_cpr_reset_n == 0) tlien 

reset_dom [5:0] 
CPR config 

reset_src [4:0] 

cf g_reset_n 

sleep_mode_en [1] 
section 2 is awake 
elsif { gp io_cpr_wakeup 

reset_dom [5:0] 

reset_src [4:0] 

cf g_reset_n 

s leep_mode_en [ 1 ] 
section 2 is awake 



= 0x08 

= 0x02 
= 1 
= 0 



= 0x04 

= 0x04 
= 1 
= 0 

= 1) then 
= 0x3C 
= 0x10 
= 1 
= 0 



// CPR config stays the same 
// re -awaken section 1 only 



// all except USB domain + 



// CPR config stays the same 
// re -awaken section 1 only. 



// all except IS I domain + 



// CPR config stays the same 
// re -awaken section 1 only. 



// PEP and CPU sections only 

// CPR config stays the same 
// re-awaken section 1 only. 



// default to on 

// CPR cfg 



else 

// propagate resets from reset section register 

reset_dom [5 : 0] = 0x3F 

cfg_reset_n = 1 

registers are not in any section 

sleep_mode_en [3 : 0] = sleep_mode_en [3 : 0] // stay the same 
by default 

if {reset_section_n[0] == 0) then 

// jclk domain 
// doc Ik domain 
// pclk section 0 domain 

0 ) then 

// pclk section 1 domain 

0 ) then 

// pclk section 2 domain 



40 



reset_dom [ 5 ] =0 
reset_dom[4] = 0 
reset_dom[0] = 0 

if (reset_section__n [1] 
reset_dom[l] = 0 

if {reset_section_n [2] 
reset_dom[2] = 0 
(ISI) 

if (reset section n[3] 



== 0) then 
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reset_dom [3] =0 // USB domain 

16.5.7 Sleep logic 

The sleep logic is used to generate gating signals for each of SoPECs clock domains. The gate 
5 enable (gatejdom) is generated based on the configured s!eep_mode_en and the internally 
generated jclkjenable signal. 
The logic is given by 

// clock gating for sleep modes 

gate_dom [5 : 0] = 0x0 // default to all clocks 

10 on 

if (sleep_mode_en [0] == 1) then // section 0 sleep 
gate_dom[0] =1 // pclk section 0 

gate_dom[4] =1 // doclk domain 

gate_dom[5] =1 // jclk domain 

15 if (sleep_mode_en [1] == 1) then // section 1 sleep 

gate_dom[l] =1 // pclk section 1 

if (sleepmodeen [2] == 1) then // section 2 sleep 
gate_dom[2] =1 // pclk section 2 

if {sleep_mode_en [3] == 1) then // section 3 sleep 
20 gate_dom[3] =1 // usb section 3 

// the jclk can be turned off by CDU signal 

if (jclk_enable == 0) then 
gate_dom[5] = 1 

The dock gating and sleep logic is clocked with the master jpclk clock which is not gated by this 
25 logic, but is synchronous to other pclk_section and jdk domains. 

Once a section is in sleep mode it cannot generate a reset to restart the device. For example if 
section 1 is in sleep mode then the watchdog timer is effectively disabled and cannot trigger a reset. 

16.5.8 Clock gate logic 

The clock gate logic is used to safely gate clocks without generating any glitches on the gated 
30 clock. When the enable is high the clock is active otherwise the clock is gated. 

16.5.9 Clock generator Logic 

The clock generator block contains the PLL, crystal oscillator, clock dividers and associated control 
logic. The PLL VCO frequency is at 960MHz locked to a 32 MHz refclk generated by the crystal 
oscillator. In test mode the xtalin signal can be driven directly by the test clock generator, the test 
35 clock will be reflected on the refdk signal to the PLL. 

16.5.9.1 Clock divider A 

The clock divider A block generates the 48MHz clock from the input 96MHz clock {pllouta) 
generated by the PLL. The divider is enabled only when the PLL has acquired lock. 

16.5.9.2 dock divider B 
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The clock divider B block generates the 160MHz clocks from the input 320MHz clock (plloutb) 
generated by the PLL. The divider Is enabled only when the PLL has acquired lock. 
16.6.9.3 PLL control state machine 

The PLL will go out of lock whenever pil_reset goes high (the PLL reset Is the only active high reset 
5 in the device) or if the configuration bits plljrangea, plljrangeb, p!l_mult, plljtune are changed. The 
PLL control state machine ensures that the rest of the device is protected from glitching clocks while 
the PLL is being reset or it's configuration is being changed. 

In the case of a hardware reset (the reset is deglitched), the state machine first disables the output 
clocks (via the clkjgate signal), it then holds the PLL in reset while its configuration bits are reset to 
10 default values. The state machine then releases the PLL reset and waits approx. 100us to allow the 
PLL to regain lock. Once the lock time has elapsed the state machine re-enables the output clocks 
and resets the remainder of the device via the reset_dg_n signal. 

When the CPU changes any of the configuration registers it must write to the PLLupdate register to 
allow the state machine to update the PLL to the new configuration setup. If a PLLUpdate is 

1 5 detected the state machine first gates the output clocks. It then holds the PLL In reset while the PLL 
configuration registers are updated. Once updated the PLL reset is released and the state machine 
waits approx 100us for the PLL to regain lock before re-enabling the output clocks. Any write to the 
PLLUpdate register will cause the state machine to perform the update operation regardless of 
whether the configuration values changed or not. 

20 All logic in the clock generator is clocked on bufrefclk which is always an active clock regardless of 
the state of the PLL. 
17 ROM Block 
Overview 

Th e ROM b l ock I nt e rfac e s to the CPU bus and conta i ns th e SoPEC boot cod e . The ROM b l ock 

25 cons i sts of tho CPU bus intorfoco, tho ROM macro and tho Chip I D macro. Tho curront ROM sizo is 
16 KByt e s i mp l omonted as a 4096 x32 macro. Acc e ss to th e ROM i s not cach e d because tho CPU 
enjoys fast (no moro than one cycle slow e r than a cach e acc e ss), unarbitrat e d acc e ss to tho ROM. 
Each SoPEC d e v i c e is r e qu i r e d to havo a un i que Ch i pID wh i ch is sot by b l ow i ng fuses at 
manufactur e . I BM's 300mm EC I D macro and a custom 112 - b i t EC I D macro are us e d to i mp le m e nt 

30 th e Chip I D offering 22 4 b i ts of l asor fuses. Tho exact number of fuso b i ts to bo usod for tho ChipID 
w i l l be det e rmined l ater but all bits are mado available to tho CPU. Tho EC I D macros allows al l 224 
bits to be road out i n paral l el and tho ROM block wi l l mako al l 22^ bits avai l ab l e i n tho 
FuB e ChiplD[N] reg i sters wh i ch aro readab le by th e CPU i n sup e rvisor mod e only. 
47r2 Boot operat i on 

35 Th e are two boot sconar i os for tho SoPEC d e v i c e name l y after power on and after being awok e n 
from s l oop mode. When th e dev i ce i s in s l eep mod e i t is hop e d that pow e r wi ll actua ll y bo remov e d 
from tho DRAM, CPU and most other per i ph e rals and so tho program cod e w i l l n e ed to b e freshly 
down l oad e d e ach t i me th e d e v i ce wakos up from s lee p mod e . I n ord e r to r e duce the wak e up boot 
t i mo (and hence th e p e rc ei v e d print l atency) c e rtain data it e ms ar e stor e d i n th e PSS b l ock (s ee 

40 soot l on 18). Thes e data items include the SHA 1 hash dig e st e xp e ct e d for the program(s) to b e 
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down l oad e d, tho mast e r/s l av e SoPEC i d and some configuration param e ters. Al l of thoso data 
itomo aro stored in th e PSS by the CPU pr i or to enter i ng sleep modo. The SHA - 1 valu e stored i n 
th e PSS i s ca l culat e d by th e CPU by decrypt i ng the signature of tho download e d program using th e 
appropr i ate pub li c k e y stored i n ROM. This compute int e nsiv e decrypt i on on l y ne e ds to tak e p l ace 
5 once as part of th e pow e r on boot s e qu e nc e - subs e qu e nt wak e up boot s e qu e nc e s will simply us e 
the r e sulting SHA - 1 d i g e st stor e d in th e PSS. Not e that th e digest on l y noods to b e stor e d in th e 
PSS boforo ontor i ng sloop modo and tho PSS can bo usod for temporary storage of any data at all 
other timos. 

The GPU is e xp e ct e d to be i n sup e rvisor mod e for the e ntir e boot sequ e nc e d e scrib e d by th e 
10 psoudocodo boiow. Note that tho boot soquonco has not boon f i nalisod but i o oxpootod to bo closo 
to tho follow i ng: 

±€ — (RcootSrc == 1) then // Rooct waa a power on rooct 

conf iguro_oopGC /-/^ — need — fee — oonf iguro — porio — (USB, — ISI, 

DMA, ICU etc . ) 

/t^ — OthcrwioQ — rcocte — was — a — walccup — rcect — ee — pcrio — etc . — wcro 

already configured 

PAUSE ; — wait until — I r qS emapho re — !-=« — 9 ^ — i.e. — wait until an 

interrupt hao been ocrviced 
if (IrqScmaphorc " DMAChanOMog) — then 

paroc_mog (DMAChanOMogPtr ) // thio routine will paroc tho 

meaoagc and talcc any 

// necoooary action e.g. programming 

the DMAChannell rcgiotoro 

claif — ( I r qC emaphor e = « — DMAChanlMag ) — then ^ — program — feae 

boon downloaded 

CalculatcdHaoh ^ gen_ohal (ProgramliOen, — Programs i g c ) 

p€ — (RcoetSrc == 1) then 

ExpoctcdHaoh « oig_decrypt (Programs ig,publiG_]cGy) 

GlOG 

BxpoGtodllaoh ° PSSHaoh 

— ( Expect Gdllaoh == CalculatGdHaoh) — thon 

j mp ( PrgramLoon) — t rang for control to the dovmloadGd 

program 

elac 

oend_hoot_mog ( " Program Authentication Failed" ) 

goto PAUSE; 

eloif — ( I rqS emaphor G — «a — timeout) — then /-/ — nothing — 3aa& 

happened 

if (RcDetSrc " 1) then 



15 



20 



25 



30 



35 



40 
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oloQp_modc ( ) // put SoPEC into olcop modQ to be woken 

up by USB/ Id activity 

cloc — // WG were wo]ccn up but nothing happoncd 

rcoQt_oopGG (rowcrOnRQOGt) 

5 cloe 

goto PAUSE 

The boot cod e p l aces no restr i ctions on th e activ i ty of any programs down l oad e d and auth e nt i cat e d 
by it oth e r than thos e i mpos e d by th e conf i gurat i on of th e MMU i .e. th e pr i nc i pa l function of th e boot 

10 codo i s to authent i cate that any programs downloaded by it aro from a trusted source. I t i s tho 

rosponG l b il ity of tho down l oad e d program to onouro that any code i t down l oads i s a l so authontioatod 
and that th e syst e m remains s e cur e . The down l oad e d program cod e i s also r e sponsib l e for setting 
the SoPEC I SIId (ooo sect i on 12.5 for a descr i pt i on of tho I SHd) i n o mu l t i - SoPEC syst e m. Soo tho 
"SoPEC Security Ov e rv ie w" docum e nt [9] for more detai l s of th e SoPEC s e curity f e atures. 

15 4^73 Implementation 

17.3.1 D e fin i t i ons of I/O 

Table 08. ROM Bloci< I /O 



Port name 


l=2ms 








Description 


Clocks and Resets 




4- 






prst_n 


Global reset. Synchronous to pclk, active low. 


Pelk 


1- 


In 


Global clock 


CPU Interface 


cpu_adr[14:2] 


4^ 


In 






CPU address bus. Only 13 bits aro required to 


decode the address space for this block. 


rom_cpu_data[31 : 


32 


Out 


Road data bus to the CPU 


0} 






4- 


In 


Common read/not write signal from the CPU 


cpu_rwn 




opu_acode[1 :0] 


2 


In 






CPU Access Code signals. These decode as 
follows: 

-GO — User program access 
-04 — User data access 


AQ — Suporvisor program access 
AA — Supervisor data access 




cpu_rom_sol 


1- 


In 


Block select from the CPU. When cpu_rom_ool 




is high cpu_adr is valid 






Out 




rom_cpu_rdy 


Ready signal to the CPU. When romjGpujrdy is 


high it indicates the last cycle of the access. For 


a read cycle this means the data on 
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romjjpujdlQtQ is valid. 


rom_cpu_berr 




Otrt 


ROM bus error signal to tho CPU Indicating an 




invalid access. 



17.3.2 Configuration rogistors 

Th e ROM block wil l on l y allow r e ad accesses to tho Fus e ChipiD r e gist e rs and the ROM with 
Guporvisor data opaco porm i sslons ( l .o. cpu_Qcodo[1:0} ~ 1 1). Writo accossoo w i th ouporv i sor data 
spac e p e rmiss i ons 

5 w i ll hav e no e ffoct. A l l other accoss o s with wil l r e su l t In romjopu_berr boing ass e rt e d. Th e CPU 
subsyst e m bus s l ave interfao o i s d e scr i b e d i n moro d e tail I n section Q. 4 .3. 
Tablo 99. ROM B l ock Reg i st e r Map 



Address JgOM fbasb 


Reqlste't~fel3^ 






Descnptidri '"^ '^^^^^^^^ ¥~ ^ > - ^ . 








0x^000 


FuseChiplDO 


32 




Value of corresDondino fuse bits 31 to Q 








of tho IBM 1 12 bit ECID macro. (Road 

*" " J / 


9x4004 


FusoChlplDI 


32 










Value of corresponding fuse bits 63 to 32 
of tho IBM 1 12 bit ECID macro. (Road 




Ox/1008 


FuseChiplD2 


32 










Value of corresponding fuse bits 95 to 64 
of tho IBM 1 12 bit ECID macro. (Road 




Ox^OOC 


FuseChiplDa 












Valuo of corresponding fuse bits 1 11 to 


96 of the IBM 1 12 bit ECID macro. (Road 


0x4010 


FuseChiplD4 


32 










Value of corresponding fuse bits 31 to 0 
of the Custom 112 bit ECID macro. (Road 




0x4044 


FuseChiplDS 


32 




Value of corresponding fuse bits 63 to 32 






of tho Custom 1 12 bit ECID macro. (Road 


r\r\\\i\ 
^' "7/ 


0x4018 


FuseChiplDS 


32 




Value of corresponding fuso bits 95 to 64 






of the Custom 112-bit ECID macro. (Road 


"yy 


0x401 C 


FuseChiplD7 


4€ 




Value of corresponding fuso bits 1 11 to 






96 of the Custom 1 12 bit ECID macro. 


(Road only) 



17.3.3 Sub Block Partit i on 



10 I BM offer two var i ants of tho i r ROM macros; A high performance v e rs i on (ROMHD) and a l ow 
pow e r v e rsion (ROMLD). It is like l y that tho l ow power vers i on w i l l b e us e d unl e ss som e 
i mpl e m e ntat i on i ssue requires th e h i gh performance version. Both v e rs i ons off e r th e same bit 
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donoity. The sub b l ock partit i on diagram be l ow doos not includo the clock i ng and tost signa l s for 
the ROM or EC I D macros. Th e CPU subsyst e m bus Intorfaoo i s doocr i bod In more detai l in 
sootion 11.d.3. 

17.3. 4 Tabl e 100. ROM B l ock intorna l s i gna l s 



Port namo 










Description 


Clocks and Resets 


prst_n 








Global reset. Synchronous to polk, activo low. 






Global clock 


Intornal Signals 


rom_adr[1 1 :0] 


43 


ROM address bus 






rom__sol 


1- 


Select signal to the ROM macro Instructing it to access 




the location at rom_adr 


rom oe 


4- 


Output enable signal to the ROM block 






rom_data[31 :0] 


32 


Data bus from the ROM macro to the CPU bus interface 






rom_dvalid 


4- 






Signal from the ROM macro indicating that the data on 
romjdatQ is valid for tho address on rom_adr 




fuse_data[31 :0] 


32 






Data from the Fu€oChipfD[N] register addrossod by 
fuco_rog_adr 


fuse_reg_adr[2:0] 


3 






Indicates which of tho FueoChipiD rogistors is boing 
addressed 



Sub b l ock signa l defin i t i on 

4« Power Safo Storage (PSS) B l ock 

4^t4 Overv i ew 

Tho PSS b l ock provides 128 bytes of storage spac o that wil l maintain its stat e when th e r e st of 
10 th e SoPEC d e v i c e is i n sleep mod e . Th e PSS is expected to be used pr i mari l y for the storag e of 
decrypted signatur e s associated w i th down l oaded programmed code but i t can also b e us e d to 
stor e any information that needs to surv i ve s l oop mod e ( e .g. conf i guration detai l s). Not e that the 
signature dig e st only neods to bo stor e d i n the PSS b e for e e nt e ring s l oop mode and tho PSS can 
be used for t e mporary storag e of any data at all other times. 
15 Pr i or to e nt e ring sl ee p mode th e CPU should stor e a ll of tho i nformation it w i l l nood on exit i ng 
s l oop mode i n tho PSS. On omorging from sloop mod e tho boot cod e i n ROM w ill road tho 
R e eotSrc r e gister i n th e CPR b l ock to det e rmin e which r e s e t sourc e caus e d th e wakeup. Tho 
reset source i nformation indicates whether or not the PSS conta i ns va li d stored data, and tho PSS 
data d e t e rmin e s th e typo of boot sequenc e to e xecute. I f for any r e ason a full power on boot 
20 sequenc e should b e p e rformed (e.g. th e pr i nt e r dr i v e r has be e n updated) th e n this is s i mp l y 
achieved by i nitiat i ng a fu ll software reset. 
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Noto that a res e t or a powordown (powordown is imp l omontod by clock gating) of tho PSS b l ock 
w i l l not cl e ar th e cont e nts of tho 1 28 byt e s of storage. I f clear i ng of th e PSS storage is r e quir e d, 
thon the CPU must write to each l ocation i nd i v i dua l ly. 

4^72 Implementation 

5 Tho storage area of th e PSS block wi l l be i mplomontod as a 128 byto register array. Tho array is 
l ocat e d from PSS_baso through to PSS_bas e *0x7F in th e addr e ss map. Th e PSS b l ock w i ll only 
a l low road or wr i te accesses w i th supervisor data spaco permissions ( i . e . cpu_ocodo[1 :0] - 1 1). 
Al l othor acc e ss e s wil l result in pGG_Gpu_b e rr b e ing assort e d. Th e CPU subsyst e m bus slav e 
I nt e rfac e i s descr i bed in mor e d e ta i l in section 1 1. 4 .3. 

10 4«T2r1 D e finitions of I /O 

Table 101. PSS Block I /O 



Port namo 




m 


Doscrlption 






Clocks and Resots 


prst_n 


4- 


In 


Global reset. Synchronous to pclk, active low. 






Pelk 


4- 


In 


Global clock 


CPU Interface 


cpu_adr[6:2] 


§ 


lA 






CPU address bus. Only 5 bits are required to 
decode the address spaco for this block. 




cpu_dataout[31 :0] 


32 




Shared write data bus from the CPU 






pss_cpu_data[31 :0] 


32 


Qtrt 


Read data bus to the CPU 








\ 




Common read/not write signal from the CPU 


cpus_rwn 




cpu_acode[1 :0] 


2 


>n 






CPU Access Code signals. These decode as 
follows: 

■00 — User program access 

-01 — User data access 

AQ — Supervisor program access 


AA — Supervisor data access 


cpu_pss_sol 


4- 


In 






Block select from tho CPU. When cpu _peG_Goi is 

high both cpa_acyr and cpu_dataout ore valid 




pss_cpu_rdy 


A- 


Out 






Ready signal to the CPU. When pGG_cpu_rdy is high 
it indicates the last cycle of the accoss. For a read 


cycle this means tho data on pGGjopu_data is valid. 




pss_cpu_berr 


4- 


Oi it 






PSS bus error signal to the CPU indicating an 
invalid accoss. 



19 Low Sp ee d Ser i a l I nterface (LSS) 
40r1 Overview 

15 The Low Spood Ser i a l I nterface (LSS) prov i des a mechanism for th e i nternal SoPEC CPU to 
communicat e w i th e xternal OA chips v i a two i nd e p e nd e nt LSS bus e s. Th e LSS commun i cat e s 
through th e GP I O b l ock to tho OA chips. Th i s a ll ows the OA chip pins to b e roused i n mult i 
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SoPEC onvironmonts. Tho LSS Master syst e m l ovo l int e rfaoo i s illustratod in Figure 75. Not e that 
muitipio QA ch i ps ar e a l lowed on each LSS bus. 

48t2 QA COMMUN I CAT I ON 

Tho SoPEC data i ntorfao e to the QA Chips i s a low sp ee d, 2 p i n, synchronous s e rial bus. Data is 
5 transf e rred to tho QA chips v i a th e ieGjdata pin synchronously with tho tefi_c//< pin. Wh e n the 
toc_c//c i s high tho data on l€G_dQta is d ee m e d to bo va l id. On l y tho LSS master in SoPEC can 
drive tho fss_clk pin, this pin is an input on l y to tho QA chips. Tho LSS block must b e ab le to 
i nterface w i th an op e n - col le ctor pufl - up bus. This means that wh e n th e LSS b l ock shou l d transm i t 
a l ogical zero i t wil l driv e 0 on tho bus, but when it should transm i t a logical 1 I t w il l l eave high 
10 i mp e danc e on th e bus ( I .e. it do e sn't driv e the bus). If a ll th e ag e nts on th e LSS bus adher e to this 
protoco l th e n ther e will be no i ssu e s w i th bus contention. 

Tho LSS block contro l s a l l commun i cat i on to and from th e QA ch i ps. Th e LSS block i s th e bus 
mast e r In a ll cas e s. Th e LSS block i nterprets a command r e gist e r sot by tho SoPEC CPU, 
In i tiates transactions to tho QA ch i p i n quost i on and optional l y accepts r e turn data. Any r e turn 

15 i nformation is pr e s e nt e d through tho conf i guration r e gist e rs to the SoPEC CPU. Tho LSS block 
i ndicat e s to th e CPU tho comp l et i on of a command or tho occurrence of an error via an interrupt. 
Tho LSS protocol can bo us e d to commun i cate with oth e r LSS slave devices (other than QA 
ch i ps). However should a LSS slave dev i ce hold the c l ock low (for whatev e r r e ason), I t wil l be In 
v i olation of th e LSS protocol and i s not supported. The LSS c l ock is only over dr i ven by the LSS 

20 master. 

19.2.1 Start and stop cond i tions 

Al l transmiss i ons on tho LSS bus are initiated by th e LSS mast e r i ssuing a START condit i on and 
terminated by tho LSS master i ssu i ng a STOP condit i on. START and STOP condit i ons ar e a l ways 
g e nerat e d by th e LSS mast e r. As i llustratod in Figur e 76, a START condit i on corresponds to a 
25 high to l ow transition on iGs^data whi l e fGC_clk is h i gh. A STOP cond i t i on corresponds to a l ow to 
h i gh transition on /GG_data whi l e /sc_c//c i s high. 

19.2.2 Data transfer 

Data Is transf e rred on tho LSS bus via a byte or i entat e d protocol. Bytes are transm i tted serial l y- 
Each byte Is sent most s i gnificant bit (MSB) first through to least significant b i t (LSB) l ast. On e 
30 clock puls e Is g e n e rated for each data bit transferr e d. Each byte must bo followed by an 
acknowledge bit. 

Tho data on tho tos_dota must bo stabl e during tho HIGH p e riod of tho iGG_cfk c l ock. Data may 
on l y chang e when iGGjolk is l ow. A transmitt e r outputs data after th e fa ll ing edge of IggjgIH and a 
rocoivor i nputs tho data at tho ris i ng edge of lGG_cik. Th i s data i s on l y considered as a va l id data 
35 bit at th e n e xt iGG_cik fa lli ng edg e prov i ded a START or STOP i s not d e t e cted in tho p e r i od b e for e 
tho noxt teg_c//c fa lli ng edge. A ll c l ock puls e s are generated by th e LSS block. Th e transm i tt e r 
r ele as e s tho iGc^data l in e (high) during the acknow le dg e clock pulse (ninth c l ock pu l se). The 
r e c ei v e r must pu ll down the iGs^data l i ne dur i ng th e aoknowiodgo clock pu l se so that it remains 
stabl e low dur i ng tho HIGH per i od of this clock pulse. 
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Data transf e rs follow th e format shown in Figure 77. Tho first byt e s e nt by th e LSS master after a 
START condition i s a pr i mary id byto, whoro bits 7 2 form a 6 - b i t pr i mary i d (0 is a g l obal id and 
wi ll address all QA Chips on a part i cular LSS bus), b i t 1 is an ovon parity b i t for the pr i mary id, 
and bit 0 forms the r e ad/ writ e s e nse. B i t 0 i s h i gh if th e fol l ow i ng command is a r e ad to th e 
5 pr i mary id g i ven or low for a writo command to that i d. An acknowlodgo i s generated by the QA 
ch i p(s) correspond i ng to th e giv e n i d (if such a ch i p ex i sts) by driving th e iee^data l i n e l ow 
synchronous with tho LSS master gonoratod ninth leejolk. 

19.2.3 Write proc e dur e 

Tho protOGol for a wr i t e access to a QA Chip ove r t h o LSS bus is i l lus tra t e d i n Figur e 79 b el ow. 

10 Th e LSS mast e r i n SoPEC initiat e s th e transact i on by g e n e rat i ng a START cond i tion on th e LSS 
bus. I t then transm i ts th e pr i mary id byt e w i th a 0 in b i t 0 to Indicat e that th e fo l low i ng command i s 
a wr i t e to tho pr i mary i d. An acknowl e dg e is g e n e rat e d by th e QA ch i p correspond i ng to th e giv e n 
primary id. Th e LSS master wi l l clock out M data bytes w i th tho s l ave QA Chip acknowl e dging 
e ach successfu l byto written. Onc e th e slav e QA chip has acknowledg e d the M* * * data byte the 

15 LSS mast e r i ssu e s a STOP condit i on to complete tho transfer. Tho QA ch i p gath e rs th e M data 
bytos together and interprets them as a command. Soo QA Chip Intorfaoo Specif i cat i on for more 
deta il s on the format of tho commands us e d to communicate w i th the QA chip[8]. Note that th e QA 
chip is free to not acknowl e dg e any byt e transmitt e d. Th e LSS master should r e spond by issuing on 
int e rrupt to th e CPU to indicat e this e rror. Th e CPU should th e n g e nerate a STOP condition on the LSS bus 

20 to grac e fully compl e t e th e transaction on th e LSS bus. 

19.2. 4 R e ad proc e dure 

Th e LSS mast e r i n SoPEC i n i t i ates th e transaction by generating a START condit i on on th e LSS 
bus. I t th e n transmits th e pr i mary id byt e with a 1 i n b i t 0 to i ndicate that the fo l iow i ng command i s 
a r e ad to th e primary id. An acknowl e dg e is generat e d by th e QA ch i p correspond i ng to th e giv e n 

25 primary id. The LSS master re l eases the iBsjetatQ bus and procoodo to c l ock tho expected 

numb e r of byt e s from th e QA chip w i th th e LSS mast e r acknowl e dging e ach succ e ssful byt e r e ad. 
Tho l ast expected byto is not acknowl e dg e d by th e LSS mast e r. It th e n compl e t e s tho transaction 
by gen e rating a STOP cond i tion on th e LSS bus. S ee QA Ch i p Int e rfac e Sp e cification for mor e 
d e tails on th e format of the commands us e d to communicate w i th th e QA chip[8]. 

30 40t3 I mplementation 

A block d i agram of tho LSS master is given i n F i gure 80. I t cons i sts of a block of configuration 
r e gist e rs that are programm e d by th e CPU and two i dent i ca l LSS mast e r units that g e n e rat e th e 
s i gna lli ng protocols on tho two LSS bus e s as we ll as i nt e rrupts to th e CPU. Th e CPU i nit i at e s and 
terminat e s transactions on tho LSS bus e s by wr i ting an appropr i at e command to th e command 

35 regist e r, wr i t e s byt e s to bo transmitted to a buffer and roads byt e s r e c e iv e d from a buff e r, and 
ch e cks the sourc e s of i nterrupts by r e ad i ng status registers. 

19.3.1 D e finitions of lO 

Table 102. LSS l O pins definitions 



Port nam e 



Pine I/O Descr i pt i on 
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Clocks and Rosots 



System C l ock 



prst_n 



System r e s e t, synchronous activ e low 



CPU intorfaco 



cpu_rwn 



Common r e ad/not wr i te signa l from tho CPU 



cpu_adr[6:2] 



5 



CPU addr e ss bus. Only 5 bits ar e r e qu i red to 



docodo th e addr e ss space for this block 



cpu_datao u t [ 31 :0] 



32 



Shar e d wr i t e data bus from th e CPU 



opu_acodo[1 :0] 



CPU acc e ss code signa l s. 

opu_acodo[Q] — Program (0) / Data (1) acc e ss 



opu_acode[1] — User (0) / Suporv i sor (1 ) acc e ss 



cpujss_sel 



Block se le ct from tho CPU. Whon cpu_l6s_G o l is 
high both cpu^adr and cpu_dotaout arc va l id 



l ss_cpu_rdy 



Oi if 



Ready s i gna l to th e CPU. Whon lGS_cpu_rdy i s high 
i t i ndicat e s th e l ast cycl e of th e access. For a wr i te 



cycle this m e ans cpujdataout has boon rog l storod 
by th e LSS b l ock and for a road cycl e th i s m e ans 



th e data on lGG_cpu_data i s va l id. 



ss_cpu_b e rr 



Out 



LSS bus e rror signa l to th e CPU. 



Iss_cpu_data[31:0] 32 



Oi if 



R e ad data bus to tho CPU 



iss_cpu_dobug_val i€^ 4- 



Activ e h i gh. I ndicat e s th e pr e s e nce of va l id d e bug 
data on iBGjopujdota, 



GP I O for LSS buses 



ss_gpio_dout[1 :0] 2 



LSS bus data output 



Bit 0 LSS bus 0 



Bit 1 LSS bus 1 



gpiojss_d i n[1:0] 



LSS bus data i nput 



B i tO LSS bus 0 



Bit 1 LSS bus 1 



lss_gp l o_ e [1 :0] 



Out 



LSS bus data output enabl e , active h i gh 



B i tO LSS bus 0 



Bit 1 LSS bus 1 



p-gp»0-0 ' k[1 :0] 



Out 



LSS bus c l ock output 



B i t 0 LSS bus 0 



Bit 1 LSS bus 1 



I CU i nterface 



Iss Jcu_irq[1 :0] 



Out 



L SS int e rrupt r e qu e sts 

Brt-O — i nt e rrupt assoc i at e d w i th LSS bus 0 



Btt-1 — int e rrupt assoc i at e d w i th LSS bus 1 



PEA23US 



222 



10.3.2 Configurat i on rogiot e rs 

Th e conf i gurat i on r e gist e rs in th e LSS b l ock ar e programm e d v i a the CPU i ntorfaco. R e f e r to 
section 1 1 .1 on pago 1 for tho doscr i ption of th e protoco l and t i m i ng d i agrams for road i ng and 
writ i ng registers in th e LSS bloc l <. Note that s i nc e addr e ss e s i n SoPEC ar e byto al i gn e d and th e 
5 CPU only supports 32 - b i t r e g i st e r r e ads and writes, th e lower 2 b i ts of the CPU addr e ss bus are 
not requ i r e d to decodo the address space for tho LSS block. Table 103 l ists tho conf i gurat i on 
registers in tho LSS b l ock. When road i ng a register that i s loss than 32 b i ts w i de zoros shou l d bo 
return e d on tho upper unusod b i t(s) of lesjopujdQtQ. 

Tho input cpu_acod e signa l i ndicat e s wh e th e r th e curr e nt CPU aooosG is supervisor, user, 
10 program or data. Tho configurat i on r e g i st e rs i n th e LSS block can on l y be road or wr i tt e n by a 
sup e rv i sor data acc e ss, i. e . wh e n cpu_QOodo oquals b11 . If tho current acc e ss i s a supervisor 
data access then tho LSS responds by assorting lcG_cpu_rdy for a single c l ock cyc l e. 
I f th e curr e nt acc e ss i s anything other than a supervisor data acc e ss, th e n th e LSS g e n e rat e s a 
bus e rror by ass e rt i ng l6e_cpu_b e rr for a single c l ock cycl e inst e ad of leejopujrdy as shown in 
15 soction 11 .4 on pago 1 . A wr i te access will bo ignored, and a road access wil l return zoro. 
Tabl e 103. LSS Control R e gist e rs 



Address 



(l!iSS^base !*^) 




Regist e r X 



Descriptiorf 




Contro l registers 



OxOO 



Reset 



0x4- 



A write to th i s r e g i st e r causes a rosot of th o 



9x04 



LssC l ockHighLow 
Durat i on 



4€ 



OxOOCS Les_c//c has a 50:50 duty cyc i o, this r e g i ster 



d e fin e s th e p e riod of lesjolk by means of 



spec i fy i ng th e duration ( i n polk cycles) that 
iGGjolk i s low (or high). 



Th e r e s e t valu e sp e cifi e s transmission over 



th e LSS bus at a nominal rate of 4 Q0kHz, 



corr e spond i ng to a low (or high) durat i on of 
200 polk (160Mhz) cycl e s. 



Register shou l d not b e s e t to valu e s le ss 
than 8. 



nyOft 



LssClocktoDataHo 6 



0x3 



Sp e cifi e s th e numb e r of pclk cycl e s that Data 
must remain va li d for after tho fall i ng edge of 



toe Glk. 



Min i mum value i s 3 cycles, and must to 
programm e d to b e le ss than 



LeGCIockHighLowDuration. 



SS bus 0 reg i sters 



PEA23US 



223 



LssO l ntStatus 



BiW — e rror dur i ng procossing of command, 



transm i ss i on 



transmission 



All tho b i ts in LGsOlntStatue ar e cl e ar e d wh e n 



th e LGcOCmd reg i ster g e ts wr i tt e n to. 
(R e ad on l y r e gist e r) 



LSS bus 0 i nterrupt status r e gisters 

B i t 0 command comp l otod succ e ssfu ll y 



not acknowlodgo r e c ei v e d aft e r 



of pr i mary id byto on LSS bus 0 



B i t 2 error during process i ng of command, 
not acknow le dg e recoivod after 



of data byt e on LSS bus 0 



LssOCurrontStato 



0x0 



G i v e s tho curr e nt stat e of tho LSS bus 0 



stat e machin e . (R e ad on l y rogistor). 
(Encoding wi l l bo sp e cified upon state 



machin e i mpl e mentation) 



LssOCmd 



24- 



QyQQ 

€060 



Command r e gist e r defining s e qu e nc e of 



ev e nts to p e rform on LSS bus 0 b e fore 



i nterrupt i ng CPU. 



A write to this r e g i st e r caus e s a l l th e bits i n 



th e LsGOfntStatuc r e gist e r to be c l ear e d as 



wel l as gonorating a l6G0_now_cmd pulse. 



0x1C - 0x2C 



LssOBuffor[1:0] &xa2 



0x0000 



LSS Data buff e r. Should bo fi l led w i th 



«eoo 



transmit data b e for e transm i t command, or 



r e ad data bytes rec e iv e d aft e r a va l id road 

command. 



LSS bus 1 r e gist e rs 



Lssl l ntStatus 



0x0 



LSS bus 1 int e rrupt status r e g i st e rs 
Bit-0 — command comp le ted successfully 



Bit-4 — e rror dur i ng process i ng of command, 



transmission 



not acknowlodgo received aftor 



of primary id byt e on LSS bus 1 



B i t 2 - e rror dur i ng proc e ss i ng of command, 
not acknow l edge rece i ved after 



transm i ss i on 



of data byte on LSS bus 1 



A ll the b i ts i n LeoHntStatue ar e c le ared wh e n 
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the LGGlCmd register gets written to. 


(Read only register ) 




LsslCurrentStato 


4 


0x0 


Gives the current state of the LSS bus 1 






state machine. (Read only register) 
(EncodinQ will be specified upon state 


i ■ I V«W> •■■ IW II ■ 1 li^l^^* I l««l IMMU^^) 1 J 


0x38 


LsslCmd 


24 








0x00= 
0000 


events to perform on LSS bus 1 before 


intorruptina OPU 

A write to this register causes all the bits in 


the LsGllntStatuG register to be cleared as 


well as generating a fGGl_now_cmd pulse. 




0x3C 0x4C 


Lss1Buffor[1:0] 




-oooe 


LSS Data buffer. Should be filled with 
transmit data before transmit command, or 




read data bytos received after a valid read 


command. 


Debug registers 




LssDebugSol[6:2] 




0x00 






Selects register for dobug output. This value 
is used as the input to the register decode 


logic instead of cpu_Qdr[6: 2} when the LSS 


block is not being accessed by the CPU, i.e. 


when cpujGG_Gef is 0. 


The output iGGjGpujdiebug_yalid is asserted 
to indicate that the data on iGGjopujdata is 




valid debug data. This data can bo 


mutliploxod onto chip pins during debug 
mode. 



1 9. 3. 2.1 LSS command r e giGtere 

The LSS command reg i stors define a soquenco of events to perform on th e r e spect i ve LSS bus 
before issuing an interrupt to the CPU. Th e re is a separate command reg i st e r and int e rrupt for 
e ach LSS bus. Th e format of th e command i s given in Tab le 10 4 . Th e CPU wr i tes to th e 



5 command r e g i st e r to i n i tiate a sequ e nce of events on an LSS bus. Onc e the sequenc e of e v e nts 
has comp le t e d or an e rror has occurr e d, an i nt e rrupt is sent back to the CPU. 
Som e e xample commands ar e : 

^- a s i ngle START cond i tion {Start - 1 , IdByt e Enabfo - 0, RdWrEnaU e - 0, Stop - 0) 

a s i ngle STOP cond i tion {Start - 0, IdByteEnabl e - 0, RdWrEnable " 0, Stop " 1) 

10 ^ a START cond i t i on fo ll ow e d by transmission of tho i d byte {Start - 1 , IdByt e Enatyi e " 1 , 

RdWrEnablo - 0, Stop - 0, IdByto contains primary id byt e ) 

^- a writ e transf e r of 20 bytes from tho data buffer {Start - 0, idBytoEnabio " 0, RdWrEnabie - 

1, RdWrSoneo - 0, Stop - 0, TxRxByt e Count 20) 
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^ a road transfer of 8 bytos i nto tho data buff e r {Start " 0, IdBytoEnabio - 0, RdWrEnablo - 

1 , RdWrSenGO - 1 , R e adNack - 0, Stop - 0, TxRxBytoCount - 8) 

a comp l ete read transaction of 1 6 bytes {Start - 1 , idByteEnabio ~ 1 , RdWrEnaNe ~ 1 , 

RdWrSer}€o " 1 , R e adNaok - Stop - 1 , IdSyto conta i ns primary id byto, TxRxByt e Count 
5 -16), Ota 

Th e CPU can thus program the number of byt e s to b e transmitt e d or roc el v e d (up to a max i mum 
of 20) on th e LSS bus befor e i t goto interrupted. Th i s a ll ows i t to insert arbitrary d e lays in a 
transfer at a byt e boundary. For oxampio tho CPU may want to transmit 30 byt e s to a QA ch i p but 
i nsert a dolay botwoon tho 20* * ^ and 21^ byt e s sont. I t do e s th i s by first wr i ting 20 bytes to th e data 

10 buffer. I t then wr i tes a command to g e nerat e a START cond i t i on, send tho primary Id byto and 
th e n transmit the 20 bytes from th e data buffer. When interrupted by th e LSS b l ock to i ndicate 
succ e ssful compl e tion of tho command th e CPU can then wr i te th e r e ma i n i ng 10 bytos to tho data 
buff e r. It can then wait for a defin e d per i od of tim e b e for e wr i ting a command to transm i t th e 10 
bytos from tho data buff e r and generate a STOP condition to t e rm i nat e th e transaction ov e r the 

15 LSS bu s . 

An int e rrupt to th e CPU is generated for ono cycio when any bit in LGsNlntStatuo is sot. Tho CPU 
can r e ad LGGNintStatus to d i scover th e source of the i nt e rrupt. Th e LesNintStatue registers are 
c le ar e d wh e n the CPU writes to tho LssNCmd regist e r. A nu l l command writo to th e LGsNCmd 
r e gist e r will caus e the LcGNIntStatuG r e gist e rs to c l ear and no n e w command to start. A null 
20 command is defined as Start, Idbyt e En a bl e , RdWrEnabf e and Stop a ll s e t to zero. 
Tab le 10^. LSS command reg i st e r descript i on 



bit(s) nam e D e script i on 

0 Start Wh e n 1 , i ssue a START condit i on on th e LSS bus. 

1- I dByt e Enabl e I D byt e transmit enab l e: 

A — transm i t byt e in IdByta fie l d 

9 — i gnore byte i n idByto fie l d 
2 RdWrEnablo R e ad/wr i t e transf e r enab l e: 

0 — i gnore settings of RdWrS e rjG e , R e adNack and 
TxRxBytoCount 

1 — i f RdWrSenso is 0, th e n p e rform a writo transf e r of 
TxRxBytoCour)t bytes from tho 

data buff e r. 

if RdWrSenso is 1 , thon perform a road transfer of 

TxRxBytoCount bytes into the 

data buff e r. Each byt e should b e acknowl e dged and 

tho l ast byto reooivod i s 

acknowledged/not acknowl e dg e d according to the 

setting of RoadNack, 
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3 


RdWrSense 


Re3d/write sense indicator! 
0 — wfite 
1 — road 


4 


ReadNaok 


indiCiites. for a road trnncfer whether to iccuo nn 




acknowledge or a not aoknowiedgo aftor the last byto 




rocoivod (Indicated by TxRxBytoCount). 


0 Issuo acknowledge aftor last byte rocoivod 


A — issue not aoknowlodge after last byto rocoivod. 


5 




When 1 , issue a STOP condition on tho LSS bus. 






reserved 


Must be 0 




IdByto 


Bvte to bo transmitted if idBvtQEnable Is 1 Bit 8 




corresponds to the LSB- 




TxRxBytoCount 








Number of bytes to be transmitted from tho data buffer or 
the number of bytes to be received into tho data buffer. 


Tho maximum value that should be programmed is 20, as 


the size of the data buffer is 20 bytes. Valid values are 1 


to 20, 0 is valid when RdWrEnablo ~ 0, othor oooos aro 


invalid andundofinod. 



Th e data buffer Is Implem e nted in tho LSS master block. When tho CPU writes to the LesNBuffor 
reg i sters tho data written is presented to the LSS mast e r block via the f€GN_buff e r_wrdata bus 
and configuration regist e rs b l ock pu l s e s th e leeN_buff e r_w e n b i t correspond i ng to th e r e gister 
5 written. For e xample if LssNBuffor[2] i s writt e n to fGeN_buffor_won[2] w il l be pulsed. When tho 
CPU r e ads tho LesNBuff e r reg i sters th e configurat i on rog i stors block reflect the lc€N_bufforjrdQta 
bus back to tho CPU. 
19.3.3 LSS mast e r un i t 

Th e LSS master un i t i s instantiatod for both LSS bus 0 and LSS bus 1 . It contro l s transact i ons on 
10 th e LSS bus by moans of the stat e machine shown in F i gure 83, wh i ch i nt e rpr e ts tho commands 
that ar e written by tho CPU. I t also conta i ns a single 20 byte data buffer used for transmitt i ng and 
receiving data. 

The CPU can write data to bo transm i tt e d on the LSS bus by wr i t i ng to th e LssNBuff e r r e gist e rs. I t 
can a l so r e ad data that th e LSS master un i t rocoivos on th o LSS bus by read i ng th e sam e 
15 reg i sters. Th e LSS mast e r a l ways transm i ts or rec ei ves byt e s to or from th e data buff e r i n th e 
same order. 

For a transmit command, LsBNBuff e r[0]f7:0] gets transm i tted first, then Le6NBuffor[0][15:8l 
LG6NBuffor[0][23:16l LcGNBuffor[0][31:2^l LGcNBuffor[1][7:0]an6 so on until TxRxBytoCount 
numb e r of byt e s aro transm i tted. A rocoivo command fills data to the buffer in tho somo order. 
20 Each n e w command the buffer start point i s reset. 

A ll stat e mach i n e outputs, flags and counters aro c l eared on reset. After a rosot tho state machine 
goes to tho Rocot otato and in i t i a li s e s tho LSS pins {ieG_Gik i s sot to 1 , iGGjdiQta i s tristotod and 
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al l owod to bo pul l od up to 1). Whon tho r e s e t condit i on is r e moved tho otato maohino transit i ono 
to tho Wait stato. 

I t r e mains i n the Wait stat e unt il lee_n e w_cmd equals 1 . I f th e Start bit of tho command is 0 th e 
stato machino procoodo d i rectly to tho ChockldBytoEnabio stato. I f tho Start bit is 1 i t procoods to 
5 th e G e n e rat s Start stato and i ssu e s a START condition on tho LSS bus. 

I n tho ChookldBytoEr\ablo stato, if tho IdBytoEnablo b i t of tho command is 0 tho stato machino 
proceodG d i r e ctly to tho ChockRdWrEnabl e stat e . I f th e fdSytoEnabio b i t Is 1 tho stat e mach i no 
e nt e rs th e S e ndldSyte stat e and th e byt e i n th e IdSyt e fie l d of tho command is transm i tted on the 
LSS. Th e WaitForldAck stat e i s th e n e nt e r e d. If th e byt e is acknowlodgod, th e stat e maohino 
10 procoodo to tho CheckRdWrEnabl e stat e . I f th e byte i s not acknow i edgod, tho stato maohin o 
procoods to tho Gonoratolntorrupt stato and i ssues an Interrupt to ind i cate a not acknowledge 
was rocoived after transm i ss i on of tho primary Id byte. 

I n th e Ch e okRdWrEr^ablo stato, i f th e RdWrErtabl e b i t of tho command i s 0 th e stato mach i ne 
procoods directly to tho CheckStop stat e . I f tho RdWrEnablo bit i s 1, cour^t i s loaded with tho 
15 valu e of th e TxRxByteCountf\ e\ 6 of th e command and the stato machine enters e ith e r th e 
R e c e iv e Byt e stat e i f th e RdWrS e nse b i t of the command i s 1 or tho Trar)GmitByt e stato i f tho 
RdWrSonso bit is 0. 

For a wr i to transact i on, tho stato mach i no koops transmitt i ng byt e s from tho data buffer, 
docromont i ng count after oach byt e transmitted, until count is 1 . If al l th o bytes aro succ e ssful l y 
20 transmitted th e stat e machin e procoods to tho CheckStop state. I f the slave QA chip not 

a cknow l edg e s a transmitt e d byt e , tho stato machine ind i cates this error by issu i ng an i nterrupt to 
tho CPU and th e n e nt e ring th e G e n e ratelntorrupt stato. 

For a read transact i on, tho stato machin e k ee ps r e c ei ving bytes i nto th e data buff e r, d e cr e m e nting 
count aft e r e ach byt e transm i tt e d, until count i s 1 . Aft e r each byto rocoived tho LSS master must 
25 i ssu e an acknowledge. After th e l ast e xp e ct e d byt e ( i . e . whon count is 1) th e stat e machin e 

ch e cks the R e adNack b i t of th e command to s ee wh e ther it must i ssue an acknowl e dg e or not 
acknowl e dge for that byt e . Th e CheckStop stat e i s then entered. 

In the ChockStop stat e . If tho Stop b i t of the command i s 0 tho state mach i n e proc ee ds dir e ctly to 
tho Gonorat e lnt e rrupt siQiQ. If tho Stop bit is 1 it procoodo to tho GonoratoStop stato and Issu e s a 

30 STOP cond i t i on on th e LSS bus b e for e proc ee ding to th o G e n e rat e lntorrupt qXjoXq. In both cases 
an i nt e rrupt i s issu e d to ind i cat e successfu l compl e tion of th e command. 
Tho stato machine then e nt e rs th e Wait stat e to awa i t th e n e xt command. When the stato 
machino reent e rs the Wait state th e output p i ns (ieajdata and iGSjcik) ar e not changed, th e y 
retain th e state of the last command. This al l ows tho poss i b ili ty of multi - command transactions. 

35 Th e CPU may abort th e curr e nt transfer at any t i m e by performing a wr i te to tho R e s e t reg i st e r of 
th e LSS b l ock. 

19.3.3.1 START and STOP gonoration 

START and STOP conditions, which s i gna l tho beg i nn i ng and ond of data transm i ssion, occur 
wh e n th e LSS master generates a fal l ing and ris i ng edge respect i vely on tho data wh i le tho clock 
40 i s h i gh. 
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I n th e G e n e rat e Start stat e , leQ_gpio_clk i s h e ld h i gh with iGsjgpiojo romain i ng d e assert e d (so th e 
data li n e Is pullod h i gh e xt e rna ll y) for LeeCtockHighLowDuration polk cycl e s. Thon l€c_gpio_e is 
ass e rted and lGG_gpio_dout i s pul le d l ow (to dr i v e a 0 on th e data l i no, oroating a fal li ng odge) w i th 
lGG_gpio_clk r e ma i n i ng h i gh for anoth e r LseCiockHighLowDurQtion pclk cyc le s. 
5 I n the Generat e Stop state, both leejgpiojGlk and lee jgpiojdout are pu lle d low fol l ow e d by th e 
assert i on of loejgpiojB to dr i vo a 0 whi l o tho clock i s low. Aftor LGGCIockHighLowDuration polk 
cycl e s, IcGjgpiojolk is sot h i gh. Aftor q further LsGCIockHighLowDuration pclk cyc le s, lGG_gpio_ e 
is d e ass e rted to re le as e th e data bus and croato a ris i ng e dg e on th e data bus during tho high 
p e riod of the clock. 

10 I f th e bus i s not i n th e r e quir e d stat e for start and stop g e n e rat i on {f€s_clk-^ , fGG_clQtQ-^ for start, 
and iGGjclkrA , lGG_data-0), th e stat e machine mov e s th e bus to th e corr e ct state and proooods as 
d e scrib e d abov e . Figur e 82 shows th e transition tim i ng from any bus stato to start and stop 
generation 

1 0. 3. 3. 2 dock pulGO g e n e ration 

15 Th e LSS mast e r ho l ds lGG_gpio_olk high whi l o tho LSS bus i s i nact i ve. A clock pu l se is gonoratod 
for each bit transm i tted or receiv e d ov e r th e LSS bus. I t is g e n e rat e d by first holding lGG_gpk>_Glk 
low for LGGClockHighLowDuration pclk cycl e s, and th e n high for LGGCtookHighLowDuration pclk 
cycles ■ 

19.3.3.3 Data D o glitching 

20 When data is r o c oi v e d in the LSS block i t i s pass e d to a d e- gl i tching c i rcuit. Th o d o gl i tch c i rcuit 
samp le s th e data 3 t i m e s on pclk and compares tho sampl e s. I f a ll 3 samples ore the samo thon 
the data i s pass e d, oth e rwis e the data i s i gnored. 

Note that tho LSS data input on SoPEC is double regist e r e d In th e GPIO b l ock befor e b e ing 
pass e d to th e LSS. 

25 19.3.3.4 Data r e c e ption 

Th e i nput data, gpio_jGG_di, i s first synchronis e d to th e pclk doma i n by m e ans of two flip flops 
clocked by pclk (tho doub l e reg i ster res i des in tho GPIO block) . Th e LSS master g e nerates a 
c l ock pulse for each bit r e c e iv e d. Th e output lGG_gpio_o i s deass e rt e d LGGCIockToData Hold pclk 
cycl e s aft e r th e fa lli ng e dg e of lGG_gpio_clk to r ele as e th e data bus. Th e valu e on th e 

30 synchronis e d gpiojssjdi is samp l ed Tetrobo numb e r of dock cyc le s aft e r th e r i sing edge of 
lGG_gpio_clk (th e data is de g li tched over a further 3 stage register to avo i d possible gl i tch 
d e t e ct i on). S ee F i gure 84 for further t i m i ng information. 

I n the Rec e ivoByto stat e , the state mach i n e g e n e rat e s 8 clock pu l ses. At each TGtrobo t i me after 
the r i s i ng e dge of lGG_gpio_clk the synchronis e d gpiojGGjdi i s sampled. The first bit sampled is 
35 LGGNBuffor[0J[7l tho second LGGNBuffor[0J[6l e tc to LGGNBuffor[0][0]. For each byte rec ei ved the 
stat e machin e ei th e r sends an NAK or an ACK d e pend i ng on th e command conf i gurat i on and tho 
numb e r of bytes rocoived. 

I n th e SondNack stato tho stato machine generat e s a single clock pulse. iGGjgpiojG i s deass e rt e d 
and th e LSS data l ine is pulled high external l y to i ssu e a not acknowledge. 
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In th e SondAck state th e state maohino gonoratos a singl e clock puloo. l6G_gpio_e i s assortod 
and a 0 dr i ven on lBBjgplo_dout after feg_gp/o_c/fe fal l ing odgo to issue an acknowlodgo. 
19,3.3,6 Data trancmieeion 

Th e LSS master g e n e rates a clock puls e for e ach bit transm i tted. Data i s output on tho LSS bus 
5 on tho falling odgo of l€Gjgpioj3lk. 

Wh e n tho LSS mast e r dr i ves a log i cal zero on tho bus i t w ill ass e rt Isejgpioj B and dr i ve a 0 on 
lGG__gpio_dout aft e r tog_gp/o_c//c falling odgo. iGGjgpiojo wil l rema i n assortod and leejgpiojdiout 
w i ll r e main low unti l th e next lGG_clk fa lli ng odgo. 

Wh e n tho LSS mast e r drives a l ogica l ono lGG_gpio_o shou l d bo d o asGortod at /sg_gp/o_c//c falling 
1 0 e dg e and r e main deassortod at loaot unt il the next lGGjgpio_clk fall i ng edge. This is b e cause tho 
LSS bus w i ll bo externa ll y pu l led up to log i ca l ono v i a a pu l l up roslstor. 

in tho Sondid byt e state, tho state machine g e nerates 8 clock pu l ses to transmit tho byt e in tho 
IdByt e fi e ld of tho current valid command. On e ach fa ll ing odgo of lGGjgpio_clk a b i t i s driv e n on 
th e data bus as outlined above. On the first fa l l i ng e dg e IdBytofJ] is driven on the data bus, on tho 

15 s e cond fa l l i ng odgo idByte[6] is driv e n out, etc. 

I n tho TranGmitSyto stat e , the stat e machine gonoratos 8 c l ock pu l s e s to transm i t the byto at tho 
output of th e transmit F I FO. On e ach fa ll ing odgo of lGGjgplo_clk a bit Is driven on th e data bus as 
out l in e d abov e . On tho first fall i ng odg e LGGNBuff e r[0][7] is driven on th e data bus, on th e s e cond 
fa ili ng e dg e LGGNBuffor[0}[6] i s dr i ven out, otc on to LsGNBuffor[0][7] b i ts. 

20 I n tho WaitForAck stat e , th e state mach i n e g e nerates a singl e clock puls e . At Tctrobo timo after 
th e rising edg e of lGG_gpio_clk th e synchronized gpiojGGjdi i s sampled. A 0 indicates ah 
acknowl e dg e and ockjd e t e Gt is pulsed, a 1 i ndicates a not acknow l edge and nQck_dotoot i s 
puls e d. 

10.3.3.6 Data rate Gontrol 

25 Th e CPU can contro l the data rat e by s e tting tho clock per i od of the LSS bus clock by 

programm i ng appropriate value in LGGClockHighLowDuration. The default setting for th e r e gister 
is 200 {pcik cycl e s) which corr e sponds to transmiss i on rat e of 4 00kHz on th e LSS bus (tho iGGjolk 
is high for LGGClockHighLowDuration cyclos thon l ow for LGGClockHighLowDuration cyc l osj. Tho 
lGG_clk w il l always have a 50:50 duty cycle. The LsGCIockHighLowDuration register shou l d not bo 

30 s e t to values l e ss than 8. 

Th e hold t i me of lGG_d a ta aft e r th e fal li ng e dg e of lGG__cik i s programmable by th e 
LGGCIocktoDatoHold register. This r e gister shou l d not be programm e d to l ess than 2 or greater 
than th e LsGCIockHighLowDuration value. 

19.3.3. 7 LSS moGtor timing parametors 

35 Th e LSS master t i m i ng parameters are shown in F i gure 8^ and th e associated va l u e s aro shown 
in Table 105 . 

Tab l e 105. LSS master t i ming parameters 



Parameter 


Description 




Rem 






LSS Master Driving 
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LSS c l ock p e r i od div i ded by 2 



g 



20 Q 



pc l k cycl e s 



Tstart_do l ay 



T i m e to start data odgo from ris i ng 



olook edge 





LGeCiooktoDataHold 



pc l k oyc l os 



Tstop_d el ay 



Tim e to stop data edg e from r i sing 
clock e dge 





LssCloGktoDatQHold 



polk cycl e s 



Tdata_s e tup 



T i m e from data sotup to ris i ng c l ock 

e dg e 



pclk cyc le s 



LGGCIocktoDataHofd 



Tdata ho l d 



T i m e from fall i ng clock odgo to data 



LcGCtocktoDataHoid 



pclk cycl e s 



Tack_s e tup 



T i m e that outgoing (N)Ack i s s e tup 
before lGe_clk r i s i ng e dg e 



pclk cycl e s 



LGGCIocktoDataHold 



Tack hold 



T i mo that outgoing (N)Aok is hold 



LGGCIocktoDataHold pc l k cycles 



after lGG_clk fa l ling odgo 



LSS Mast e r Samp li ng 



Tstrobe 



LSS mast e r strob e po i nt for 



Tp-2 



Incoming data and (N)Ack values 



pc l k cycles 



DRAM Subsystem 

20 DRAM I nterface Un i t (D I U) 

3QA Overview 

5 Figur e 85 shows how the D I U prov i d e s th e interfac e b e tw ee n the on chip 20 Mb i t e mb e dded 
DRAM and the rest of SoPEC. I n add i t i on to outl i ning the functiona li ty of the D I U, th i s chapter 
prov i d e s a top le v el overv i ew of the memory storage and accoss patterns of SoPEC and th e 
buffering required i n the various SoPEC blocks to support those access r e quiromonts. 
Th e main functiona li ty of the DIU is to arb i trat e between requests for access to the embedded 
10 DRAM and provide r e ad or wr i te occossos to tho roquostors. Th e D I U must also impl e m e nt tho 
i nit i a li sation soquonco and refresh l og i c for tho embedd e d DRAM. 

Th e arb i fration schomo uses a fu l ly programmab l e timeslot m e chan i sm for non - CPU requestors to 
m ee t th e bandw i dth and l atency r e qu i r e m e nts for each un i t, w i th unused slots re al l ocated to 
provide best effort acc e ss e s. Tho CPU i s a ll ow e d h i gh pr i or i ty access, g i ving it m i n i mum l at e ncy, 
15 but al l owing bounds to be placed on its bandwidth consumption. 

Th e i nterface b e tw e en the D I U and tho SoPEC requestors is similar to th e interface on PEC1 i .e. 
separate contro l , read data and writ e data busses. 
Th e e mbedded DRAM is used principally to stor e : 
— CPU program codo and data. 



20 



PEP (re)programming commands. 

Compressed pagos containing contono, b i- lev e l and raw tag data and h e ad e r Informat i on. 



Decompressed conton e and bi level data. 



Dot li no store during a pr i nt. 
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Pr i nt sotup information such as tag format structur e s, d i thor matr i oos and doad nozzio 

information. 

20i2 IBM Cu 1 1 Embedded DRAM 

20.2.1 Single bank 

5 SoPEC w ill uso the 1 .5 V cor e vo l tage option i n IBM's 0.13 jim o i aGS Cu 1 1 proooso. 

The random r e ad/write cyoio tim e and th e r e fr e sh cycl e time is 3 cyc l os at 160 MHz [16]. An opon 
pogo acooQs w i ll comploto in 1 cycl e if th e pag e mode s ele ct s i gnal i s c l ocked at 320 MHz or 2 
cyclos if the pago modo soloct signal is clock e d e v e ry 160 MHz cycl e . Th e pag e mode so l oct 
signal w ill b e clocked at 160 MHz in SoPEC in order to simplify timing closur e . Tho DRAM word 
10 siz e is 256 b i ts. 

Most SoPEC r o qucGt o rs wi ll mak e sing le 256 b i t DRAM acc e ss e s (soo Sect i on 20.4). Those 
accesses w i ll take 3 cycl e s as th e y ar e random acc e sses i. e . they w il l most li k e ly be to a d i fferent 
m e mory row than tho previous acc e ss. 

The ontiro 20 Mbit DRAM will bo imp l emented as a s i ngle memory bonk. I n Cu 11, the max i mum 
15 s i ngl e i nstanc e siz e i s 16 Mbit. Tho first 1 Mb i t ti le of each i nstanc e contains an ar e a ov e rh e ad so 
th e ch e ap e st solution i n t e rms of area is to have on l y 2 instanoos. 16 Mbit and 4 Mbit i nstances ■ 
would together consum e an ar e a of 14.63 mm^ as would 2 t i mes 10 Mb i t instances. 4 tim e s 5 Mbit 
i nstanc e s would requir e 17.2 mm^ T 

Th e instance size w ill d e t e rm i n e the fr e quency of r e fr e sh. Each refresh requiroo 3 clock cycl e s. I n 
20 Cu 1 1 each row consists of 8 columns of 256 b i t words. This m e ans that 10 Mb i t requir e s 5120 
rows. A compl e t e DRAM r e fr e sh is requir e d every 3.2 ms. Two t i mes 10 Mb i t instances would 
r e qu i r e a refr e sh every 100 clock cyc le s, if the i nstances ar e refreshed in para lle l. 
Th e SoPEC DRAM w i l l b e constructed as two 10 Mb i t i nstanc e s implomonted as a sing l e memory 

25 20t3 SoPEC Memory Usage Requirements 

Tho memory usage requirements for th e e mbedded DRAM ar e shown i n Tab l e 106 . 
Tab l e 106. Memory Usag e R e quirements 



B l ock 



Compr e ss e d pag e 20 4 8 Kbyt e s 



D e compr e ss e d 
Contono Store 



Spot li n e stor e 



108 Kbyt e 



5.1 Kbyte 



D e scr i pt i on 



Compressed data pago store for Bi 

level 

and conton e data 



1382 4 li nes with scale factor 6 - 2304 



p i xels, stor e 12 li n e s, 4 co l ors 108 



kB 

13824 linos w i th scal e factor 5 " 2765 



pixels, store 12 linos, A colors - 130 



kB 



1382 4 dots/ li no so 3 l in e s is 5.1 kB 
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Tag Format Structur e 



tags @ 800 dp i ) 



Typica l ly 12 Kbyt e (2.5 mm 



2.5 mm tags (1/1 0th i nch) @ 1600 dpi 
roquiro 160 dot linos - 160/38 4 x55 or 



23^ 



2.5 mm tags (1/1 0th Inch) @ 800 dp i 

roquiro 80/38 '1 x55 - 12 KB 



55 kB i n for 38 4 dot l in e tags 



Dith e r Matr i x store 



4 Kbyt e s 



6 4 x6 4 dither matrix Is 4 kB 



28x128 dith e r matr i x i s 16 kB 



256x256 d i th e r matr i x is 64 kB 



DNG Dead Nogzlo | l.4 Kbytes 



Delta e ncod e d, (10 b i t d el ta position + 
6 doad nozzio mask) x% Dnozz i o 



5% d e ad nozz l es r e qu i r e s (10+6)x 
692 Dnoz zios " 1 .4 Kbytes 



Dot l i no storo 



369.6 Kbytes 



Assum e e ach co l or row is s e parat e d 



by 5 dot l in e s on th e print h e ad 



Tho dot lin e stor e will b e 



0*5^1 0...50'»55 - 330 ha l f dot l ines "^ 



4 8 e xtra ha l f dot li nos (4 per dot row) 



60 oxtra half dot lines estimated to 



account for printhead m i sa li gnment - 



438 half dot l i nes. 



4 38 h a lf dot l i nos of 6012 dots - 



369.6Kbytes 



PCU Program code 8 Kbytes 



02^ commands of 6^ bits - 8 kB 



Kbytes 



Program cod e and data 



TOTAL 



2620 Kbytes (12 Kbyte TFS 
storage) 



Total storage is fixed to 2560 Kbytes to align to 20 Mbit DRAM. Th i s w ill mean that l ess 

space than noted in Table — may b e available for th e comprossod band stor e . 

5 20t4 SoPEC Memory Acce s s Pattern s 

Tabl e 107 shows a summary of th e blocks on SoPEC r e quiring acc e ss to th e e mb e dd e d DRAM 
and th e ir i nd i vidual memory acc e ss patterns. Most b l ocks w ill access tho DRAM in sing le 256 bit 
acc e ss e s. A l l accesses must b e padd e d to 256 bits except for 6 4 bit CDU write acc e ss e s and 
CPU write acc e ss e s. B i ts wh i ch shou l d not bo wr i tten ar e masked us i ng th e i nd i v i dua l DRAM b i t 
10 wr i t e inputs or byte wr i te inputs, d e p e nding on tho foundry. Using s i nglo 266 bit accesses moans 
that tho buffer i ng required In the SoPEC DRAM r e quest e rs will be min i mized. 

Tab le 107. M e mory access patterns of SoPEC DRAM Roquostors 



PEA23US 



233 





Direction 


Memory ocoess pattern 


UKAM requester 








R 


Single 256 bit roads. 






Singio 32 bit, 16 bit or 8 bit writes. 




SGB 


R 


Singlo 256-bit reads. 




W 


Single 256-bit writes, witli byte enables. 




R 


Single 256-bit reads of the compressed contone data. 








Each CDU acoess is a write to 4 oonsecutivo DRAM words in the 


same row but only 64 bits of oaoh word aro written with the remaining 


bits write masked. 

Tho acooss timo for this 4 word page mode burst is 3 + 2 + 2 +2 - 9 


cycles if the pago mode select signal is clocked at 160 MHz. 




1 

or U 


D 
K 


oingie ^oo Bit reaos. 




R 


Single 256 bit reads. 


SFU 


R 




Separate single 256 bit reads for previous and current line but sharing 
the same DIU interface 




W 


Single 256 bit writes. 


TE(TD) 


R 


Single 256 bit reads. Each read returns 2 times 1 28 bit tags. 


TE(TFS) 


R 


Single 256 bit reads. TFS is 136 bytes. This means there is unused 




data in the fifth 256 bit read. A total of 5 reads is required. 




=IGU 


R 


Singlo 256 bit reads. 128 x 128 dither matrix requires 4 reads per line 


with double buffering. 256 x 256 dither matrix requires 8 reads at the 


end of the line with single buffering. 






R 


Singlo 256 bit dead nozzle table roads. Each dead nozzle table read 




con tains 16 dead nozzio tables entries each of 10 delta bits plus 6 
dead nozzle mask bits. 




W 


Single 256 bit writes since enable/disable DRAM access per color 




plane. 


y=y 


R 


Single 256 bit reads since enable/disable DRAM access per oolor 


plane 


pey 


R 








executed with minimum latency. 

If this occurs between pages then there will be froo bandwidth as most 




of tho othor SoPEC Units will not be requesting from DRAM. If this 
occurs botwoon bands then the LDB, CDU and TE bandwidth will be 




free. So tho PCU should have a high priority to access to any spare 
bandwidth. 
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R e f re sh 



S i ngle refresh. 



20tS Buffering Required in SoPEC DRAM Reque s ters 

If e ach D I U aooess is a s i ngle 256 - b i t acc e ss th e n w e n ee d to provide a 256 b i t doub l e buffer i n 
th e DRAM r e qu e ster. If th e DRAM requ e st e r has a 64 - b i t i nterfac e th e n th i s can b e impl e ment e d 
as on 8 X 6^ b i t FIFO. 

Tab l e 108. Buffer s i z e s in SoPEC DRAM requesters 



DRAM R e qu e st e r 



D i rection 



Access patt e rns 



Buffer i ng r e qu i r e d in 
block 



S i ngl e 256 - b i t r e ads. 



Cach e . 



S i ng le 32 - bit writes but allowing 16 - b i t or 
byte oddrGssabio wr i t e s. 



Non e . 



S i ngle 256 bit roads. 



Double 256 b i t buffer. 



Sing le 256 b i t wr i tes, with byte e nab l es. 



Doub l e 256 bit buffer. 



S i ngle 256 bit roods of tho compressed 
contone data. 



Doubl e 256 - b i t buff e r. 



Each CDU access i s a write to 4 



Double half JPEG block 



consecutiv e DRAM words i n th e sam e buffer 



row but only 6A b i ts of each word ore 



wr i tt e n w i th th e rema i ning b i ts writ e 
masked. 



S i ng l e 256 bit roads. 



Tr i p le 256 b i t buffer. 



LSD 



Sing l e 256 bit r e ads. 



Doub le 256 b i t buffer. 



cell 



Separate sing le 256 bit reads for 



Double 256 bit buffer for 



pr e v i ous and our rent lin e but shar i ng [ each read chann el , 
the same DIU i nterfac e 



Single 256 b i t wr i t e s. 



Doub l e 256 bit buffer. 



Sing l e 256 bit reads. 



Doub le 256 - b i t buff e r. 



TE(TFS) 



S i ng le 256 bit r e ads. TFS is 136 bytes. 



Doub l e l ino buffer for 



Th i s means there is unused data i n th e 



36 byt e s impl e m e nted 



Fifth 256 b i t r e ad. A total of 5 r e ads i s in TE 



r e quir e d. 



HGU 



Single 256 b i t r e ads. 128 x 128 d i th e r 



Configurab le betw ee n 



matrix requir e s A r e ads per lin e with dou bio 1 28 byte buffer 
double buff e ring. 256 x 256 d i th e r matrix and 



requ i res 8 r e ads at th e e nd of th e li n e [s i ng le 256 byt e buff e r 
with s i ng le buff e r i ng. 



S i ng l e 256 bit roads 



Doubl e 256 - bit buffer. 



D ee p e r buff e ring could 
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b e sp e cifiod to copo with 
l oca l oluGt e rs of d e ad 



nozz l es. 



S i ng l e 256 b i t writ e s p e r onab l od 



Doub l o 256 bit buff e r per 



odd/ovon co l or piano. 



color piano. 



Sing le 256 b i t roads p e r e nabl e d 
odd/ e v e n color piano. 



Doublo 256 bit buffer por 

co l or piano. 



Sing le 256 bit roads. Each PCU 



S i ngle 266 bit buff e r. 



command i s 6A bits so oach 256 bit 



DRAM road can contain 4 PCU com 



mands. R e qu e sted command is r e ad 



from DRAM togeth e r w i th the noxt 3 



cont i guous 6 4 b i ts wh i ch aro cach e d to 



avoid unnocossary DRAM roads. 



R e fr e sh 



S i ng le r e fr e sh. 



None 



20^ 



SoPEC D I U Bandw i dt h Requirements 

Tab le 109. SoPEC D I U Bandw i dth Roqu i romonts 



B l ock Name Dir e ction 



cyc l es between 
ea ch 

256 bit DRAM 



acc e ss to m e et 



peak bandw i dth 



Number of 



Bandwidth 



wh i ch must be 



supp l i e d 
(b i ts/cyc l e) 



Average 



Bandw i dth 



(bits/cyc l e) 



Exampl e number of 
a l located 



t i mos l ots' '^ 



W 



3 ^ 32 



0.3033 



pn i I 



128 (SF - A), 288 | 64/n2 (SF-n). 
(SF - 6), 4-4 



32/1 0*n2 (SF-n), 



-(SF=§) 



oomprooc i on 4 



1.8 (SF-6), 
A (SF - 'I) 



0.09 (SF - 6), | 2 (SF-/1) 
0.2 (SF - /I) 



(44+ 



(40f4 



compr e ss i on) 



compross i on)5 



For i nd i vidual 



aooossos: 16 



6^/n2 (SF-n), 
•8 (SF - 6). 



32/n2 (SF-n)7. 2 (SF-6)8 



0.0 (SF - 6), 



n {SF-A) 



cyc le s (SF - 1), 36 



A (SF - 4) 2 (SF - 4) 



cyc le s (SF - 6), n2 



oyo le s (SF-n). 
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4 aooesQOs overy 
6^ cydos (SF -A), 



i mpl e m e nted as a 



pag e modo burst of 



^AA (SF -6), ^*n2 

(SF -n) cyclesG 



32 (SF - d). d8 (SFl32/n (SF-n) 
=-6)8 



S.'l (SF - 6), 
8 (SF - A) 



32/n (SF-n). 
S.'l (SF - 6), 



6 (SF-6) 



8 (SF-d) 



8 (SF - d) 



1— LJl—f 



2m- 



4- 



comprossion)10 



compression) 



Gompr e ss i on)1 1 



3P(j 



25613 



WO) 



2^244 



4:02 



.02 



TE(TFS) 



5 r e ads p e r I in e 15 



&r093 



HGU 



4 reads per li no for 0.07 4 



Ov074 



0 



128 X 128 d i thor 



matr i x16 



40§ — (§% — dead- 



2t4 — (clump of Orfr 



nozz le s 10 bit do l ta[d e ad nozzl e s) 
e ncod e d)17 



spac e d 



(equa l ly 3 
— dead 



nozzl e s) 



6 writ e s evefy|6 

26648 



8 r e ads eveFy|8 

25610 



6 



8 



25620 



R e fr e sh 



40024 



2 55 



3 ( e ffeot i vo) 



TOTAL 



SF-6: 31.9 SF - 6: 27.5 



SF - 6: 36 



SF-zlt^lL 



SF-d:31.2 



oxo l ud i ng CPU- 



e xc l ud i ng CPU oxoluding CPU SF- 4 : 4 1 



e xc l ud i ng CPU 



1 : Tho number of a l locat e d t i meslots is based on 6 4 timeslots o aoh of 1 b i t/cycio but brok e n down 

to a granu l ar i ty of 0.25 bit/cycl e . Bandw i dth is a l locat e d based on poak bandw i dth. 

2: Wiro sp ee d bandwidth for a A wire SCB configurat i on is 32 Mb i ts/s for e ach wire p l us 12 Mb i t/s 

for USB. Th i s i s a max i mum of 138 Mbit/s. Tho maximum offoct i vo data rato i s 26 Mbits/s for oach 

w i ro p l us 8 Mbit/s for USB. Th i s is 112 Mbit/s. 112 Mb i t/s i s 0.73 4 bits/cycio or 256 bits ovory 3 4 8 

cycl e s. 
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3: Wir e- sp e ed bandwidth for a 2 w i ro SCB conf i guration is 32 Mb i ts/s for oach wiro p l us 12 Mbit/s 
for USB. This is a max i mum of 7 4 Mb i t/s. Th e max i mum effootiv e data rat e is 26 Mbits/s for each 
w i ro p l us 8 Mbit/s for USB. Th i s is 60 Mbit/s. 60 Mb i t/s i s 0.303 bits/cyc i o or 256 bits ovory 650 
cyc le s. 

5 A: At 1:1 compress i on CDU must road a A co l or p i xe l (32 bits) every SF^cycl e s. 

5: At 10:1 av e rag e compr e ss i on CDU must road a 4 color pixe l (32 bits) ov e ry 1 0*S F ^cyc le s. 
6: 4 co l or pix e l (32 bits) i s r e qu i r e d, on average, by the CFU ovory SF^(scalo factor) cycles. 
Th e t i m e available to wr i te tho data Is a function of th e sizo of tho buffer in DRAM. 1 .5 buffering 
m e ans A color pixe l (32 bits) must b e written ovory SF^/ 2 (sca l e factor) cycl e s. Therefore, at a 
10 sca l e factor of SF, 64 bits ar e required ovory SF^ cyc l es. 

Sinc e 6 4 valid bits are written per 256 - bit write (F i gur e n pago370 on page Error! Bookmark 
not defined.) th e n th e DRAM is access e d e very SF^ cyc l es i .o. at SF4 an accocs every 16 cycles, 
at SF6 an access ovory 36 cyc le s. 

I f a page mod e burst of 4 acc e sses is used then each access takos (3*2*2 *2) equals 0 
15 cycl e s. This means at SF, a s e t of 4 back to back access e s must occur e v e ry 4 *SF^ cycl e s. Th i s 
assum e s th e pag e mode se l ect signa l is clocked at 160 MHz. CDU t i mos l ots therefor e tak e 9 

cycl e s. 

For sca l e factors l ower than A double buffer i ng w i ll b e us e d. 

7: The peak bandwidth i s tw i c e th e av e rag e bandwidth i n th e cas e of 1 .5 buffering. 
20 8: Each CDU(W) burst takos 0 cyc l es i nst e ad of 4 cyc le s for oth e r acc e sses so CDU t i mos l ots aro 
l onger. 

9: A co l or p i xel (32 b i ts) read by CFU e v e ry SFcyc le s. At SF 4 , 32 bits i s requ i r e d e v e ry 4 cyc l es or 
256 b i ts e v e ry 32 cyc le s. At SF6, 32bits e v e ry 6 cyc l es or 256 b i ts e v e ry 48 cycles. 
10: At 1 :1 compression r e qu i r e 1 bit/cycle or 256 bits every 256 cycles. 
25 11: Th e av e rag e bandwidth r e quir e d at 10:1 compress i on is 0.1 b i ts/cycle. 
12: Two s e parate reads of 1 b i t/cyc l e. 
13: Write at 1 bit/cycle. 

1 A: Each tag can b e consum e d i n at most 126 dot cycl e s and requires 128 bits. This is a 
max i mum rat e of 256 bits e v e ry 252 cycles. 
30 15: 1 7 X 64 bit reads p e r l in e i n PEC1 is 5 x 256 b i t r e ads per line i n SoPEC. Double lino buffered 
storag e . 

16: 128 bytes r e ad p e r lin e i s 4 x 256 b i t reads p e r li no. Doub le- l i n e buff e r e d storage. 
17: 5% d e ad nozz l es 10 bit delta encoded stored w i th 6 bit dead nozz l e mask requ i r e s 0.8 
bits/cycl e r e ad acc e ss or a 256 b i t acc e ss overy 320 cycl e s. Th i s assumes tho dead nozz le s ar e 
35 even l y spaced out. In practice dead nozzles aro l ikely to b e c l umped. Peak bandw i dth is 
e st i mat e d as 3 t i m e s average bandw i dth. 
18: 6 bits/cycIo requ i res 6 x 256 b i t wr i tes ovory 256 cycles. 

1 9 : 6 bits/160 MHz SoPEC cycle average but wil l poak at 2 x 6 bits per 106 MHz print head cycle 
or 8 bits/ SoPEC cyc l e. Tho PH I can equal i se tho DRAM access rate over tho l ino so that tho 
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poak rato equa l s th e averag e rate of 6 b i ts/ oyd e . Th e pr i nt h e ad is olock e d at an offoct i vo spood 
of 106 MHz. 

20: Assum e on e 256 r e ad p e r 256 cycl e s is suffic ie nt i . e . maximum l atency of 256 cyoloo por 
acc e ss i s a ll owabl e . 

5 21 : Refresh must occur ovory 3.2 ms. R e fr e sh occurs row at a time ovor 5120 rows of 2 parallol 
10 Mbit instanc e s. R e fr e sh must occur ovory 100 cycl e s. Each r e fr e sh takes 3 cycles. 

20t7 DIU B US TOPOLOGY 

20.7.1 Basic topology 

10 Tab l e 110. SoPEC DIU Requestors 
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Tab l e 110 shows th e D I U requ e st e rs i n SoPEC. There ar e 12 road r e qu e sters and 5 wr i t e 
requesters in SoPEC as compared with 8 r e ad request e rs and 4 write requestors in PEC1. 
R e fresh is an addit i onal r e qu e ster. 
15 In PEG1 , the interface between th e D I U and the DIU r e questers had th e fol l owing main f e atures: 

^ s e parat e contro l and addr e ss s i gna l s por D I U requester mu l tiplexed in the DIU accord i ng to 

the arbitration scheme, 

-* s e parat e e ^ i - b i t write data bus for each DRAM write r e qu e st e r multip le x e d i n th e D I U, 

common 6^ b i t read bus from the D I U with separate enabl e s to e ach DIU r e ad requester. 

20 T i ming closur e for this bussing scheme was stra i ght - forward in PEC1 . This suggests that a simi l ar 
sch e m e wil l also achi e v e t i m i ng c l osure in SoPEC. SoPEC has 5 mor e DRAM r e questors but it 
wi ll bo i n a 0.13 um process w i th more meta l layers and SoPEC wi ll run at approximately th e 
same spood as PEC1. 

Us i ng 256 bit buss e s would match the data width of the emb e dd e d DRAM but such l argo buss e s 
25 may resu l t i n an i ncrease in size of the D I U and th e ent i re SoPEC ch i p. Th e SoPEC requestors 

would require doub l e 256 bit w i d e buffers to match th e 256 b i t buss e s. These buffers, wh i ch must 
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bo i mp l omontod i n flip flops, arc loss aroa offioiont than 8 doop 64 bit wid e regist e r arrays which 
can bo usod with 64 bit busoos. SoPEC w ill thoroforo uoo 6 4- bit data bussos. Uso of 256 b i t 
buss e s wou l d howev e r simpl i fy th e D I U i mp l em e ntat i on as local buff e r i ng of 256 b i t DRAM data 
would not bo required with i n tho D I U. 
5 20.7.1.1 CPU DRAM QCG066 

The CPU i s tho only D I U requestor for which access l at e ncy i s critica l . Al l DIU wr i t e roquosters 
transfer write data to tho DIU using soparato po i nt to point bussos. Tho CPU will uso tho 
cpu_datQout[31:0] bus. CPU r e ads wi ll not bo over tho shared 6 4 bit road bus. I nstead, CPU 
r e ads wil l us e a s e parate 256 - b i t r e ad bus. 

10 20.7.2 Mak i ng more o ffic io nt us e of DRAM bandwidth 

Tho ombodd e d DRAM i s 256 b i ts wido. Tho 4 cyolos i t tai^os to transf e r the 256 b i ts ov e r th e 6 4 
bit data bussos of SoPEC moans that effect i vely oach access w i l l b e at l e ast 4 cyc l es long. It 
tak e s only 3 cycl e s to actua ll y do a 256 b i t random DRAM access i n tho case of I BM DRAM. 

20. 7. 2. 1 Common road buG 

15 If w e have a common r e ad data bus, as in PEC1 , th e n i f w e ar e doing back to back road acc e ss e s 
th e n e xt DRAM road cannot start unt il tho road data bus is free. So e ach DRAM r e ad access can 
occur only every 4 cyolos. This is shown i n F i gur e 86 with tho actua l DRAM access tak i ng 3 
cyc l es leaving 1 unused cycio per accoss. 

20. 7. 2. 2 fntor/oaving CPU and nan CPU road d CCSSS S S 

20 Th e CPU has a separat e 256 b i t read bus. Al l other road acc e ss e s are 256 bit acc e ss e s ar e over 
a shar e d 6^ b i t r e ad bus. I nterleav i ng CPU and non CPU read accesses moans the e ff e ct i ve 
durat i on of an Inter l eaved accoss timoslot is tho DRAM accoss t i mo (3 cycles) rath e r than 4 
cycl e s. 

Figur e 87 shows i nterloavod CPU and non CPU road accossos. 

25 20. 7. 2. 3 Int e rl e aving road and writ e aco e sG e e 

Having separat e write data buss e s m e ans writo accesses con bo interleaved w i th oach oth e r and 
with r e ad acc e ss e s. So now the effect i ve durat i on of an i nt e rleaved accoss t i moslot is tho DRAM 
access t i me (3 cyc l es) rather than 4 cycles. Interleaving is achieved by order i ng tho DIU 
arb i tration slot al l ocat i on appropriately. 

30 F i gure 88 shows Interleaved road and write acc e ss e s. F i gur e 89 shows int e r le av e d wr i te 
accossos. 

256 b i t wr i to data tak e s 4 cyc le s to transm i t ov e r 6 4 b i t bussos so a 256 bit buff e r i s r e quired in 
th e DIU to gath e r th e write data from tho wr i to r e qu e st e r. Tho exception is CPU write data which 
35 i s transferr e d in a singl e cycl e . 

Figure 89 shows mu l tip le wr i te acc e sses being i nter l eaved to obtain 3 oycio DRAM acc e ss. 
Since two wr i t e acc e sses can over l ap two sots of 256 bit wr i te buffers and mu l tip le xors to conn e ct 
two wr i te requestors simultan e ously to tho D i U are required. 

Write roquoGtors on l y require approx i mato l y one th i rd of tho total non CPU bandwidth. This 
40 moans that a ru l e can bo i ntroduced such that non CPU wr i to requestors ar e not allocated 
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adjac e nt t i m e slots. This m e ans that a s i ngl e 256 bit writ e buffer and mu l t i ploxor to connect the 
ono wr i te requ e stor at a timo to tho DIU is al l that is r e qu i red. 

Noto that i f tho ru l o proh i b i t i ng back-to book non CPU wr i tes is not adh e r e d to, then the second 
wr i te slot of any att e mpt e d such pair will bo disrogardod and ro a ll ocat e d undor tho unusod road 
5 round rob i n scheme. 

20.7.3 Bus widths summary 

Tab le 111. SoPEC DIU Request e rs Data Bus W i dth 
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10 20.7. 4 Conc l uo i ons 

Timeslots shou l d b e programmed to maxim i s e int e rl e av i ng of shared road bus acc e sses w i th 
oth e r acc e ss e s for 3 cycl e DRAM acc e ss. Th e int e rl e aving is ach i eved by ordering the D I U 
arb i tration slot a l location appropriat el y. CPU arb i tration has b ee n d e signed to maxim i se 
inter l eaving with non CPU roquootoro 

15 20^8 SoPEC DRAM ADDRES S ING SCHEME 

Tho omboddod DRAM is compos e d of 256 bit words. How e v e r th e CPU subsystem may need to 
writ e i nd i v i dual bytes of DRAM. Therefore it was decid e d to mak e th e D I U byte addrossab l o. 22 
b i ts are required to byt e address 20 Mbit of DRAM. 

Most blocks r e ad or wr i te 256 b i t words of DRAM. Therefor e on l y tho top 1 7 b i ts i . e . b i ts 21 to 5 
20 ar e requ i red to address 256 b i t word aligned l ocations. 
Tho exceptions are 

CDU which can writ e 6 4 b i ts so only th e top 19 addr e ss b i ts i .e. bits 21 - 3 ar e r e qu i red. 

CPU writes can be 8, 16 or 32 b i ts. Th e cpu_diu_wmaek[1 :0] pins i ndicate whether to wr i te 

8, 16 or 32 b i ts. 

25 All D I U acc e sses must bo within th e sam e 256 b i t a l ign e d DRAM word. Tho oxcopt i on is the CDU 
write access wh i ch is a wr i to of 6 4 bits to e ach of 4 contiguous 256 b i t DRAM words. 
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20.8.1 Writo Address Constaints Spocifio to tho CDU 

Noto tho fo ll ow i ng cond i t i ons which opp l y to th e CDU writo addroos, du e to tho four masked page 
modo writes wh i ch occur whonovor a CDU wr i te slot i s arb i trated. 
Th e CDU addr e ss pr e sented to tho DIU i s cdu_d i u_wadr[21:3]. 

^ Bits [1:3] ind i cat e which 6 4 b i t s e gm e nt out of 256 b i ts shou l d be written in 4 sucoesQ i vo 

masked page mode wr i tes. 
^ Each 10 Mb i t DRAM macro has an input addr e ss pert of width [15:0]. Of these bits, [2:0] 

ar e th e "page address". Pago modo wr i t e s, wh e re you just vary those LSBg (i.e. tho "page" 

or column address), but k ee p th e r e st of th e addr e ss constant, ar e fast e r than random 

writ e s. Th i s i s tak e n advantag e offer CDU wr i tes. 
To guarant ee aga i nst trying to span a page boundary, th e DIU treats "cdu_diu_wadr[6:5]" 

as be i ng f i xed at "00". 

^ From cdu_diu_wadr[21 :3], a i n i tial address of cdu_d i u_wadr[21 :7] , concatenat e d w i th "00", 

is us e d as th e starting location for th e first CDU write. Th i s address is then auto 
i ncremented a further three t i mes. 

2O79 D I U Protocols 

The D I U protocols are 

^ Pipelined i. e . the fol l ow i ng transaction i s in i t i ated wh i le the previous transfer is in progr e ss. 

Spl i t transact i on i.e. th e transact i on i s split i nto i ndependent address and data transfers. 

20.9.1 R e ad Protocol except CPU 

Tho SoPEC road requ e stors, except for the CPU, p e rform sing l e 256 bit r e ad accesses w i th the 
r e ad data being transf e rr e d from th e DIU in 4 cons e cutiv e cyc l es over a shar e d 64 b i t read bus, 
diu_data[63:0]. Tho road address <unit>_diu_radr[21:5] is 256-bit align e d. 
Th e read protoco l is: 

<unit>_diu_rr e q i s ass e rt e d a l ong w i th a va l id <unit>_diu_radr[21:5], 

The D I U acknowledges tho requ e st with diu_<unit^_rack. The request should b e 

d e assorted. Th e minimum number of cyc l es between <unit>jdiujroq being assort e d and 
the D I U generat i ng an diu_<unit>_rack strobe is 2 cyc le s (1 cycl e to r e gist e r tho request, 1 
cyc l e to perform the arbitration seo Section 20.1 4 .10). 

Th e read data is returned on dtu_datQ[63:0] and i ts va li dity is Ind i cat e d by 

diu_<unit>_rva/id. The ov e ra l l 256 bits of data are transferred over four cyc l es in the ord e r : 
[63:0] -^[127:6^] > [101:128] r-^ [255:102]. 

When four diu_<unit>_rvalid pulses have boon rece i ved then if there i s a further request 

<unit>_diu_rr e q should b e assorted aga i n. diu_<unit>_rvoiid be a l ways be asserted by 
the DIU for four consecutivo cyc le s. There i s a fix e d gap of 2 cycles between 
diu_<unit>_rQck and the f i rst diu_<unit>_rvalid pu l se. For mor e detai l on the t i ming of such 
r e ads and th e impl i cations for back to back sequences, see Section 20.1 4.10. 
20.0.2 Road Protoco l for CPU 
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The CPU perfornriG s i ngio 256 bit road aocossos w i th th e r e ad data bo i ng tranGforrod from th e DiU 

over a dodicatod 256 b i t road bus for DRAM data, drQm_opu_data[256:0l Th e read address 

cpujadr[21:6] i s 256 bit alignod. 

Tho CPU D i U road protoco l is: 
5 Gpujdiujrroq is ass e rt e d along with a va l id cpu_adr[21:5}. 

^ Th e DIU acknowl e dg e s tho roquost with diu_cpu_rack. The r e qu e st should bo doassortod. 

Th e minimum number of cycl e s b e tw ee n opujdlujrreq boing ass e rt e d and the D I U 
g e n e rat i ng a cpujdiujrack strobo is 1 cycle (1 cyc l e to perform tho arbitration soo Section 
20.1^.10). 

10 Th e r e ad data is returned on drQm_cpu_datQ[255:0] on6 i ts va li dity is ind i cated by 

dfU_cpu_rvQlid. 

Wh e n the diu_cpu_rvafid pulso has boon roco i vod thon if th e r e is a further 

r e qu e st cpujdiujrreq should bo ass e rt e d again. Tho diu_cpu_rvalid puls e w i th a gap of 1 cycio 
aft e r rack (1 cycle for tho r e ad data to b e returned from the DRAM soo Sect i on 20.1 ^.10). 
15 20.9.3 — Write Protocol e xc e pt CPU and CDU 

Th e SoPEC wr i te requestors, exc e pt for th e CPU and CDU, perform s i ngle 256 bit write accossos 
with the write data being transferr e d to th e DIU i n 4 consecutiv e cycl e s ov e r d e d i cat e d point to 
point 6 4 b i t wr i t e data buss e s. The wr i t e address <unit>_diu_wadr[21:5] is 256 bit al i gnod. 
Tho write protocol is: 

20 <unit>_diu_wroq Is asGcrt o d along with a va li d <unit>_diu_wadr[21:5]. 

^ Tho D I U acknow l odgoG the roquost with diu_<unit>_wack. The request shou l d be 

d e ass e rt e d. The minimum numb e r of oyol e s betwoon <unit>_diu_wr e q b e ing asserted and 
th e DIU generating an diu_<unit>_waGk Gtrobo i s 2 cycios (1 cycl e to r e g i st e r th e r e quest, 1 
cycle to perform tho arb i tration — soo Section 20.1 4 .10). 

25 ^ I n the c l ock cycios fol l ow i ng diu_<unit>_wack th e SoPEC Un i t outputs tho 

<unit>_diujdata[63:0l assort i ng <unit>_diu_wvQlid. Tho first <unit>jdiu_wvQlid pulso can 
occur th e c l ock cycl e aft e r diu_<unit>_waok, <unit>jdlu_w/alid r e mains ass e rt e d for tho 
following 3 clock cyc le s. This allows for reading from an SRAM whoro now data i s ava i lab l e 
i n tho clock cyc l e aft e r th e addr e ss has changed e.g. tho addr e ss for the second 6 4 b i ts of 

30 writo data is ava i labl e the cyc le aft e r diu_<unit>_wack moan i ng tho s e cond 6 4- b i ts of wr i t e 

data i s a furth e r cyc l e l ater. Th e overa ll 256 bits of data i s transferred over four cycl e s in tho 
order: [63:0] ^ [127:64] > [191:128] > [255:102]. 

^ Note that for SCB wr i t e s, each 6 4 b i t quarter word has an 8 - bit byte enable mask 

associat e d w i th it. A d i ff e r e nt mask I s us e d with o ao h quart e r - word. The 4 mask valu e s are 

35 transf e rr e d along w i th thoir associat e d data, as shown in F i gur e 92. 

^ If four cons e cut i v e <unit>_diu_wvQ{id puls e s are not provided by th e r e qu e st e r, thon the 

arb i tration l og i c w i l l d i sregard tho writ e and r e a l locat e the slot under th e unus e d r e ad 
round rob i n scheme. 

Onco al l tho wr i to data has boon output th e n i f th e r e i s a furth e r r e quest <unit>_dlu_wr e q shou l d 
40 b e ass e rt e d again. 
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20.9. 4 CPU Write Protoco l 

Th e CPU porforms s ing l e 128 - bit writes to th e D I U on a d e d i catod wr i t e bus, 
cpu__diu_wdQtQ[127:0]. Thore i s an aooompanying wr i to mask, opujdiu_wmQek[1 5:0], cons i st i ng 
of 16 byt e e nab l es and th e CPU a l so supp lie s a 128 - b i t al i gn e d writ e address on 
Gpu_diu_wadr[21:4]. Note that writes aro poetod by the CPU to the D I U and stored in a 1 deep 
buff e r. Wh e n the DAU subsequ e ntly arbitrates in favour of the CPU, th e cont e nts of tho buffer are 
wr i tt e n to DRAM. 

Tho CPU wr i t e protoco l , il lustrat e d in F i gur e 93., is as fo ll ows : 

^ Th e D I U signa l s to the CPU via diu_cpu_writo_rdy thai its writo buffer is empty and that th e 

CPU may post a writo whonovor i t wishes. 
The CPU assorts cpu_diu_wdatavalid to enable a write into tho buffer and to confirm th e 

valid i ty of tho writ e addr e ss, data and mask. 
^ Th e D I U d e- ass e rts diujopu_writ e jrdy i n th e fo ll owing cycle to ind i oato that i ts buffer is full 

and that the post e d wr i t e is pond i ng e xecution. 
^ Wh e n th e CPU i s next awarded a DRAM access by th e DAU, th e buff e r's cont e nts ar e 

writt e n to memory. Th e D I U ro ass e rts d/u_cpu_write_rdy onco tho wr i to data has boon 

captured by DRAM, nam el y i n the "MSN1" DCU state. 
^ Th e CPU can then, if it w i shes, asynchronously use tho now vafuo of ,diu_cpu__wn'to_rdy to 

e nabl e a n e w posted writo in the sam e "MSN1" cyc l o. 
20.0.5 CDU Writo Protoco l 

Th e CDU performs four 64 b i t word wr i tes to 4 cont i guous 256 - bit DRAM address e s with th e first 
addr e ss specif i ed by cdu_diu_wadr[21:3]. Tho wr i t e addr e ss cdu_diu_wadr[21 :5] i s 256 bit 
a li gned with b i ts cdu_diu_wadr[^:3] a l lowing tho 6*1 bit word to bo so l octod. 
Th e writ e protocol i s: 

cdujd'iu_wdQtQ is ass e rted along w i th a valid cdu_diu_wQdr[21 :3]. 

Tho D I U acknowl e dges tho requ e st w i th diu_cdu_wQck. Th e r e quest shou l d b e d e ass e rt e d. 

Th e minimum number of cyc l es between cdujdiu_wreq being assorted and th e D I U 
g e n e rat i ng an diu_cdu_wack strobe i s 2 cyc l es (1 cyc le to r e g i st e r th e r e qu e st, 1 cycle to 
p e rform the arb i tration — see Section 20.14.10). 

^ In tho c l ock cycl e s fo ll ow i ng diu__cdu_wack th e CDU outputs tho cdu_diu_dQtQ[63:0l 

togothor w i th asserted cdujdiu_wvaUd. Th e f i rst cdu_diu_wvalid pu l se can occur tho clock 
cyc le after diu_cdu_wQck. cdu_diu_wvQfid remains ass e rted for th e fo l lowing 3 clock cycl e s. 
This al l ows for r e ad i ng from an SRAM wh e re now data is ava i lab le in th e c l ock cycl e after 
tho address has changed e.g. tho address for tho second 64 b i ts of wr i te data is ava i labl e 
th e cycl e after diu_cdu_wQck meaning tho s e cond 64 bits of wr i te data is a further cyc l o 
lat e r. Data is transf e rr e d ov e r the 4 cyclo w i ndow i n an order, such that e ach succ e ss i v e 64 
b i ts w ill be wr i tt e n to a monoton i cal l y increas i ng (by 1 l ocat i on) 256 b i t DRAM word. 

^ I f four cons e cut i v e Gdujdlu_wvQlid pu l ses ore not provid e d with tho data, thon tho 

arb i tration l ogic w il l disregard tho wr i te and ro a ll ocat e th e slot und e r th e unused road 
round robin sch e me. 
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^ Onc e all th e writ e data has b e en output th e n i f th e re i s a further requ e st cdu_diu_wr e q 

should b e ass e rt e d again. 

20.10 D I U An BI TRATiON MEC H AN I SM 

The D I U w i li arb i trat e acc e ss to th e embedd e d DRAM. Tho arb i trat i on schem e i s outl i ned in tho 
5 noxt soctiono. 

20.10.1 — T i m e slot bas e d arbitrat i on schomo 

Tabl e — summarised the bandwidth roquiromonts of th e SoPEC requestors to DRAM. If w e 
a l locat e th e D I U r e questors in terms of peak bandwidth then w e require 35.25 bits/cycl e (at SF 
-6) and 4 0.75 bits/ cyc l e (at SF ~ A) for a l l th e requ e stors e xc e pt th e CPU. 
10 A t i m e slot sch e m e is defined w i th 64 main timos l ots. Tho number of used ma i n t i meslots is 
programmab l e between 1 and 6 4 . 

S i nce DRAM r e ad requ e stors, e xc e pt for th e CPU, ar e connected to th e D I U v i a a 6 4- b i t data bus 
e ach 256 bit DRAM access roqu i ros 4 pdk cyc l es to transfer th e r e ad data over th e shar e d read 
bus. Tho t i mes l ot rotat i on per i od for 64 times l ots each of A pclk cycles i s 256 pcfk cycl e s or 1 .6 ^is, 
15 assuming pclk is 160 MHz. Each timeslot r e pr e s e nts a 256 b i t acc e ss e very 256 pofk cycl e s or 1 
bit/cycle. This is tho granu l ar i ty of tho major i ty of D I U roquostors bandw i dth requ i r e m e nts I n 
T a b lo . 

Tho SoPEC D I U requesters can b e r e pr e s e nted using 4 b i ts (Tabl e n pag e 288 on pag e 1). Using 
6 ^ t i m e s l ots m e ans that to a ll ocat e e ach timosiot to a request e r, a total of 64 x 5 - bit configuration 
20 r o gist c rs ar e requ i r e d for tho 64 main t i m e s l ots. 

Tim e s l ot bas e d arbitration works by having a po i nt e r po i nt to tho current timos i ot. When ro 
arbitrat i on is signa le d the arbitration w i nn e r is th e curr e nt t i m e slot and the po i nter advanc e s to th e 
next timeslot. Each t i m e slot denotes a sing le acc e ss. Tho durat i on of the t i mos i ot d e p e nds on th e 
accoss. 

25 Not e that advancem e nt through th e t i meslot rotation is d e p e ndent on an e nab le b i t, RotatlonSync, 
be i ng sot. Tho consoquoncos of'cloar i ng and sott i ng th i s b i t are d e scribed in sect i on 20.1 4 .12.2.1 
on page 1 . 

If th e SoPEC Un i t assigned to th e curr e nt tim e slot is not requ e sting th e n the unusod t i m e slot 
arb i tration m e chan i sm out li ned in Section 20.10.6 i s us e d to se l ect the arb i trat i on winn e r. 
30 Not e that th e r e I s always an arbitration winner for every slot. This is b e caus e th e unusod road ro 
allocation sch e m e includ e s refr e sh i n its round rob i n protocol, if al l other blocks are not 
r e questing, an e arly refresh w il l act as fa l l - back for th e slot. 

20.10.2 — S e parat e r e ad and wr i t e arbitrat i on windows 

For wr i te access e s, e xcept tho CPU, 256 b i ts of wr i te data are transferred from the SoPEC D I U 
35 write requ e stors over 64 bit writ e buss e s i n 4 c l ock cyc le s. Th i s writ e data transf e r lat e ncy means 
that writ e s acc e sses, exc e pt for CPU writes and a l so tho CDU, must be arbitrated 4 cyc le s in 
advanc e . (Th e CDU is an e xc e pt i on bocauso CDU writes can start once the f i rst 6 4 bits of wr i t e 
data havo been transferred s i nce each 64 b i ts i s assoc i ated with a wr i te to a diff e r e nt 256 b i t 
word). 
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Sinco write arbitrat i on must occur A cycl e s i n advance, and tho m i nimum durat i on of a tim e s l ot 
duration is 3 cyolos, tho arbitrat i on rulos must bo modifiod to initiat e wr i t e accossos i n advanc e . 
Accord i ng l y, th e r e i s a wr i te times l ot loo l <ali e ad point e r shown i n F i gur e 96 two t i mos l oto in 
advance of tho current t i mos l ot point e r. 

Th e follow i ng e xamples i llustrat e s e parat e r e ad and wr i te timos l ot arbitrat i on with no adjacent 
wr i te t i mos l ots. (Reca ll rule on adjacent wr i t e t i m e slots i ntroduced i n S e ction 20.7.2.3 on page 1 .) 
I n Figure 97 writos ar e arbitrated two timos l ots in advance Roads ar e arb i trated in tho samo 
tim e s l ot as they ar e issu e d. Wr i tes con b e arb i trated In tho samo timoslot as a road. During 
arb i tration th e command address of tho arb i trated SoPEC Unit i s captur e d. 
Other oxamp l os arc shown in F i gure 98 and Figure 99. Th e actua l timoslot ord e r is always th e 
samo as tho programmed times l ot ordor i .o. out of order accesses do not occur and data 
oohoroncy i s never an i ocuo. 

Each writ e must a l ways incur a latency of two t i mes l ots. 

Startup l at e ncy may vary dopond i ng on the position of th e first wr i t e times l ot. Th i s startup lat e ncy 
is not important. 

Tabl e 112 shows tho A scenarios dopond i ng on wh e ther the current t i m e s l ot and write t i moslot 
l ookah e ad pointers po i nt to r e ad or writo acoossos. 

Tabl e 112. Arbitration with separate w i ndows for road and write acc e sses 



current t i m e s l ot po i nter 



write timos l ot 



lookahead 



po i nt e r 



actions 



Rea d 



In i tiat e DRAM r e ad. 



initiat e wr i to arb i trat i on 



R e adi 



r e ad2 



In i t i at e DRAM r e adi . 



Writol 



wHte2 



In i t i at e writ e 2 arb i trat i on. 
Execut e DRAM wr i tel . 



Execute DRAM writo. 



If th e current timoslot point e r points to a r e ad access then this w ill bo in i t i at e d i mm e diat el y. 
I f tho writ e t i m e s l ot l ookahoad point e r points to a writ o access th e n this acc e ss is arbitrat e d 
i mmed i ately, or imm e diately aft e r the read accoos associat e d w i th tho current tim e s l ot point e r i s 
i n i tiated. 

Wh e n a write access is arbitrat e d tho D I U wi l l capture the writo address. When th e curr e nt 
timeslot po i nt e r advanc e s to the write t i moslot then th e actua l DRAM acc e ss wil l b e i n i t i at e d. 
Writ e s w i ll therefore bo arb i trated 2 t i moslots i n advance of the DRAM wr i t e occurr i ng. 
At init i a l isat i on, th e wr i to l ookahead pointer po i nts to tho first tim e s l ot. The cunr e nt t i m e s l ot po i nter 
i s i nva l id until th e wr i t e lookahoad pointer advanc e s to th e third t i m e slot wh e n th e curr e nt tim e slot 
po i nter wil l po i nt to th e first t i m e slot. Th e n both po i nters advance i n tandom. 
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CPU writo accoGses ar e excoptod from tho l ookahoad mechaniGm. 

I f tho so i octod SoPEC Un i t i s not roquoGting thon thoro w i ll bo ooparato read and wr i te selootion 
for unusod times l ots. Th i s is d e scr i b e d in Section 20.10.6. 
20.10.3 — Arb i trat i on of CPU accossos 
5 What dist i ngu i shos tho CPU from other SoPEC requ e stors, is that th e CPU requ i r e s m i nimum 
l at e ncy DRAM acc e ss i. e . pr e ferably th e CPU should g e t the noxt ava i lable timos l ot wh e n e v e r i t 
r e qu e sts. 

Th e min i mum CPU road acc e ss l atency i s estimat e d in Tab l o 113. Th i s is the t i me b e tw ee n tho 
CPU making a requ e st to th e DIU and rec e iving th e r e ad data back from the DIU. 
10 Tablo 113. Estimated CPU road access lat e ncy ignoring caching 



CPU road access latency 


Duration 


CPU cache miss 


1 cycle 


CPU MMU logic issues request and 
DIU arbitration complotos 


1 cycle 




Transfer tho road address to the DRAM 


1 cycle 


DRAM read latency 


1 oycio 


Register tho road data in CPU bridge 


1 cycle 


Register the read data in CPU 


1 cycle 


CPU oaoho miss 


1 cycle 


CPU MMU logic issues request and 
DIU arbitration completes 


1 oycIo 




TOTAL gap between requests 


6 cycles 



I f the CPU, as is l i k el y, r e qu e sts DRAM access aga i n immed i ate l y after receiv i ng data from the 

D I U th e n tho CPU cou l d acc e ss e v e ry second t i m e slot if th e acc e ss l at e ncy is 6 cyclos. Th i s 
15 assumes that interleav i ng i s omp l oyod so that timoslots l ast 3 cycles. I f th e CPU acc e ss latency 

w e re 7 cyc l es, th e n th e CPU would on l y bo ab le to acc e ss e very th i rd timoslot. 

If a cach e h i t occurs th e CPU do e s not requir e DRAM acc e ss. For its noxt D I U access i t wil l have 

to wait for its noxt assigned DIU slot. Cache h i ts therefore w ill reduce th e number of DRAM 

access e s but not speed up any of those acc e ss e s. 
20 To avo i d tho CPU having to wait for its next timoslot i t i s des i rabl e to hav e a m e chanism for 

e nsur i ng that the CPU always g e ts the next avai l able t i moslot w i thout i ncurring any lat e ncy on the 

non - CPU tim e s l ots. 

This can bo don e by d e fin i ng each tim e slot as consist i ng of a CPU acc e ss pr e c e ding a non CPU 
access. Each timoslot w il l l ast 6 cyclos i.e. a CPU acc e ss of 3 cycles and a non CPU access of 3 
25 cycl e s. This i s e xactly tho int e r l eav i ng bohov i our out l in e d in S e ction 20.7.2.2. I f th e CPU do e s not 
r e quire an acc e ss, th e t i m e s l ot w i ll take 3 or ^ and th e times l ot rotation wi l l go faster. A summary 
i s g i ven i n Tablo 11^. 

Tab le 111. T i m e slot accocs t i mos. 
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/VCCX?S6 



Duration 



Explanat i on 



CPU acc e ss * non CPU aooess 



3 + 3-6 cyc l os 



Int e rioavod aocoso 



non CPU accoss 



4 cyc le s 



i ^cc e ss and prec e d i ng accoss botli to 
shared road bus 



non - CPU acc e ss 



3 cycl e s 



Acc e ss and pr e ced i ng acc e ss not both to 
shared read bus 



CDU wr i t e acc e ss 



3+2+2+2 - 9 cyclos 



Pag e mod e s el ect s i gnal i s clocked at 160 



CDU wr i t e aocosses r e quir e 9 cyc le s. CDU wr i te acooss o s prooodod by a CPU accoss roquiro 12 
cyc l es. CDU timeslots th e r e for e tak e l ong e r than a l l othor D I U roquostors t i mos l ots. 
With a 256 cyc i o rotation there can bo 4 2 accesses of 6 cyclos. 
5 For low scal e factor app l icat i ons, i t i s dos i rab l o to hav e more tim e s l ots ava i lab l e in tho sam e 256 
cycl e rotat i on. So two count e rs of 4- bits e ach ar e defined allow i ng th e CPU to g e t a maximum of 
(CPUPr e AooeGGTImoGlote + 1) pr e acc e sses for every (CPUTotQiTimociote + 1) ma i n s l ots. A 
tim e s l ot count e r starts at CPUTotalTimoetotG and d e crements e v e ry t i m e s l ot, whi le anoth e r 
count e r starts at CPUPr e Acc e GsTim e GiotG and decr e m e nts e v e ry timeslot i n which tho CPU uses 
10 its occoss. When tho CPU pre - acc e ss counter goes to zoro b e for e CPUTotalTimeGiots, no further 
CPU accossos aro al l owod. Whon tho CPUTotalTimoGiotG count e r r e ach e s z e ro both count e rs 
ore rosot to thoir rosp e ctiv e i n i tia l values. 

Th e CPU i s not i nclud e d I n th e l i st of SoPEC D I U r e qu e st e rs. Tab le — , for tho ma i n t i mos l ot 
a ll ocations. Tho CPU cannot therefore b e allocat e d ma i n tim e s l ots. I t re l ies on pre accesses i n 

15 advanc e of such slots as th e so le method for DRAM transf e rs. 

CPU accoss to DRAM can novor bo fu l ly d i sab l ed, s i nce to do so would r e nd e r SoPEC 
i nop e rab l e. Th e refor e the CPUPr e Acc e GGTim e elotG and CPUTotalTimoGlotG reg i st e r va l u e s ar e 
i nterpreted as fo ll ows : In each succeeding w i ndow of {CPUTotafTimoGiotG^ 1 ) s l ots, tho 
max i mum quota of CPU pro access e s a l low e d i s {CPUPr e Aco e GGTimoGlotG + 1). Tho "+ 1" 

20 i mp l omontat i ons mean that th e CPU quota cannot bo mado zoro. 

Th e var i ous modes of operation are summar i sed in Tabl e 115 with a nominal rotation p e r i od of 
256 cycl e s. 

Table 115. CPU tim e s l ot al l ocation modes w i th nom i nal rotat i on p e r i od of 256 cyc l os 



Acc e ss Type 



Nomina l 



T i moslot 



durat i on 



Number of 
timos l ots 



Notes 



CPU Pro access 



6 cyc le s 



4 2 timeslots 



Each accoss is CPU + non CPU. 



her 

CPUPreAcc e GGTimoGfo 



I f CPU do e s not use a tim e s l ot then 



rotat i on is faster. 



te = CPUTotalTimeGlotG 
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10 



20 



aeeess 



her 

CPUPr e Aoc e eeTim e Gio 



to < CPUTot a lTlm e Blots 



Fractiona l CPU Pr e- 



4 or 6 



4 2 - 6 4 tim e slots 



Each CPU + non CPU accoss 



requ i res a 6 oyo l o 



t i moslot. 



Individua l non - CPU timoo l ots ta l <Q 1 



cyc l os if 



current acc e ss and procoding 
access are both 



to shar e d road bus. 



Ind i v i dua l non CPU t i m e s l ots take 3 



cycl e s if 

current accoss and procod i ng 



acc e ss ar e not both 



to shared r e ad bus. 



20.10.^ — CDU accesses 

As ind i cat e d in S e ction 20.10.3, CDU write access e s r e quir e 9 cycles. CDU wr i te acc e ss e s 
pr e c e d e d by a CPU acc e ss r e quir e 12 cyclos. CDU t i meslots ther e for e take long e r than al l other 
DIU requ e stors tim e s l ots. Th i s m e ans that wh e n a wr i t e tim e slot is unus e d it cannot b e re 
5 al l ocat e d to a CDU writ e as CDU access e s tak e 9 cycles. The writ e acc e ss e s which the CDU 
write cou l d oth e rwis e r e plac e r e quir e only 3 or 4 cycles. 

Unusod CDU wr i te accesses con bo replaced by any other write access according to 20.10.6.1 



Unus e d wr i t e t i m e slots a ll ocat i on on pago 1 . 
20.10.5 — R e fr e sh contro lle r 

Refr e sh i s not inc l uded i n th e li st of SoPEC D I U r e quest e rs, Tab l o , for th e main timos l ot 
al l ocat i ons. Tim e s l ots cannot th e r e for e be allocated to refresh. 

The DRAM must be refreshed every 3.2 mo. Refresh occurs row at a t i m e ov e r 5120 rows of 2 
paral le l 10 Mb i t i nstanc e s. A r e fr e sh op e ration must th e r e fore occur every 100 cycles. Tho 
rofroGh ^period register has a defau l t va l ue of 99. Each refresh takes 3 cyc le s. 
15 A refresh counter w i ll count down tho number of cycles b e tw e en each refresh. When th e down - 
counter roach e s 0, the r e fresh contro l ler wil l I ssu e a r e fr e sh request and tho down - count e r is 
r e load e d with th e value i n rofr e Gh jj e riod and the count down resumes I mm e diat el y. A ll ocation of 
main slots must take i nto account that a r e fr e sh is r e qu i r e d at i e aet once every 100 cyc le s. 
Refresh i s i nc l ud e d in th e unus e d r e ad and write t i mos l ot a ll ocation. If unusod t i mos l ot allocat i on 
results i n r e fr e sh occurring e ar l y by N cyclos, th e n th e r e fr e sh counter wi l l havo count e d down to 
N. In th i s case, the refresh counter is reset to rofroeh jyoriod txr\6 tho count down r e comm e nc e s. 
Refresh can be prec e d e d by a CPU access in tho same way as any other access. Th i s is 
contro l l e d by tho CPUPr e AcceGGTimoGioto and CPUTotalTimoGlotG conf i gurat i on reg i sters. 
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R e fresh w i l l thoreforo not affect CPU porformanco. A soquonoo of aooossos i ncluding rofrosh 
might thoroforo bo CPU, rofroch, CPU, actua l timesiot. 
20.10.6 — A ll ocating unusod timoc l oto 

Unusod sloto aro ro allocat e d s e parat el y d e p e nd i ng on wh e ther tho unus e d aocoss was a road 
5 acc e ss or a wr i t e accoss. Th i s i s b e st effort traffic. Only unusod non CPU accesses aro ro 
a l locatod. 

20. 10.6.1 Unus e d writo timoGloto ollooQtion 

Unus e d writ e tim e slots aro ro a ll ocated accord i ng to a fix e d prior i ty ordor shown i n Tablo 116. 
Tab l e 116. Unused writo tim e siot pr i or i ty order 

10 



Namo 


PfiOFrty 
Order 


SCB(W) 


4- 




2 




3 


Unused read timoolot allocation 


4 





CDU write accossos cannot be includ e d I n th e unusod t i moslot allocation for writo as CDU 
accossos tako 0 cycles. Th e writo access e s wh i ch th e CDU writo could oth e rw i s e rop l aco roquiro 
only 3 or <1 cycloo. 

Unusod writ e tim e siot a l location occurs two timoslots i n advance as noted in Soction 20.10.2. I f 
15 tho units at pr i oritios 1 3 aro not roquosting thon th e times i ot i s ro allocatod accord i ng to th e 

unus e d r e ad times i ot allocation schomo d e scr i b e d i n S e ct i on 20.10.6.2. How e v e r, th e unused 

road timoslot a l locat i on will occur wh e n th e current timos l ot point e r of Figure 96 roaches tho 

t i moslot i .e. i t wi l l not occur i n advanc e . 

20, 10.6.2 Unused r e ad timoefote a/location 
20 Unusod road t i mes l ots aro ro al l ocat e d accord i ng to a two l e v e l round rob i n sch e m e . The SoPEC 

Un i ts i ncluded i n road t i m e siot ro a ll ocation is shown in Tab l o 117. 



Table 117. Unused read t i mesiot a l locat i on 

25 

Name 

SCB(R ) 

CDU(R) 

SFU(R) 
TE(TD) 
TE(TFS) 
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HGU 

CPU / 
R e fr e sh 



Each SoPEC requ e stor has an assooiat e d b i t, R e adRoundRobinLovol, wh i ch ind i oates wh e th e r i t 
i s in l e v e l 1 or le ve l 2 round rob i n. 

Table 118. Road round robin l eve l selection 

5 





Action 


ReadRoundRobinLevel - 0 


Level 1 










ReadRoundRobinLevel ~ 1 


Level 2 











A point e r po i nts to th e most rocent w i nn e r on e ach of th e round - rob i n le v el s. R e allocat i on is 
carri e d out by travors i ng lovol 1 roquostors, starting with tho ono immodiato l y succeeding th e l ast 
lovol 1 winner. I f a r e qu e sting unit is found, th e n i t wins arbitration and th e l evol 1 po i nt e r is shift e d 
10 to i ts pos i tion. I f no l ovo l 1 un i t wants tho s l ot, then lev e l 2 is s i m i lar l y oxam i nod and i ts point e r 
adjust e d. 

S i nc e r e fresh occupios a (shared) posit i on on ono of the two lovols and continua ll y roquoots 
acc e ss, th e r e wi ll a l ways bo som e round - robin w i nner for any unusod s l ot. 

20.10.6.2.1 Shar e d CPU / Refresh Round - Robin Posit i on 

15 Not e that tho CPU can cond i t i ona l ly be a l lowed to tak e part in th e unusod read round robin 

schem e . I ts partic i pat i on i s contro l l e d v i a the configurat i on bit EnabfeCPURoundRobin. Wh e n th i s 
bit i s set tho CPU and refr e sh shar e a joint pos i tion i n th e round - rob i n order, shown i n Tab l e . 
Wh e n c le ar e d, th e position i s occup i ed by refr e sh a l on e . 

I f th e shar e d position is n e xt in l in e to b e award e d an unusod non CPU road/writo s l ot, thon tho 
20 CPU will hav e first option on th e slot. Only if the CPU do e sn't want tho acc e ss, w il l i t bo grant e d to 
rofrosh. I f th e CPU i s excluded from th e round robin, thon any awards to the pos i t i on benof i t 
r e fr e sh. 

20.11 Gu i del i nes for proc f= ^mm i nc the D!U 

Som e guid eli nes for programm i ng th e D I U arb i trat i on schomo aro g i ven in this sect i on togeth e r 
25 w i th an example. 

20.11.1 — Circu i t Latency 

Circu i t latency i s a fixed sorvico delay which is incurred, as and from th e aoooptanoo by tho D I U 
arb i tration l og i c of a b l ock's p e nd i ng r e ad/writo r e qu e st. It is duo to th e proc e ss i ng tim e of tho 
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request, readying tho data, p l us tho DRAM aoooss t i m e . Lat e ncies d i ffer for r e ad and wr i to 
roquosto. Soo Tabioo 70 and 80 for rospoot i ve breakdowns. 

I f a r e qu e sting block i s curr e ntly stal le d, th e n th e /ongegf t i mo it wi ll havo to wa i t botwoon issuing 
a n e w r e quest for data and actual l y roco i ving i t would b e I ts t i mos l ot period, p l us the c i rcu i t lat e ncy 
5 ovorhood, along with any i ntorvon i ng non standard s l ot durations, such as r e fresh and CDU(W). 
In any cas e , a sta ll ed block w ill always i ncur th i s l at e ncy as an addit i onal overhoad, wh e n coming 
out of a sta l l. 

I n the case wh e r e a block starts up or unsta ll s, it w i ll start procoss i ng now l y rocoivod data at a 
tim e b e yond its s e rvic e d timeslot e quiva le nt to the circu i t lat e ncy. I f th e block's t i m e s l ots ar e 

10 e v e nly spaced apart in t i m e to match its processing rate, (in tho hope of m i nimising sta l ls,) thon 
th e e ar lie st that tho b l ock could r e sta ll , if not r e son/icod by tho DIU, would bo tho same l atency 
d el ay boyond its next times l ot occurr e nc e . Put another way, tho latency i ncurred at start up 
push e s th e pot e ntia l DIU i nduc e d sta ll po i nt out by th e same fix e d d el ta b e yond oach succossivo 
t i m e slot a l locat e d to the block. This assum e s that a block ro roquosts access well i n advance of 

15 its upcom i ng tim e slots. Thus, for a given sta l l fr ee run of operation, tho circu i t lat e ncy ov e rh e ad is 
only incurr e d i nitit i a l ly wh e n unsta l ling. 

Whil e a block can b e sta l led as a resu l t of how qu i ckly th e D I U s e rvic e s its DRAM r e qu e sts, it i s 
also prone to stal l s caused by its upstream or downstr e am n e ighbours b e ing ab l e to supp l y or 
consume data which is transferred betwe e n tho blocks dir e ctly, (as oppos e d to via th e DIU). Such 

20 neighbour i nduced stal l s, often occurring at e v e nts l i k e e nd of l in e , wi ll hav e the effect that a 
block's D I U r e ad buffer wil l tend to fil l , as the block stops proc e ssing r e ad data. I ts DIU write 
buffer w i l l also tend to fil l , unablo to despatch to DRAM unt il th e downstream b l ock fre e s up 
shar e d - acc e ss DRAM locat i ons. Th i s scenario i s ben e fic i al, in that wh e n a block unsta ll s as a 
result of i ts neighbour re l easing it, then that b l ock's r e ad/writ e D I U buff e rs w i ll hav e a fil l stat e le ss 

25 li k el y to stal l i t a second t i m e , as a r e su l t of D I U service d e lays. 

A b l ock's s l ots should bo scheduled with a g e rWc e guarant e e i n m i nd. This is d i ctat e d by th e 
block's process i ng rat e and hence, requ i r e d acc e ss to tho DRAM. The rat e is express e d i n t e rms 
of bits p e r cycl e across a processing w i ndow, wh i ch is typ i ca ll y (though not always) 256 cycl e s. 
Slots should b e e v e nly i nterspersed in th i s w i ndow (or "rotation") so that th e D I U can fulfil l th e 

30 block's service needs. 

Th e fo ll ow i ng ground ru l es app l y i n calculating the d i stribution of slots for a giv e n non - CPU block: 

Th e b l ock can, at max i mum, suff e r a sta ll once i n tho rotation, ( i .e. unsta l l and r e sta l l) and 

h e nc e i ncur the circuit lat e ncy described abov e . 
This ru l e is, by d e fin i tion, always fu l filled by those blocks which havo a serv i ce roquiromont of on l y 

35 1 b i t/cycio ( e qu i val e nt to 1 s l ot/rotat i on) or f e w e r. I t can be shown that th e rul e i s a l so 

satisfied by those b l ocks requiring moro than 1 bit/cyclo. Soo Section 20.12.1 S l ot 
Distribut i ons and Stal l Ca l cu l at i ons for I nd i v i dual B l ocks, on page 1 . 

Within tho rotation, c e rta i n slots wil l bo unava i lab le , du e to th e ir b ei ng us e d for r e fresh. 

(S e e S e ction 20.11.2 Rofrosh latoncios) 
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I n programming th e rotat i on, account must be tak e n of tho fact that any CDU(W) acc e ss e s 

wil l consumo an e xtra 6 cyoloo/aocess, ov e r and abovo th e norm, in CPU pro access mod e , 

or 5 cycloG/aocoss without pro access. 

^ Tho total de l ay overh e ad du e to lat e ncy, rofr e shos and CDU(W) can b e factored i nto tho 

5 s e rv i c e guarantoo for all blocks in tho rotation by do l oting once, (i.e. reducing th e rotat i on 

window,) that numb e r of s l ots wh i ch e quat e s to th e cumulativ e durat i on of those var i ous 

anomalies. 

^ Tho uGO of l ow e r sca le factors will imply a mor e fr e qu e nt d e mand for s l ots by non - CPU 

blocks. Th e p e rc e ntage of s l ots i n th e ov e rall rotation which can thoroforo bo designat e d as 
10 CPU pr e- acc e ss on e s should bo calculatod l ast, bas e d on what can bo accommodated in 

the l ight of the non CPU s l ot n ee d. 
R e ad l at e ncy i s summarised b el ow i n Tabl e 119 . 
Tab l e 119. R e ad l atency 



Non CPU read access latency 


Duration 


non-CPU read requestor intornally 




generates DIU request 


1 cycle 


register tho non CPU read roquost 


1 cycfo 


comploto tho arbitration of tho request 


1 cycle 


transfer tho road address to the DRAM 


1 cycle 


DRAM road latency 


1 cycle 


register tho DRAM read data in DIU 


1 oycio 


rogistor tho lot 64 bits of read data in 
requester 


1 cycle 


register the 2nd 64 bits of read data in 
requestor 


1 cycle 


register the 3rd 64 bits of rood data in 
requestor 


1 cycle 


register the 4th 64 bits of read data in 
requester 


1 cycle 


TOTAL 


10 cycles 



15 

Write lat e ncy is summarised in Table 120. 
Table 120. Wr i te l atency 



Non CPU writo access latency 


Duration 


non CPU write requestor intornally gonoratos DIU roquost 


1 cycle 


rogistor tho non CPU writo request 


1 cycle 
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complete tho arbitration of tho roquost 


1 cycle 


transfer the ooknowlodgo to the write requester 


1 cycio 


transfer the 1st 64 bits of writo data to tho DIU 


1 cycle 


transTer mo ^no d4 oits OT write oata to trie uiu 


1 cycIo 


transfer the 3rd 64 bits of writo data to tho DIU 


1 oycio 


transfer tho 1th 6^ bits of writo data to the DIU 


1 oycio 


Write to DRAM with locally rogistorod write data 


1 cycio 


TOTAL 





Tlmeslots romovod to allow for r e ad latency wi ll also cov e r writ e lat e ncy, since th e form e r is th e 
larg e r of tho two. 

20.11.2 — R e fr e sh l atenc ie s 

5 The numb e r of al l ocat e d t i moslots for each requestor noods to take into account that a r e fresh 
must occur evory 100 cyc l es. Th i s can bo achiovod by dolot i ng t i mos l ots from tho rotation since 
tho number of timoslots is made programmable. 

R e fresh i s precodod by a CPU acc e ss in tho same way as any oth e r access. This Is controll e d by 
the CPUProAoc e esTimoeiotc and CPUTotalTimoeiotG configurat i on reg i sters. Rofrosh wi ll 

10 therefore not affect CPU porformanco. 

As an e xamp l e, in CPU pro access mode e ach t i m e slot w i ll last 6 cycl e s. If the timos l ot rotation 
has 50 timoslots then tho rotation w i ll lost 300 cycl e s. Tho rofrosh contro ll er w i ll trigger a r e fr e sh 
every 100 cyc l es. Up to 4 7 t i m e siots can bo allocated to tho rotation ignor i ng rofrosh. Thr ee 
t i m o slots del e ted from th e 50 t i meslot rotation wil l al l ow for th e l atency of a r e fr e sh e v e ry 100 

15 cyc l es. 

20.11.3 — Ensuring suff i c ie nt DNC and PCU access 

PCU command roads from DRAM ore except i ona l ovonts and should oomploto in as short a tim e 
as possib l e. Sim i lariy, w e must e nsure th e r e i s suff i c ie nt freo bandw i dth for DNC acc e ss e s e.g. 
when c l usters of dead nozz le s occur. In Table — DNC i s allocat e d 3 t i mes average bandwidth. 
20 PCU and DNC can also bo al l oootod to the l ev el 1 round robin al l ocation for unus e d tim e siots so 
that unused timos l ot bandwidth is proforontially ava il able to thom. 

20.11. 4 — Basing t i moslot allocat i on on peak bandwidths 

S i nce th e emb e dded DRAM prov i d e s suffic ie nt bandwidth to use 1:1 compr e ss i on rat e s for th e 
CDU and LBD, i t is possibl e to s i mp li fy th e main t i mes l ot a ll ocation by bas i ng th e allocation on 
25 p e ak bandwidths. As comb i n e d b i- iev e l and tag bandwidth at 1:1 scal i ng is only 5 b i ts/cycle, w e 
w i l l usua l ly only consider th e conton e scale factor as tho var i able i n determining timos l ot 
allocat i ons. 

I f s l ot al l ocation is based on peak bandwidth requiromonts then DRAM acc e ss wi ll b e guarante e d 
to al l SoPEC r e qu e sters. I f we do not a l locate slots for peak bandw i dth r e quirements then wo can 
30 a l so al l ow for the poaks d e t e rm'inletlcally by adding some cyc l es to tho print li no time. 

20.11.5 — Adjacent tim e slot restrict i ons 

20.11.5.1 Non - CPU writ e adjac e nt timoclot r e etrictione 
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Non CPU writo requ e stors shou l d not b e assigned adjac e nt t i moslots as doocribed i n S e ction 
20.7.2.3. This i s b e caus e adjac e nt tim e s l ots oss l gnod to non CPU roquootors would require two 
sots of 256 b i t write buff e rs and mu l tipl e xors to connoct two writo roquostors Gimultonoous l y to th e 
D I U. On l y ono 256 bit wr i te buffer and mu l t i plexor i s i mplementod. Recall from section 20.7.2.3 on 
5 page 1 that if adjacent non CPU writes oro attempted, that tho oocond writo of any such pair wil l 
be disr e gard e d and re a l located under the unus e d r e ad schemo. . 
20, 11.5.2 Same DIU r e qu e stor adjac e nt tim e elot roGtrictione 

All D I U r e qu e stors have state machines which requ e st and transfer tho road or write data befor e 
requosting again. From F i gure 90 read r e qu e sts have a m i nimum s e parat i on of 9 cyc le s. From 
10 F i gure 92 writ e r e qu e sts hav e a minimum separat i on of 7 cycles. Th e r e for e adjacent t i mos l ots 
should not be ass i gned to a part i cular D I U requestor because the roquostor will not be able to 
mak e use of al l those slots. 

In th e cas e that a CPU acc e ss pr e c e d e s a non CPU access tim e s l ots last 6 cyc le s so wr i te and 
r e ad r e questors can only mak e us e of e very second t i moolot. I n tho case that t i mos l ots aro not 
15 pr e c e d e d by CPU accesses t i m e slots last A cyc le s so th e sam e write request e r can use every 
s e cond t i m e slot but th e same road roquostor can use on l y ovory third t i moslot. Som e D I U 
requestors may introduc e addit i onal pipel i ne d e lays b e for e they can requ e st aga i n. Therefore 
tim e s l ots should bo separated by mor e than th e minimum to allow a marg i n. 
20.11.6 — Lin e marg i n 

20 Tho SFU must output 1 b i t/cycl e to tho HCU. S i nce HCUNumDotG m a y not b e a mu l t i ple of 256 

bits tho l ast 256 bit DRAM word on tho lino can contain e xtra z e ros. I n th i s cas o , th e SFU may not 
bo ab l e to prov i de 1 bit/cycle to th e HCU. Th i s cou l d l ead to a stall by th e SFU. This stall cou l d 
th e n propagat e if th e margins being us e d by th e HCU ar e not suff i ci e nt to h i d e i t. Tho maximum 
sta l l can bo est i mated by th e calculat i on: DRAM s e rv i c e p e r i od ■ X sca le factor * dots us e d from 

25 l ast DRAM read for HCU li no. 

S i m il arly, if th e l ine l e ngth is not a mu l tip l e of 256 - b i ts th e n e .g. tho LLU cou l d r e ad data from 
DRAM wh i ch conta i ns padded zeros. This could l e ad to a sta ll . This sta l l could then propagate i f 
th e pag e margins cannot h i d e i t. 

A s i ngle addition of 256 cyc le s to tho lino tim e w i ll suff i c e for a ll DIU requ e st e rs to mask these 
30 statt&T 

20.12 Example outline D I U programm i ng 

Tabl e 121. Timos l ot a ll ocat i on bas e d on p e ak bandw i dth 



Block Nam e 



Peak Bandwidth Ma l nT i moolots 



which must bo 



supplied 



(bits/cycl e ) 



a ll ocated 



PEA23US 



255 



10 



SCB 


R 














Qpy 


R 


0.9 (SF - 6), 


1 (SF - 6) 


2 (SF - 1) 






2 (SF - 4) 






1 .8 (SF - 6), * 


2 (SF - 6) 


4 (SF - 4) 


4 (SF - 4) 






GFU 


R 


5.4 (SF " 6), 




8 (SF ~ A) 


6 (SF - 6) 




8 (SF ~ 4) 


LBD 


R 


\ 


4- 


SFU 


R 


2 


2 




W 




1- 


TE(TD) 


R 




4 






TE(TFS) 


R 


0.003 


0 






HCU 


R 


0.074 


0 




R 




3 


n\A/i t 


WW 
¥¥- 




B 




R 


s 


8 


PGU 


R 




1^ 


TOTAL 










33 (SF-6) 
38 (SF-1) 



Table 121 shows an al l ocation of main tim e s l ots basod on th e p e ak bandw i dths of Tabl e . 
Th e bandw i dth roquir e d for each unit is calcu l at e d allowing oxtra oyol e s for road and writo c i rcu i t 
l atency for oaoh access requir i ng a bandwidth of mor e than 1 bit/cycl e . Fract i ona l bandwidth i s 
supp l ied v i a unusod read s l ots. 

The timoslot rotation i s 256 oyolos. Tim e slots ar e d el eted from tho rotat i on to a l low for circuit 
l at e nci e s for access e s of up to 1 b i t por cycio i . e . 1 timeslot por rotation. 
Exa m p le 1 : Sca le factor ~ 6 

Program th e MainTimoelot configuration rog i stor (Tabl e ) for poak roqu i r e d bandw i dths of 
SoPEC Un i ts according to th e soa l o factor. 

Program th e r e ad round robin allocation to share unusod road slots. A l locate PCU, DNC, HCU 
and TFS to l e vo l 1 r e ad round rob i n. 

Assum e sca le factor of 6 and poak bandwidths from Tab le . 

^ Ass i gn a l l D I U requ e stors except TE(TFS) and HCU to mu l t i ples of 1 times l ot, as i nd i cated 

i n Tabl e > whero oach tim e slot is 1 b i t/cyc l o. This requir e s 33 timos l ots. 



Tho SCB figuro of 0.73^ b i to/oyo l o app l loo to muiti SoPEC oyot e ms. For cingto SoPEC syst e ms, th e figure is 0.050 

B andwidth for CDU(W) i s poak va l uo. Booauoo of 1.5 bufforing i n DRAM, poak CDU(W) bfw e qua l s 2 x avorago 
CDU(W) b/w. For CDU(R). peak b/w - avorago CDU(R) b/w. 
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No t i m e s l ots are e xplicit l y a ll ocatod for tho fract i ona l bandw i dth roquir e monto of TE(TFS) 

and HCU accossos. I nstoad, those units are serv i c e d via unusod read s l ots. 
A l low 3 timos l ots to a l low for 3 refr e shes i n the rotation. 

Therefore, 36 schedu l ed s l ots ar e used i n tho rotation for ma i n tim e s l ots and r e fresh e s, 

5 some or a ll of which may b e ab l e to hav e a CPU pr e- acc e ss, prov i d e d thoy fit in tho rotat i on 

w i ndow. 

Each of tho 2 CDU(W) accossos roqu i ros 0 oyc l os. Por acooss, th i s I mpl ie s on ov e rhead of 

1 s l ot (1 2 cyc l es i nst e ad of 6) in pr e acc e ss mod e , or 1 .25 s l ots (9 cyc l es i nstoad of A) for 
no pre access. Th e cumu l ativ e ov e rh e ad of the two accesses is eith e r 2 s l ots (pre - acc e ss) 
10 or 3 s l ots (no pro accoss). 

^ Assum i ng a ll b l ocks require a sorv i c o guarantoo of no mor e than a s i ng l e stal l a cross 256 

b i ts, allow 10 cyc le s for read l atonoy. which a l so tak e s car e of 9 - cyc le wr i to l atency. This 
can bo accounted for by rosorving 2 s i x cycl e slots (CPU pr e acc e ss) or 3 four cyc l e s l ots 
(no pro - access). 

15 ^ Assum e a 256 cyc le times l ot rotation. 

CDU(W) and r e ad latency reduc e th e numb e r of availabl e cyc le s in a rotation to: 256 — 2x6 - 

2x6 - 232 cyc le s (CPU pr e acc e ss) or 256 - 3x 4 — 3x 4 - 232 cycl e s (no pro access). 

^- As a result, 232 cycles availabl e for 36 accesses imp l ies each access can tak e 232 / 36 - 

6.44 cycles maximum. So, al l accossos can have a pre access. 

20 ^ Th e r e for e th e CPU ach ie v e s a pro access rat i o of 36 / 36 " 100% of slots in th e rotation. 

Example 2: Scal e factor ~ 4 

Program th e MainTimeelot configurat i on rog i stor (Tablo ) for poak requir e d band widths of 
SoPEC Un i ts according to th e sca le factor. Program tho road round - robin a ll ocat i on to share 
unused read slots. Allocato PCU. DNC, HCU and TFS to lovol 1 road round - rob i n. 

25 Assum e sca l e factor of 4 and p e ak bandw i dths from Tab lo — r 

Ass i gn all D I U requestors except TE(TFS) and HCU mu l tip l es of 1 timeslot, as i ndicated i n 

Tab l e , where each t i meslot i s 1 bit/cyc le . Th i s requir e s 38 t i m e slots. 

^ No tim e slots ar e e xpl i citly a l locat e d for th e fractiona l bandw i dth roqu i romonts of TE(TFS) 

and HCU access e s. I nstead, those un i ts ar e s e rv i c e d v i a unus e d r e ad slots. 

30 Al l ow 3 tim e slots to al l ow for 3 r e fr e sh e s in tho rotat i on. 

Ther e fore, 4 1 scheduled s l ots are used i n th e rotation for main t i m e slots and r e fresh e s, 

som e or a l l of wh i ch can have a CPU pro access, provided thoy fit in tho rotation window. 

Each of th e 4 CDU(W) acc e ss e s requires 9 cyc le s. P e r access, this imp l ies an overh e ad of 

1 s l ot (12 cyc le s i nstead of 6) for pro access mod e , or 1 .25 s l ots (0 cycl e s instoad of 4 ) for 
35 no pre access. The cumulat i v e overhead of th e four accesses is e i ther 4 slots (pro access) 

or 5 s l ots (no pro accoss). 

-• Assuming al l blocks r e qu i r e a sorvico guarantoo of no mor e than a s i ng le sta l l across 256 

bits, a l low 10 cycles for road latency, wh i ch also takes car e of 9 cycl e wr i t e lat e ncy. Th i s 
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can bo acoountod for by rosorving 2 six cyc i o s l ots (CPU pro aoo e ss) or 3 four oyclo slots 
(no pr e aoooss). 
^ Assumo a 256 oyclo t i mosiot rotation. 

CDU(W) and road l atoncy r e duc e th e numb e r of ava i lab le cyc le s in a rotat i on to: 256 ^x6 

5 2x6 ~ 220 cyclos (CPU pro aoooss) or 256 — — 3xA " 22 4 cycl e s (no pro occoss). 

As a r e sult, botwoon 220 and 22 4 cyc le s ar e avai l abl e for 41 access e s, which I mp lie s e ach 

acc e ss can tako b e tw ee n 220 / 4 1 - 5.36 cycl e s and 22A / 4 1 " 5. 4 6 cycles. 

Work out how many s l ots con havo a pro access: For th e l ow e r number of 220 cycl e s, this 

imp l i e s (41 — n)*6 + n* 4 <~ 220, whore n - number of slots with no pro access 

10 cycio. Solving th e e quat i on g i ves n 13. Ch e ck answ e r: 28*6 + 13* ^ 1 - 220. 

^ So 28 s l ots out of th e 4 1 i n th e rotation can have CPU pr e accoss e s. 

^ Th e CPU thus achi e v e s a pr e acc e ss ratio of 28 / 4 1 - 68.3% of slots in the rotation. 

20.12.1 — Slot Distribut i ons and Sta l l Calcu l at i ons for I nd i vidua l B l ocks 

The fol l owing s e ctions show how tho slots for b l ocks w i th a service roquiroment gr e at e r than 1 
15 bit/cycle should b e d i stributed. Ca l cu l ations are i ncluded to ch e ck that such b l ocks wi ll not suff e r 
more than one stall p e r rotation. 

20.12.1.1 SFU 

Th i s has 2 b i ts/cyc l e on read but this is two s e parat e channe l s of 1 bit/cyc le shar i ng th e sam e D I U 
intorfaco so i t is offoctivoly 2 chann e ls e ach of 1 bit/cyc le so a l lowing th e sam e margins as th e 
20 LBD will work. 

20.12.1.2 DWU 

Th e DWU has 12 doub le buffers in oach of th e 6 co l our planes, odd and e v e n. Th e s e buffers ar e 
filled by tho DNC and wi l l r e quest D I U acc e ss wh e n doubl e buffers fi ll . Tho DNC supplies 6 b i ts to 
tho DWU ovory cyc l e (6 odd i n one cycle, 6 oven i n tho next cycle). So the service dead li ne is 51 2 
25 cycles, g i ven 6 accossos por 256 cyc l e rotat i on. 

20.12.1.3 CFU 

Here th e r e qu i rement is that th e D I U stal l should bo loss than the t i m e tak e n for th e CFU to 
consume one third of its tr i pl e buff e r. Th e tota l D I U sta ll ~ refr e sh l at e ncy * e xtra CDU(W) l at e ncy 
^ r e ad c i rcu i t lat e ncy - 3 * 5 (for 4 cycl e t i m e slots) + 10-18 cyc le s. Th e CFU can consum e i ts 
30 data at 8 bits/cycle at SF - 4 . Th e r e for e 256 bits of data wi l l last 32 cycl e s so th e tripl e buff e r is 
saf e . I n fact we on l y need an extra 1 4 4 b i ts of buffering or 3 x 6 4 b i ts. But it i s saf e r to hav e th e 
ful l e xtra 256 bits or 4 x 6 4 bits of buffering. 

20.12.1.4 LLU 

Tho LLU has 2 channels, each of wh i ch cou l d r e quest at 6 bits/106 MHz chann el or 4 
35 bits/1 60MHz cycle, giv i ng a tota l of 8 b i ts/1 6OMH2 cycle. Tho sorvico doad li no for each channe l is 
256 X 106 MHz cyclos, i.e. all 6 co l ours must bo transferred i n 256 cyclos to food tho pr i nthoad. 
Th i s e quat e s to 384 x 160 MHz cyc l os. 

Over a span of 384 cycl e s, th e r e will be 6 CDU(W) acc e sses, A rofroshos and on e r e ad latoncy 
oncountorod at moot. Assum i ng CPU pr e accossos for th e se occurrenc e s, th i s m e ans th e number 
40 of avai l abl e cycles is giv e n by 38 4 — 6x6 4x6 10-314 cycles. 
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For a CPU pro aco e ss s l ot rato of 50%, 31 4 oyclos i mp ii os 31 CPU and 63 non CPU Qoo e ss e s 
(31 X 6 32 X 4 " 314). For 12 LLU access e s i ntersp e rsed amongst thooo 63 non CPU s l ots, 
I mpiios an LLU a l location rato of approximate l y one s l ot i n 5. 

If th e CPU pre - acc e ss is 100% across al l slots, then 31 4 cyc le s g i ves 52 slots each to CPU and 
5 non - CPU acc e ss e s, (52 x 6 ~ 312 cycles). Twelv e acc e ss e s spread ov e r 52 slots, i mp i ios a 1 i n 4 
s l ot a l location to tho LLU. 

The same LLU s l ot al l ocation rat e (1 slot in 5, or 1 in 4 ) can be applied to programming slots 
across a 256 cycio rotation window. Tho window e/'z e do e s not affect th e occurr e nc e of LLU s l ots, 
so tho 38^ cyc l e s e rv i c e r e qu i r e ment wil l b e fulf i ll e d. 
10 20.12.1,5 DNC 

This has a 2.1 b i ts/cyc le bandwidth r e quir e m e nt. Each access w i l l s ee the D I U sta l l of 18 cycl e s. 
2.A b i ts/ cycle corresponds to an access every 106 cyc l es within a 256 cycl e rotation. So to a l low 
for D I U l at e ncy we need an acc e ss e v e ry 106 18 or 88 cyclos. This is a bandwidth of 2.9 
b i ts/cyc l e, requir i ng 3 t i m e s l ots i n th e rotat i on. 
15 20.12.1.6CDU 

Th e JPEG d e cod e r produc e s 8 bits/cyc l e. P e ak CDUR[ e ad] bandw i dth i s 4 bits/cyc l e (SF-1), 
peak CDUW[r i t e ] bandwidth is 4 b i ts/cycio (SF- 4 ). both with 1.5 DRAM buffering. 
Th e CDU(R) does a D I U road ovory 61 cycl e s at scal e factor 4 with 1 .5 DRAM buff e r i ng. The 
d el ay in b e ing s e rvic e d by the DIU cou l d be r e ad circuit latency (10) + r e fresh (3) + e xtra GDU(W) 

20 cyc le s (6) - 19 cyc le s. Th e JPEG docodor can consum e e ach 256 bits of D I U - suppl ie d data at 8 
bits/cycl e , i . e . in 32 cycles. If the D I U is 19 cycl e s late (duo to lat e ncy) i n supplying th e r e ad data 
then th e JPEG decod e r w ill have fin i sh e d proc e ss i ng th e r e ad data 32 + 19- 4 9 cyc le s aft e r th e 
D I U acc e ss. This i s 6 4 — 4 9-15 cycles i n advanc e of th e n e xt read. This 15 cycles is tho uppor 
lim i t on how much the D I U read serv i oo can further b e d e lay e d, w i thout causing a stall. G i v e n th i s 

25 margin, a sta l l on th e r e ad s i d e w il l not occur. 

On th e wr i t e s i d e , for scal e factor 4, the access pattern is a DIU writ e s e v e ry 61 cyclos with 1 .5 
DRAM buff e r e ing. Th e JPEG d e cod e r runs at 8 bits cycIo and consum e s 256 b i ts in 32 cyclos. 
Tho CDU wi ll not stal l i f th e JPEG docodo tim e (32) + DiU stall (10) < > 6 4 , which i s tru e . 

20.13 CPU DRAM ACCESS PERFORMANCE 

30 Tho CPU's shar e of th e tim e slots can be spec i fi e d i n t e rms of guarant ee d bandw i dth and av e rag e 
bandwidth a l locat i ons. 

Th e CPU's acc e ss rat e to m e mory dep e nds on 

tho CPU r e ad acc e ss lat e ncy i.e. tho t i m e b e twe e n th e CPU making a request to tho DIU 

and receiv i ng the road data back from tho D I U. 

35 ^ how often it can g e t acc e ss to DIU t i mes l ots. 

Tabl e — e st i mated th e CPU road l atency as 6 oyclos. 

How oft e n the CPU can g e t acc e ss to DIU t i m e slots doponds on th e acc e ss typ e . This is 
summarised in Tab le 122 . 

Tabl e 122. CPU DRAM accoss porformanco 

40 
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Access Typ e 



CPU Pro 



aeeess 



Fraotional 



T i m e slot 



Durat i on 



6 cycl e s 



4 or 6 cyc le s Lower bound (guorantood 



Pr e- acc e ss 



Nom i na l 



CPU DRAM 



acc e ss rat e 



Lower bound (guarant e ed 
bandw i dth) i s 



160 MHz/6- 26.27 MHz 



t i m e s l ot. 



bandwidth) is 



(160 MHz*N/P) 



CPU can access ovory 



CPU acc e sses procodo a 
fraction N of tim e slots 



wh e r e N - C/T. 



C - CPUProAccoGsTimoGlotG 



T - CPUTotQlTimQslots 



P-{6''C^^*(TC))/T 



In both CPU Pr e- acc e ss and Fract i ona l CPU Pro access modes, I f tho CPU is not r e quest i ng tho 
tim e s l ots w i ll have a duration of 3 or 4 cycl e s d e pend i ng on wh e ther th e current acc e ss and 
pr e c e d i ng acc e ss ar e both to tho shar e d read bus. This wil l moan that tho timeslot rotation w i ll run 
fast e r and moro bandwidth Is avai l ablo. 
5 If tho CPU runs out of its i nstruction cache th e n i nstruction f e tch performance is only l im i t e d by the 
on chip bus protocol. If data resid e s i n th e data cach e th e n 160 MHz performanc e I s ach ie v e d. 
Acc e ss i ng m e mory mapp e d r e gisters, PSS or ROM w i th a 3 cyc le bus protoco l (addr e ss cycl e + 
data cycl e ) g i ves 53 MHz p e rformance. 

Due to th e action of CPU cach i ng, some bandwidth limiting of th e CPU in Fractional CPU Pro 
10 acc e ss mode is oxpoctod to have little or no impact on tho overa ll CPU performance. 
^AA Implementat i on 

Th e DRAM interface Unit (D I U) is partitioned into 2 logica l blocks to fac i litate design and 
v e rification. 

a. Th e DRAM Arb i tration Un i t (DAU) which i nt e rfaces w i th the SoPEC DIU requestors. 
15 b. Th e DRAM Contro lle r Unit (DCU) which acc e ss e s th e e mbedded DRAM. 

Tho basic pr i ncip i o In design of tho D I U is to ensure that tho oDRAM is accessed at its maximum 

rat e whil e k ee p i ng th e CPU r e ad acc e ss l at e ncy as low as poss i b l o. 

The DCU is des i gned to intorfaco w i th sing l e bank 20 Mb i t I BM Cu 1 1 embedded DRAM 

p e rforming random accesses every 3 cyc le s. Page mode burst of 4 writ e access e s, associat e d 
20 with the CDU, ar e also support e d. 

Th e DAU is d e sign e d to support i ntorloavod accesses allow i ng the DRAM to bo access e d ev e ry 3 

cycles whor e back to back acc e sses do not occur over tho shored 6 4 b i t r e ad data bus. 

20.14.1 D I U Partit i on 

20.1 '1 .2 Definition of DCU l O 
25 Tab l e 123. DCU intorfaco 
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Port Namo 






Description 






Clocks and Rosots 




4- 


»« 


SoPEC Functional clock 


dau_dou_rosot_n 


1- 








Active-low, synchronous rosot in pclk domain. 
IncorporatOQ DAU hard and soft rosots. 




Inputs from DAU 


dau_dcu_msn2QtaH 


1- 


(ft 






Signal indicating from DAU Arbitration Logic 
Which when assorted stalls DCU in MSN2 


state. 


dau_dcu_odr[21 :5] 






Signal indicating the addross for the DRAM 




access. This is a 256 bit aligned DRAM 


aaoress. 


dau_dcu_nrt^n 


A- 


In 


Signal indicating tho direction for tho DRAM 




access (1-rood, Q-writo). 


dau_dou_oduwpago 


4- 








Signal indicating if access is a CDU write 
page mode access (1-CDU pago modo, 


0-not CDU pago modo). 


dau_dcu_refresh 


1- 








Signal indicating that a refresh command is to 
be issued. If asserted dQu_dou_Qdr, 


daujdoUjrwn and dQu_dcu_cduwpago aro 


ignored. 


dau_dcu_wdata 


OR pi 




256-bit write data to DCU 






dau_dou_wmaQk 


32 








Byte encoded write data mask for 256 bit 

dau_dcu_wdato to DCU 
Polarity : A "1" in a bit field of 
dau_dcu_wma6k means that tho 


corresponding byto in the 256-bit 
dau_dcu_wdQtQ js written to DRAM. 




Outputs to DAU 


dcu_dau_adv 


4- 


Owl 






Signal indicating to DAU to supply next 
command to DCU 


dou_dau_wadv 


4- 


Out 






Signal indicating to DAU to initiate next non- 
CPU write 


dcu_dau_refreshoom pi 


4- 


Qui 






Signal indicating that the DCU has completed 
a refresh. 


dcu_dau_rdata 




Out 


256 bit road data from DCU. 






dcu_dau_rvalid 


4- 


Out 






Signal indicating valid read data on 
dcu_dau_rdatQ. 



20.1 4 .3 — DRAM access typos 
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Th e DRAM acc e ss typ e s us e d in SoPEC ar e summaris e d i n Tabl e 
the DRAM gonoratos tho addr e ss i nt e rnally. 

Tab l e 121. SoPEC DRAM acc e ss typ e s 



121. For a rofrooh oporation 





Access 




Random 256 -bit read 




Random 256 bit write with byte write masking 




Page mode write for burst of 4 256 bit words with byto writo masking 


1 \V#I1 wOl ■ 


SInglo rofrosh 



10 



20.1 4 . 4 — Construct i ng th e 20 Mbit DRAM from two 10 Mbit i nstancoG 

Tho 20 Mbit DRAM i s constructod from two 10 Mb i t i nstances. Tho address rang e s of the two 
instanc e s aro shown i n Table 125 . 

Tab l e 125. Address ranges of the two 10 Mbit Instanc e s in tho 20 Mb i t DRAM 



InstanceO 



Instanc e 



Addr e ss 



F i rst word i n lowor 10 Mb i t 



I nst a nc e O 



I nstanc e l 



Hex 256 b i t 



word address 



QGOOe 



Last word i n l ow e r 10 Mbit 



F i rst word i n upper 10 Mbit 



i nstancol Last word in upper 10 Mb i t 



Binary 256 - bit word address 



0 0000 0000 0000 0000 



09FFF 



OAOOO 



0 1001 1111 1111 1111 



0 1010 0000 0000 0000 



0011 1111 1111 1111 



Th e r e are s e parate macro s ele ct s i gna l s, instO^MSN and lnst1_MSN, for e ach instanc e and 
separate dataout buss e s instOJDO and inGt1_DO, which arc multip l oxod i n tho DCU. Apart from 
those s i gna l s both instances share tho DRAM output p i ns of tho DCU. 

15 Tho DRAM Arb i trat i on Un i t (DAU) gonoratos a 17 b i t addr e ss, dQu_dcu_adr[21:5l sufficient to 
addr e ss a ll 256 bit words in th e 20 Mbit DRAM. Th e upp e r 5 bits ar e used to so l oct botwoon tho 
two memory i nstances by gating th e ir MSN p i ns. I f i nstanc e l i s so l octod th e n the l ow e r 16 b i ts aro 
trans l ated to map into the 10 Mb i t range of that instanc e . Th e mu l tiploxing and address translat i on 
rules aro shown in Tab le 126. 

20 In tho caso that tho DAU issues a rofrosh, Indicated by dQU_dcu_rofro€h, th e n both macros aro 
so l octod. Th e other contro l s i gnals 

Tab le 126. I nstance s e lection and addr e ss translation 



dau dcu r e fr e sh 



DAU Address 



bits 

dau_dcu_adr[21 :17] 



soloctod 



I nstance 



instO MSN 



insti MSN Address trans l at i on 



■ •^ 01010 



I nstancoO MSN 



A[15:0]- 
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dau_dcu_adr[20:5] 




>- 01010 


Instancel 


1- 










A[15:0] - 

dau_dcu_adr[21 :5] 
hAOOO 


1- 




InstanoeO 
Inotanool 


MSN 







dau_dcu_Qdr[21 :5l d a u_dcu_rwn and d a ujdcujGduwpago ar e ignor e d. 



The i nstance so l oction and addross translation logic i s shown in Figur e 102. 

The address translat i on and i nstance d e cod e log i c a l so i ncr e m e nts th e address prosontod to tho 

DRAM i n th e case of a pag e mode write. Ps e udo cod e is giv e n b el ow. 



if rioing_Qdgo (dau_dcu_valid) — then 

//capture the addrcao from the DAU 

next_cmdadr [21:5] — ■ dau_dGu_adr [ 2 1 ; 5 3 

eloif pagemodG_adr_inc °« 1 then 

//increment tho addrooa 

nGxt_cmdadr [2l!5] ■ cmdadr[2l!5] — i-^ 

eloc 

next_cmdadr [21 ! 5] — « cmdadr[21 i 5] 

if rioing^odgo (dau_dGu_valid) — then 

//capture the addreoo from the DAU 

adr_var [2 1 ; 5 ] : o dau_dGU_adr [2 1 s 5] 

olae 

adr_var [21 i 5] cmdadr[21i5] 

if adr_var [21: 17] — ^ 01010 then 

//choQoc inotanccO 

inotance^oel - 0 

A[15i0] o adr_var [20:5] 

eloc 

//choooe inotancel 

inotance_oel " 1 

AElS i O] o adr_var [2l!5] hAOOO 

Pseudo code for tho select logic, SELO, for DRAM I nstancoO is givon bolow. 
//inotanceO oclcctcd or refresh 

if inotancG ocl « ■ o or dau dcu rcfrooh 1 then 
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inotO MSN 



-446N 



cloc 



30 



inotO MSN 



Ps e udo cod e for th e s ele ct logic, SEL1, for DRAM I nstonc e l is given bolow. 
//inotanccl oclcctod or rcfrcoh 

if inotancc ocl 1 OR dau dcu rcfrcoh ■« 1 then 



inotl MSN 



--MSN 



cloc 



inotl MCN 



10 Dur i ng a random road, tho road data is roturnod, on dcujdaujrdQtQ, aftor timo Ta e e. tho random 
accoss t i mo, which var i es botwoon 3 and 8 no (soo Tob l o — ). To avoid any motastabil i ty i ssuos 
th e r e ad data must b e captur e d by a f li p flop which is enab l ed 2 pclk cyc l es or 12.5 ns aft e r th e 
DRAM acc e ss has boon started. Th e DCU g e n e rates tho enab le signa l dcu_dQu_rvafid to capture 
dou_jdau_rdatQ. 

15 Th e byt e wr i t e mask dau_dcu_wma6k[31 :0] must bo e xpand e d to the bit write mask 
bitwritomo6k[255:0} n ee d e d by th e DRAM. 
20.14.5 — DAU DCU i nterface description 

Tho DCU ass e rts dcu_dau_adv i n th e MSN2 stat e to ind i cat e to th e DAU to supply th e n e xt 
command. dcu_dau_adv caus e s th e DAU to p e rform arbitrat i on i n th e MSN2 cycle. Th e result i ng 

20 command i s ava i lab l e to th e DCU in th e fol l ow i ng cyc le , th e RST state. Th e tim i ng is shown in 
Figur e 103. The command to the DRAM must be valid in the /?ST and MSN1 states, or at l east 
moot the ho l d t i me requirement to tho ^fS/V fal li ng edge at the start of tho MSN1 state. 
Note that the DAU issues a va li d arb i tration resu l t following every dou_dau_adv puls e . I f no unit is 
requ e sting DRAM access, th e n a fa ll back refresh request w ill b e I ssued. When daujdGujrofroGh 

25 i s ass e rt e d th e op e ration is a r e fr e sh and dau_dcu_adr, daujdcu_rwn and dau_dcu_cduwpag e 
ar e i gnored. 



The DCU generates a second s i gnal, dcu^dau^wadv, wh i ch is assorted i n the ffST state. 
This ind i cates to th e DAU that it can p e rform arb i tration in advanc e for non CPU wr i t e s. 
Tho roason for perform i ng arbitrat i on in advanc e for non - CPU writ e s is e xp l a i n e d i n " 
Command Mult i p le xor Sub - block 

Tab le 136. Command Mu l t i pl e xor Sub - b l ock l O D e fin i tion 



Port namo 



I/O 



D e scr i ption 



Clock s and R e sets 



pelk 



System C l ock 



prst_n 



System r e s e t, synchronous act i v e l ow 



DIU R e ad I nt e rfac e to SoPEC Un i ts 



: unit=^_diu_radr[21 :5] 47 



Read addr e ss to D I U 



7 bits wid e (256 - bit a l igned word). 



d i u *^unit - "> rack 



Hi tf 



Acknowl e dge from D I U that r e ad r e quest has boon 
accept e d and now r e ad addr e ss can b e plac e d on 
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<unit>_diu_raclr 


DiU Writo Interface to SoPEC Units 


<unit>_diu_wadr[21 :5] 




in 






Write address to DIU oxoopt CPU, SCB, CDU 






22 


In 


PPU Writfi iririrf''** tn nil I 






opu_cliu_wmask 


4« 


If) 


Byto enables for CPU writo. 






odu_diu_vyadr[21 :3] 


40 


In 


CDU Writo address to DIU 




19 bits wide (6^ -bit alignod word) 


Addresses cannot cross a 256 bit word DRAM boundary. 


diu_^unit>_waok 


4 


Otrt 






Acknowledge from DIU that write requoct has boon 
accoptcd and now writo address can be placed on 


<unit>_diu_wadr 


Outputs to CPU Intorfaoo and Arbitration Logic sub block 


re_arbitrate 


4 


Out 






Signalling tolling tho arbitration logic to chooso tho next 
arbitration winner. 


re_arbitrate_wadv 


4 


Out 






Signal tolling the arbitration logic to choose the next 
arbitration winner for non CPU writes 2 timeslots in 


advance 


Debug Outputs to CPU Configuration and Arbitration Logic Sub block 




writo_6ol 


§ 


Qt it 


Signal indicating the SoPEC Unit for which tho current 




writo transaction is occurring. Encoding is described in 


Tablo . 


write_compiete 


4- 


Oi it 


Signal indicating that writo transaction to SoPEC Unit indi 




catod by writejsel is comploto. 


Inputs from CPU Intorfaoo and Arbitration Logic sub block 


arb_gnt 


4- 


In 


Signal lasting 1 cycle which indicates arbitration has 




occurred and arbjool is valid. 


arb_sel 


§ 


In 






Signal indicating which requesting SoPEC Unit has won 


arbitration. Encoding is described in Table . 


dir_sel 


2 


In 


Signal indicating which sense of aocoss associated with 




arbjsel 

00: issue non CPU writo 
01 : read winner 
10: write winner 
1 1 : refresh winner 


Inputs from Read Writo Multiplexor Sub block 




write_data_valid 


2 








Signal indicating that valid write data is available for tho 
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current oommand. 

O0~not valid 

01 -CPU write data valid 

10"non CPU writo data valid 

1 1 -both CPU and non CPU write data valid 




wdata 


255 




256 bit non-CPU writo data 






opu^wdata 


32 




32-bit CPU write data 






Outputs to Road Write Multiplexor Sub block 




write_data_aocopt 




Out 






Signal indicating the Command Multiplexor has accoptod 


the writo data from tho writo multiplexor 

00- not valid 

01- accopts CPU write data 
1Q-acoepts non CPU write data 
1 1 -not valid 


Inputo from DCU 


dcu_dau_adv 


4- 


lA 


Signal indicating to DAU to supply next command to DCU 






dGU_dau_wadv 


1- 


In 


Signal indicating to DAU to initiate next non CPU writo 






Outputs to DCU 


dau_dcu_adr[21 :5] 






Signal indicating tho address for tho DRAM access. This ic 




a 256 bit aligned DRAM address. 


dau_dcu_rwn 


4- 


Out 


Signal indicating the direction for the DRAM access 




(1 -road, Q-write). 


dau_dGu_Gduwpage 




Out 






Signal indicating if aocoss is a CDU writo pago modo 
access (1-CDU page modo, Q-not CDU pago modo). 




dau_dcu_refresh 


A- 


Out 


Signal indicating that a rofrosh command is to bo issued. If 






assorted dQu_dcu_Qdr, dou_dou_rwn and 
dau_dcu_cduwpQgo aro ignored. 


dau_dcu_wdata 


2§6 




256 bit writo data to DCU 






dau_dcu_wmask 


32 


Out 






Byte encoded writo data mask for 256 bit dQu_dcu_wdQta 
to DCU 



» 



The DCU state - mach i ne can sta l l i n th e MSN2 state when th e s i gna l dQu_dcu_m6n2eteU is 
asserted by tho DAU Arbitration Logic, 

The states of tho DCU stat e machin e ar e summarised i n Tab l e 127 . 
5 Table 127. States of tho DCU state mach i n e 



State Doscrlpt i on 
RST Restore state 
MSN4- Macro select state 1 
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MSN2 



Macro s e l e ct state 2 



20.1 4.6 DCU state machin e s 

Th e I BM DRAM has a s i mpl e SRAM l ike i nterfac e . The DRAM i s acc e ss e d as a s i ng l e bank. The 

stat e mach i ne to access th e DRAM is shown In Figure 104. 

The signal pagemodojadrJtiG i s exported from the DCU as dcu_dau_cduwaco 0 pt. 

dGu_dau_cduwaccopt tells th e DAU to supply tho next wr i te data to tho DRAM 

20.14.7 — CU - 11 DRAM timing di a gr a ms 

Th e I BM Cu-1 1 e mbedd e d DRAM datasheet is r e fer e nc e d as [16]. 

Tab l e 128 shows th e timing parameters wh i ch must bo ob e y e d for th e I BM embedded DRAM. 
Tab le 128. 1.5 V Cu 11 DRAM a.c. param e t e rs 





Parameter 


Mm 




1 initr 


Symbol 






Input sotup to MSN/PGN 






ns 


Thw 


Input hold to MSN/PGN 


2 






^aee 


Random acooss time 


3 


8 


ns 




MSN active timo 


8 




RS 




MSN rostoro time 


4 




RS 


Teye 


Random R/W cycle timo 






ne 




Refresh cycle time 






ns 




Page mode access timo 




3^ 


RS 




PGN active timo 










PGN restore time 






HS 


Tpeye 


PGN cycle time 


4 




RS 




MSN to PGN restore delay 


6 




RS 




MSN active for page mode 


45 




RS 




Refresh period 










Page active to MSN rostoro 


4 




RS 



Tho IBM DRAM is asynchronous. I n SoPEC it i nt e rfaces to s i gna l s c l ock e d on pcfk. Th e fol l owing 
t i m i ng d i agrams show how th e timing parameters in Tab l e 129 are sat i sfi e d in SoPEC. 
20.1 4.8 Definit i on of DAU l O 
Tab le 129. DAU i nterfac e 



Port Nam e 



PlRS I/O Descr i pt i on 



C l ocks and Resets 



SoPEC Funct i onal c l ock 



prst_n 



Act i v e- low, synchronous roset i n pcik domain 



dau dcu reset n 



Out Activ e- low, synchronous reset in pcfk domain. Thic 



r e s e t s i gna l , exported to tho DCU. incorporates tho 
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loGally oapturod DAU vorsion of hard resot (prGtjn) and 




tho soft rosot configuration register bit ''Rocot. 


CPU Intorfaoo 








Gpu_adr 


22 




CPU address bus for both DRAM and configuration 
register access. 

9 bits (bits 10:2) are required to decode tho 




configuration register address space. 


22 Bits can address the DP^AM at byte leveL PRAM 
addresses cannot cross a 256 bit word DRAM 


boundary. 


cpu_dataout 


S2 


fl4 


Shared write data bus from the CPU for DRAM and 
configuration data 


diu_cpu_data 




Out 


Configuration, status and debug read data bus to tho 

QP\J 


diu_cpu_debug_valid 


4- 


Oi if 


Signal indicating the data on the diu_cpu_data bus is 
valid debug data. 


cpu_rwn 


4- 




Common read/not writo signal from tho CPU 


cpu_acode 


2 




CPU access code signals. 

CDU acodeFOI — Program (0)/ Data M ^ access 


cpu_acode[1] — User (0) / Supervisor (1) access 


The DAU will only allow supervisor mode accesses to 


data space. 


Gpu_diu_soi 


A- 




Block select from the CPU. When cpu diu se/ls high 
both cpujadr and cpu_dotaout are valid 




diu_Gpu_rdy 


1- 




Ready signal to the CPU. When diu_opujrdy is high it 


indicates the last cycle of tho access. For a write cycle 
this means opujdataout has boon registered by tho 




DiocK ano lor a reao cycie tnis means tne oata on 
diu_cpu_data is valid. 


diu_cpu__berr 


4- 




Bus error signal to the CPU indicating an invalid 
access. 


DIU Read Interface to SoPE 




4t& 




<unit>_diu_rroq 


4- 




SoPEC unit requests DRAM read. A read request must 
be accompanied by a valid read address. 




'"■unit^_diu_radr[21 :53 


4^ 




Road address to DIU 

17 bits wide (256 bit aligned word). 




Note : "<unit>" refers to non CPU requesters only. 


CPU addresses are provided via "cpu_adr". 


diu_<unit>_raGk 


4 


Out 


Acknowledge from DIU that read request has boon 
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accoptod and new road address can be placod on 


<unit>_diu_rQdr 


diu^datQ 


§4 








Data from DIU to SoPEC Units oxoopt CPU. 
First 64-bits is bits 63:0 of 256 bit word 


Socond 64 bits Is bits 127:64 of 256 bit word 


Third 64 bits is bits 191 :128 of 256 bit word 


Fourth 64 bits is bits 255:192 of 256 bit word 




dram_cpu_data 


256 


Out 


256 bit data from DRAM to CPU. 


diu_<unit>_fvalid 




Out 


Signal from DIU telling SoPEC Unit that valid read data 




is on tho diu_datQ bus 


DIU Writo Intorfaco to SoPEC Units 


rf'iii-iJ + "^ Will i/iir/^M 








"^ufni"* utu wr 


ooKco unii rec|uesis uk/\m wriiG. a write rec|uest 
must be acoompanied by a valid write address. 






<iinit> Hill \A/nrl'^''''^ 












Moto • "<unit>" rofom to non CPU reguegtter*! 




scb_diu_wmask[7:0] 


g 








Byte write enables applicable to a given 64-bit quarter 

wnrd trnn'^Lff^rrnfl frnm thf^ ^f^R Mnff^ thj^t Hifff^rf^nt 


m3sk V3kjg5i x^rf^ tJ5-f^d with pririh nunrtf^r wnrri 


Requirement for tho USB host core. 




diu CPU write Fdv 


1- 


Out 






empty. 


cpu_diu_wdatavalid 






Write enable for the CPU posted write buffer. Also 




confirms that the CPU write data, address and mask 


are valid. 


cpu_diu_wdata 






CPU writo data which is loaded into tho posted writo 






cpu_dlu_wadr[21 :4] 


4^ 








128 bit aligned CPU write address. 


cpu_diu_wma6k[1 6:0] 


46 








Byte enables for 128 bit GPU posted write. 


cdu_diu_wadr[21 :3] 


4^ 




CDU Write address to DIU 






10 bits wido (64 bit aligned word) 

Addresses cannot cross a 256 bit word DRAM 


boundary. 


diu_*^unit^_wack 


4- 


Out 






Acknowledge from DIU that write request has boon 
accepted and new write address can be placod on 


<unit>_diu_wQdr 


<unit>_diu_data[63:0] 


S4 








Data from SoPEC Unit to DIU except CPU. 
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First 64 bits is bits 63 0 of 256 bit word 


Second 64-bits is bits 127:61 of 256 bit word 


Third 64 bits is bits 101 :1 28 of 256 bit word 


Fourth 64 bits is bits 255:192 of 256 bit word 




Noto : "<unit>" rofors to non CPU requestors only. 


<unit>_diu_wvalid 










Signal from SoPEC Unit indioating that data on 
<unit>_diu_dGta is valid. 


Note : "<unit>" rofors to non CPU requestors only. 


Outputs to DCU 


clau_dcu_msn2stali 




Out 






Signal indicating from DAU Arbitration Logic which 
when de asserted stalls DCU in MSN2 state. 




dau_dcu_adr[21 :5] 




Out 


^ifiml inrlipitinn thr* iHHrp*=t^ for fine^ DRAIV/! '^nnp^'^'i 




This is a 256 bit aligned DRAM address. 




dau_dcu_rwn 


4- 


Out 






Signal indicating the direction for the DRAM access 
(1-road, O-wito). 


dau_dcu_Gduwpago 


4- 


Out 






Signal indicating if access Is a CDU write page mode 
access (1~CDU page mode, 0-not CDU page mode). 




dau_dcu_refresh 


4- 


Out 


Signal indicating that a refresh command is to be 






issued. If asserted daujdcujsmdjadr, daujdoujrwn 
and dQu_dcu_cduwpage are ignored. 




dau_dcu_wdata 


2§6 


Oi it 


256 bit write data to DCU 






dau_dcu_wmask 


32 


Hi if 






Byte encoded write data mask for 256 bit 

dQu_dcu_wdata to DCU 

Polarity : A "1" in a bit field of dQu_dcu_wma6k moans 




that the corresponding byte in the 256 bit 
dau_dGu_wdQta js written to DRAM. 




Inputs from DCU 


dGu_dau_adv 


4- 


(n 


Signal indicating to DAU to supply next command to 




DGU 


dGU_dau_wadv 


A- 


(A 






Signal indicating to DAU to initiate next non CPU write 


dGu_dau_ref reshcom plete 


4- 


(« 






Signal indicating that the DCU has comploted a 
refresh. 


dcu__dau_rdata 


2§6 




256 bit road data from DCU. 






dGU_dau_rvalid 


4- 




Signal indicating valid read data on doujdaujrdata. 







The CPU subsyst e m bus i nterfac e i s descr i bod in mo re deta i l in S e ction 11 . 4 .3. Th e DAU block 
w ill on l y a l low supervisor - mod e accesses to update i ts configuration r e g i sters ( i . e . cpu_acodo[1 :0J 
- b1 1). A l l oth e r acc e ss e s w ill result in diu_cpu_borr being asserted. 
20.1 4 .9 — DAU Configurat i on R e gisters 
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Tab l e 1 30. DAU configuration r e g i sters 





FcBSl R?SP ^^BT^ flip IS 
^^^^^ 


#1 








QyQQ 




4- 


0x4- 


A writo to this register causos a reset 


of tho DIU. 


This register can bo road to indicato 
the reset state: 

0 — reset In progress 

1 — rosot not in progress 


Rofrosh 


9x04 


RofroshPoriod 


9 


0x0€3 


Refresh controller. 






Whon sot to 0 rofrosh is off, otherwise 


the value indicates the number of 


oyoles, less one, between each 


refresh. [Note that for a system clock 
Frequency of 160MHz, a value 
oxcooding 0x63 (indicating a 100 cycle 


refresh period) should not be 
programmed, or the DRAM will 
malfunction.] 


Timeslot ailocation and control 


nvnft 


NumMainTimoslots 


§ 








Number of main timeslots (1 6^) loss 


OxOG 


CPUProAccosoTimo 


4 






s lots 


(CPUProAccBGGTimoGlotG * 1) main 
slots out of a total of 
(CPUTotQiTlmoGlotG + 1) are pre 


ceded by a CPU access. 




CPUTotalTimeslots 


4 


0x0 






(CPUPreAGGeGGTimoGlote ^ 1) main 
slots out of a total of 
(CPUTotalTimoGlotG + 1 ) are pre 


ceded by a CPU access. 


0x100 0x1 FC 


MainTimeslot[63:0] 












[63:1][3:0] 
- 0x0 


Programmable main timeslots (up to 
64 main timeslots). 




RoadRoundRobinLo 


43 


0x000 






vel 




For each read requester plus refresh 
0 ~ levell of round robin 
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1 ~ lovel2 of round robin 

The bit ordor io dofinod in Tablo . 




0x204 


EnabloCPURound 


4 


9x4 


Allows the CPU to oarticpate in the 






unusod read round robin schenne. If 


disabled, the shared CPU/rofrosh 


round robin position is dodicatod 


sololy to refresh. 




RotationSyno 


4 


0}t4 








Writing 0, followod by 1 to this bit 
allows tho tlmoslot rotation to advanoo 


on a oyolo basis which can be 
determined by the CPU. 


Ox20C 


m InNonCPU Read Ad 


4^ 


0x800 


12 MSBs of lowest DRAM address 










which may bo read by non CPU 
requesters. 


9x240 


mlnDWUWriteAdr 


42 




12 MSBs of lowest DRAM address 










which may be written to by the DWU. 


0x244 


minNonCPUWriteAd 


42 


0x300 


12 MSBs of lowest DRAM address 




F 




which may be written to by non CPU 




requestors other than the DWU. 


Debug 


9x300 


DobugSoloct[11:2] 


40 


0x304 










Debug address solect. Indicatos tho 


address of tho register to report on tho 
diu_cpujdata bus when it is not 
otherwise boing usod. 
When this signal carries debug 
information the signal 
dfu_cpu_dobug_VQlid W\\\ be asserted. 








Debug: arbitration and performance 


9x304 


ArbitrationHlstory 


22 










Bit 0 - arb^gnt 

Bit 1 •- arb_exoouted 

Bit 6:2 - arb_sol[4:0] 

Bit 12:7 - timeslot_number[5:0] 

Bit 15:13 - accoss_typo[2:0] 

Bit 16 ~ back2back_non_cpu_write 


Bit 17- 


sticky_back2back_non_cpu_wrlte 
(Sticky version of same, cleared on 


reset.) 

Bit 18 - rotation_sync 
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B i t 20:10 - rotat i on Gtoto 



B i t 21 ~ otiGkyJnva l id_non_cpu_adr 
SooSoction 20.14.9.2 D I U Debug for 



a d e scr i ption of the floldo. 



Road on l y r e g i ster. 



9x308 



D I UP e rformanc e 



34- 



B i t 0 ~ opu_diu_rreq 
B i t 1 ~ scb_diu_rroq 
Bit 2 ~ cdu_diu_rroq 



Bit 3 ~ cfu_d i u_rroq 
B i t 4 ~ lbd_diu_rreq 



Bit 5 - sfu_d i u_rr e q 



Bit 6 - td_diu_rr e q 
Bit 7 ~ tfs_diu__rroq 



Bit 8 - hGu_d i u_rr e q 
B i t 0 ~ dno_d l u_rreq 



Bit 10 - l l u_diu_rr e q 
Bit 1 1 - pcu_diu_rreq 
Bit 12 - opu_diu_wreq 



Bit 13 - scb_diu_wreq 



Bit 1 4 ^ cdu_diu_wroq 



1 15 ~ sfu_dlu_wroq 
i t 16 - dwu_diu_wreq 



i t 17 - refr e sh_roq 

i t 22:18-road_sel[4:0] 



i t 23 - r e ad_comp l ete 



t 28:21 -writo_Gol[4:0] 
i t 29 - wr l te_Gomplete 



i t 30 ~ dcu_dau_rofr e shcompi e t e 



S ee S e ction 20.1 4 .9.2 D I U Debug for 
a d e script i on of tlio fie l ds. 



R e ad on l y rogistor. 



Dobug DIU road requ e stors int e rfac e signa l s 



B i t 0 ~ cpu_d i u_rreq 
Bit 22:1 -cpu_adr[21:0] 
B i t 23 ~ diu_opu_raGk 



0x30C 



CPUR e ad l nterface 25 



Bit 24 ~ d i u_Gpu_rval i d 
Road on l y register. 



Qx340 



SCBRead l nterface 29 



B i t 0 " SGb_d i u_rroq 

B i t 17:1 - scb,diu_radr[21 :5] 



Bit 18 ~ diu sob rack 
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B i t 19 - d i u scb rvalid 



Read only regist e r. 



9x344 



CD U R e ad I nt e rf ao e 



20 



B i t 0 - cdu_diu__rroq 

B i t 17:1 - odu_dlu_radr[21 :5] 



Bit 18 - d i u Gdu rack 



Bit 19 - diu Gdu rval i d 



Road only rog i stor. 



9x34d 



CFURoad l ntorfaoo 



20 



Bit 0 ~ cfu_diu_rreq 



B i t 17:1 - cfu_diu_radr[21:5] 



B i t 18 - d i u cfu rack 



B i t 19 - diu ofu rvalid 



R e ad on l y r e gist e r. 



9x34C 



LBDR e ad l nterfaoo 



20 



Bit 0 - l bd_diu_rroq 

Bit 17:1 - lbd_diu,radr[21:5] 



Bit 18 - diu Ibd rack 



B i t 19 -d i u Ibd rvalid 



R e ad on l y r e gist e r. 



0x320 



SFUR e adlnt e rfac e 



20 



Bit 0 - sfu_diu_rr e q 

Bit 17:1 - sfu_diu_radr[21:5] 



B i t 18 - d i u sfu rack 



Bit 10 - diu sfu rva l id 



Road only rogistor. 



0x324 



TDRoad l nt e rfaco 



20 



B i t 0 ~ td_d i u_rroq 

B i t 1 7:1 - td„diu_radr[21 :5] 

B i t 18 - d i u td rack 



B i t 1 9 -d i u td rva li d 



Road on l y rogistor. 



9x328 



TFS R e ad I nt e rfac e 



20 



Bit 0 - tfs_d i u_rreq 



Bit 17:1 - tfG_diu_radr[21:5] 



Bit 18 - diu tfs rack 



B i t 19 - d i u tfs rvalid 



R e ad on l y r o gist o r. 



0x326 



HCURoad l ntorfaoo 



20 



Bit 0 ~ hou_diu_rroq 

Bit 17:1 - hGu_d i u_radr[21:5] 



B i t 18 - d i u_hcu_raGk 
ti t 19 - d i u hou rval i d 



R e ad on l y reg i ster. 



^(330 



PNCR e ad l ntorfaoo 20 



Bit 0 - dno_d i u_rroq 

B i t 17:1 - dnG_diu_radr[21:5] 
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Read on l y rogiotor. 



Bit 18 - diu dno rack 



Bit 19 - diu dnc rva l id 



9x334 



LLU Road I ntorf aco 



29 



B i t 0 ~ liu_d i u_rreq 

Bit 17:1 - li uu,diu_radr[21:5] 



B i t 18 - diu ll u rack 



B i t 19 -diu llu rvalid 



Road only reg i st e r. 



9x338 



PCU R e ad I nt e rf aoo 



29 



B i t 0 ~ pGu_diu_rr e q 

B i t 17:1 - pGu_diu_radr[21:5] 



Bit 18 ~ d i u_pcu_raGk 



Bit 19 - d i u_pcu__rvalid 



Road on l y rog i stor. 



D e bug D I U wr i to roquostors i ntorfaoo signolo 



9x33G 



CPUWr i tolntorfaoo 27 



B i t 22:1 -opu_adr[21:9] 

B i t 2 4 :23 - Gpu_d i u__wmask[1 :0] 



B i t 25 - dlu_cpu_wack 
Bit 26 - cpu_diu_wva li d 



Rood on l y rogistor. 



B i t 9 - Gpu_diu_wroq 



9x349 



SCBWritolnt e rfac e 



29 



Bit 0 - scb_diu_wr e q 



B i t 17:1 - sob_d i u_wadr[21:5] 
Bit 18 -d i u sob wack 



Bit 19 ~ sob diu wva l id 



R e ad on l y r e gist e r. 



9x344 



CDUWr i t e lnt e rfac e 22 



B i t 9 - odu_diu_wroq 

B i t 19:1 - cdu_diu_wadr[21 :3] 



B i t 29 ~ d i u cdu waok 



B i t 21 - cdu_d i u_wva li d 
R e ad only r e g i st e r. 



SFUWritolntorfaoo 29 



B i t 0 ~ sfu_diu_wr e q 



Bit 17:1 - Gfu_diu_wadr[21:5] 



B i t 18 - diu sfu waok 



Bit19-Gfu d i u wva l id 



Road on l y rog i stor. 



9x34G 



DWUWr i to l ntorfaco 29 



B i t 9 - dwu_diu_wreq 

B i t 17:1 - dwu_d i u_wadr[21 :5] 



B i t 18 -d i u dwu wack 



B i t19-dwu diu wva li d 
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Read only register. 


Debug DAU DCU interface signals 






0x3§0 


DAU DCUIntorfaco 


25 










Pit 1d:u clau__dcu_aar[21 :5] 

Bit 1 7 - dau_dcu_rwn 

Bit 18 - dau_dGU_oduwpago 

Bit 19 - dau_dGu_rofrosh 

Bit 20 - dau_dcu_msn2stall 

Bit 21 - dcu_dau_adv 

Bit 22 - dcu_dau_wadv 

Bit 23 ~ dcu_dau_rofroshcomploto 


Bit 24 - dcu_dau_rvalid 
Read only register. 



Each main t i m e slot can bo ass i gn e d a SoPEC DIU r e qu e stor aocording to Tab l e 131 . 
Tablo 131. SoPEC DIU r e qu e ster encoding for main t i moslots. 



Nsimo 


Index (binary) 


Indox (HEX) 








SCB(W) 


bO 0000 


0x00 






CDU(W) 


b0eO4- 


0x4- 








b0040 


0x2 






DWU 


bOG44 


0x3 




SCB(R) 


bmm 


0x4 






CDU(R) 


b04^ 


Ox§ 






GPU 


bono 


0x0 


[_BP 


b0111 


0x7 


SFU(R) 


b40QQ 


0x0 










0x0 








MOW 


OxA 


TE(TFS) 






b1011 


OxB 




M4eo 




y=y 


b44«4. 


OxD 




b4440 


OxE 



RoQdRoundRobinLovoi and R e adRoundRobinEnabio rogistoro aro onoodod in the bit order 
doflnod I n Tab le 132. 

Tabl e 132. R e ad round - robin rogistors b i t ordor 



Name 


Bit index 








9 


S€B(R) 
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4- 


CDU(R) 




2 


LBD 


3 


SFU(R) 


4 




TE(TD) 


& 




TE(TFS) 


6 




HGU 


7 




8 




9 


PQU 


40 


GPU / 


44 


Refrosh 







20. 1^.9.1 Configuration rogiGtor r e s e t state 

Th e Refr e shP e riod configuration r e gister has a rosot va l ue of 0x063 wh i ch ensur e s that a refrosh 
wi l l occur ov e ry 100 cycles and th e contents of th e DRAM wil l rema i n val i d. 
The CPUProAcceeeTlm e elotB and CPUTotaiTimeeiots conf i guration r e g i st e rs both hav e a r e s e t 
5 va l u e of 0x0. Matching valu e s in these two rog i stors moans that ovory s l ot has a CPU pro acoss. 
NumMainTim e eiots Is r e s e t to 0x1 , so thoro ar e just 2 main timoslots in the rotat i on i n i tial l y. Those 
slots a l t e rnate botwoon SCB writ e s and PCU r e ads, as d e fin e d by the rosot value of 
MainTfmo6fot[63:0], thus rospoct i ng at r e s e t tim e tho g e n e ral ru le that adjac e nt non CPU writes 
are not porm i ttod. 
10 Th e first acc e ss i ssued by tho D I U after reset wi ll bo a rofrosh. 
20. U. 0.2 DIUDobug 

External v i s i bil i ty of the DIU must be prov i d e d for debug purpos e s. To facilitat e this debug 
r e g i sters ar e added to tho D I U addr e ss space. 

Th e D I U CPU syst e m data bus diu_cpu_data[31:0] returns configuration and status r e gist e r 
15 i nformat i on to tho CPU. When a configurat i on or status regist e r is not b e ing r e ad by th e CPU 

d e bug data i s returned on diu_cpu_dQta[31:0] i nstead. An accompany i ng act i ve high 

diujGpujdobug_valid signa l is usod to indicate when tho data bus conta i ns valid debug data. 

The DIU featur e s a D e bugSoloct r e gist e r that controls a l ocal mu l t i plexor to determ i n e which 

register i s output on diu_cpu_dQta[31:0]. 
20 Throe kinds of debug information aro gather e d: 

a. Tho order and access typo of D I U roquostors w i nn i ng arbitrat i o n . 

Th i s informat i on can bo obta i ned by observ i ng th e s i gnals i n th e ArbitrationHistory d e bug regist e r 
at DiU_Bas e -^0x304 describ e d i n Table 1 33. 

Tab le 133. ArbitrationHictory debug r e g i ster d e scr i pt i on, DIU_bas e +0x30 4 

25 



Field name 


Ritr: 


Description 


arb^nt 


1- 


Signal lasting 1 cycle which is assorted in tho oyolo following a main 
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arb i tration or pro arb i trat i on. 



arb oxocutod 



Signal last i ng 1 oycio which indioatoo that an arb i trat i on resu l t has 



actua l ly boon oxocutod. I s usod to d i fferontiato betw ee n *pro* arb i trat i on 
and *main* arb i tration, both of wh i ch caus e arbjgnt to bo assert e d. If 



Qrb_oxoGutod and arbjgnt aro both high, thon a ma i n ( e xecut e d) 
arb i tration i s ind i cated. 



arb sol 



S i gna l Indicat i ng which request i ng SoPEC Unit has won arb i tration. 
Encoding i s describ e d In Tab l e . Rofroeh winn i ng arbitration i s 



indicated by acc e ssjtype. 



t i m e slot number 



§ 



S i gnal indicating wh i ch ma i n times l ot is either curr e nt l y b e ing serviced, 



or about to be serv i c e d. Th e latter case applies whore a main slot i s pro 
empted by a CPU pre accoss or a scheduled refr e sh. 



access_type 



S i gna l i nd i cat i ng th e or i gin of th e w i nning arb i tration 
000 " Standard CPU pr e- acc e ss. 



001 ~ Sch e du le d r e fresh. 



010 - Standard non CPU t i m e s l ot. 



01 1 - CPU access v i a unus e d r e ad/write s l ot, ro allocat e d by round 
rob i n. 



00 ~ Non - CPU wr i t e via unused write s l ot, r e a l locat e d at pro 
arbitration. 



01 ~ Non CPU road v i a unusod read/write s l ot, r e a l locat e d by round 
robin. 



110 ^ R e fresh via unused road/writ e slot, re a l located by round robin. 



Ill- CPU / R e fr e sh acc e ss duo to RotationSync ~ 0. 



back2back non c 



pu_wr i te 



I nstantan e ous i ndicator of attempt e d il l e gal back to back non CPU 
wr i te. (Recall from section 20.7.2.3 on page 212 that th e s e cond wr i te of 



any such pair Is d i sregarded and r e a ll ocatod v i a th e unused r e ad 



round - rob i n scheme.) 



st i cky_back2back_ 
non_cpu_writo 



4- 



Sticky vers i on of sam e , c le ared on reset. 



rotation^syno 



Curr e nt value of the RotationSync configurat i on bit. 



rotat i on stato 



Those bits i ndicate th e current status of pr e arbitat i on and ma i n times l ot 
rotation, as a resu l t of th e RotationSync setting. 



00 - Pre arb enabled, rotat i on enabled. 



01 ~ Pre arb disab l ed, rotat i on enabled. 



10 - Pro arb disabled, rotat i on disab l ed. 



11^ Pro arb enabled, rotation d i sab l ed. 



00 is th e norma l functiona l sotting when RotationSync is 1 . 
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bocauso of RotattonSyno having boon oloarod. Howovor the main 


arbitration has yet to finish its current rotation. 






allowod. 

1 1 indicates that RotationSync has just been changed from 0 to 1 and 


that pre arbitration is being given a head start to look ahead for non- 




CPU writes, in advance of the main rotation starting up again. 


stickyJnvalid_non 
_Gpu_adr 




Sticky bit to indicate an attempted non CPU access with an invalid 




address. Cleared by rooot or by an explicit write by the CPU. 



Tabl e 134. arb^eoi, roadjsol and writo^sol encoding 



Name 



Ind e x (binary) 



I ndex (HEX) 



bO 0000 



rwnn 



CDU(W) 



bO 0001 



0x0+ 



SFU(W) 



bO 0010 



QyQ2 



DWU 



bO 0011 



Qj(Q3 



SCB(R) 



bO 0100 



Qx Q4 



CDU(R) 



bO 0101 



Qx05 



bO 0110 



rwAA 



bO 0111 



bO 1000 



QyQQ 



TEfFD) 



bO 1001 



TE(TFS) 



bO 1010 



OxOA 



up I I 



bO 1011 



QyQg 



bO 1100 



bO 1101 



bO 1110 



9xoe 



R e fr e sh 



bO 1111 



QyQp 



CPU(R) 
CPU(W) 



b1_0000 
b1 0001 



0x40 
9*44 
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Th e e nood i ng for arbjB e l i s d e scr i bed i n Tabl e 13 4 . 

b. Tho timo botwoon a DIU requestor roquosting an accoss and comp l et i ng tho accoss. 
Th i s i nformat i on can b e obta i n e d by observ i ng the s i gnals I n the DlUPorformanoo debug r e g i ster 
5 at DfU__BQeo+0x308 doscribod I n Tob l o 1 35. Tho oncoding for roQdjsel and writo_Got I s 

d e scribed in Tab le . Tho data coll e ct e d from DfUPorformanc e can bo post process e d to count 
tho number of cycles between a un i t requ e st i ng DIU accoss and the accoss boing comp l eted. 

Tabl e 135. DlUPorformanc e d e bug reg i ster descript i on, DIU_baso+0x308 

10 



Field namo 


Bits 




<unit>_diu_rroq 




Signal indicating that SoPEC unit roquosts DRAM road. 


<unit^_diu_wreq 


§ 


Signal indicating that SoPEC unit roquosts DRAM write. 


refresh_req 


4- 


Signal indicating that refres/? has requested a DIU access. 


read_sol[1:0] 


§ 


Signal indicating the SoPEC Unit for which the current read 




transaction is occurring. Enooding is doscribod in Table . 




read_complete 


4- 


Signal indicating that read transaction to SoPEC Unit indicated by 




roQd_Gol is complete i.e. that tho last road data has been output 


by tho DIU. 


write_sel[4:0] 


§ 


Signal indicating the SoPEC Unit for which the current write 
transaction is occurring. Encoding is described in Table — r 




write_complete 


4- 


Signal Indicating that writo transaction to SoPEC Unit indicated 
by wnte_Gel is complete i.e. that the last write data has been 


transferred to the DIU. 


dcu_rof rosh_com plete 


4- 


Signal indicating that refresh has completed. 



c.int e rface s i gna l s to D I U requestors and DAU DCU intorfaco. 



A ll interface s i gna l s w i th tho oxcoption of data busses at tho i nterfac e s b e tw ee n th e DAU and 

DCU and DIU writo and r e ad requestors can bo monitored I n debug mod e by obs e rv i ng d e bug 

registers DIUJBaGe^0x314 to DIU_Bqgo^0x354. 
15 20.1 4.10 DRAM Arb i tration Un i t (DAU) 

Tho DAU I s shown in Figure 101 . 

Th e DAU is composed of tho fo l lowing sub - b l ocks 
— CPU Configuration and Arbitration Log i c sub b l ock. 

b-. — Command Mu l tipl e xor sub block. 
20 Bi — Read and Write Data Mu l t i ploxor sub b l ock. 

The funct i on of the DAU is to supply DRAM commands to tho DCU. 

Th e DCU r e quests a command from the DAU by assert i ng dcu_dau_Qdv. 

-* Th e DAU Command Multiploxor roquosts the Arb i tration Logic sub block to arb i trate th e 

next DRAM access. The Command Mu l t i pl e xor pass e s dcu_dQU_Qdv qg the rojarbitrato 
25 s i gna l to the Arb i tration Log i c sub b l ock. 
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I f tho RotationSync bit has be e n cl e ar e d, th e n th e arb i trat i on l ogic grants e xc l usivo acc e ss 

to tho CPU and schedu i od rofreshes. I f th e b i t has b e en sot, regular arbitrat i on occurs. A 
d e tail e d d e scr i pt i on of RotationSync i s g i v e n I n s e ct i on 20.14.12.2.1 on pago 1 . 

-* Unti l tho Arbitration Logic has a valid r e sult It stalls tho DCU by assort i ng 

dQu_dcu_mcn2GtaH. Th e Arbitration Log i c th e n r e turns tho soloctod arb i trat i on w i nner to the 
Command Multiplexor which Issu e s th e command to th e DRAM. Tho Arb i trat i on Logic could 
sta ll for example if i t se l ected a shared read bus access but the R e ad Mu l tip l exor ind i cat e d 
i t was busy by do asserting read_Gmd_rcly[1]. 

^ In th e cas e of a read command th e r e ad data from tho DRAM is mu l t i pl e xed back to the 

r e ad r e qu e stor by th e Road Multipl e xor, in th e case of a wr i t e operation tho Wr i to 
Mu l t i p le xor mu l t i pl e x e s the writo data from tho selected DIU writ e r e qu e stor to th o DCU 
boforo tho writ e command can occur. I f th e wr i t e data i s not ava i lab l e th e n tho Command 
Mu l t i plexor w ill k e ep daujdcu_valid d e assorted. This wi ll stal l the DCU unt il the write 
command is ready to b e i ssued. 

Arb i trat i on for non CPU writes occurs i n advance. Tho DCU prov i des a signal 

doujdau_wadvvih\oh tho Command Mult i pl e xor issu e s to th e Arbitrate Log i c as 
rojarbitrato^wadv. I f arbitrat i on i s b l ock e d by the Writo Mu l t i p le xor b ei ng busy, as i ndicat e d 
by writo_cmd_rdy[1] b ei ng de ass e rt e d, th e n th e Arbitrat i on Logic wi l l stall th e DCU by 
ass e rting dau_dcu_mcn2stali unti l the Write Multiplexor i s r e ady. 

20.14.10.1 R e ad Accogg o s 

Tho t i ming of a non CPU DIU road access are shown i n Figure 100. Note ro_arbitrat e is assorted 
in the MSN2 s t a t o of th e pr e vious aocoss. 

Not e th e fix e d timing r el at i onship between tho road acknowledgment and tho first rval i d for al l 

non - CPU r e ads. This moans that tho oocond and any later roads i n a back to back non CPU 

s e qu e nc e hav e th e ir acknowl e dgm e nts ass e rt e d on e cyc l e l ater, i .e. in th e "MSN1" DCU stat e . 

The tim i ng of a CPU D I U road access i s shown i n F i gure 110. Note ro_arbitrat e I s asserted i n tho 

MSN2 stat e of th e pr e vious acc e ss. 

Some points con bo notod from Figuro 100 and F i gure 110. 

D I U requests: 

^ For non CPU acc e ss e s th e <unit>_diujroq signals ar e r e g i st e r e d before tho arbitrat i on can 

occur. 

^ For CPU accesses th e opujdiujrroq signal i s not r e gist e r e d to reduc e CPU D I U access 

lat e ncy. 

Arbitration occurs when tho dGujdaujadvz\Qua \ from the DCU is ass e rted. Th e DRAM address 

for th e arb i trat i on w i nner is avai l abl e in tho n e xt cyc i o, the ffST stato of tho DCU. 

Tho DRAM access starts i n tho MSN1 stat e of the DCU and comp le t e s i n th e /?Sr stat e of th e 

DGU. 

Road data i s available: 

^ In th e MSN2 cyc I o whore it i s output unreg i stered to the CPU 
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I n tho MSN2 cycl e and register e d in th e DAU b e for e bo i ng output in tho noxt cyc le to a l l 

othor road r e qu e stors I n order to e as e tim i ng. 
Tho D I U protoco l is in fact: 

^ P i pol i nod l .o. tho follow i ng transact i on is i n i t i atod wh il e the previous transfer i s in 

5 progress. 

-* Sp li t transact i on i . e . tho transaction is sp li t i nto i nd e pend e nt address and data transf e rs. 

Some gen e ral po i nts shou l d bo not e d i n th e cas e of CPU accesses: 

^ Sinco tho CPU requ e st Is not registered i n tho D I U b e for e arb i trat i on, th e n tho CPU must 

g e nerate the request rout e it to th e DAU and comp le t e arbitration all in 1 cyclo. To fac il itat e 
10 this CPU access is arb i trat e d l at e In tho arbitration cyclo (soo Section 20.14.12.2). 

S i nc e th e CPU r e ad data is not r e g i st e r e d i n th e DAU and CPU road data is ava i lab l o 8 ns 

aft e r th e start of tho access th e n A. 5 ns ar e avai l ab l e for routing and any shallow l og i c 
before tho CPU r e ad data is captured by tho CPU (soo Section 20AA.A). 
Tho phases of CPU D I U road accoso are shown I n Figur e 111. This matches tho timing shown i n 
15 Tab l e 135. 

20,14.10.2 Writo AccoGCOC 

CPU wr i t e s are posted into a 1 d e ep write buffer in th e DIU and writt e n to DRAM as shown b e low 
i n F i gure 112. 

Tho soquonco of events i s as fo l lows : 

20 [1] Tho D I U signals that i ts buff e r for CPU posted wr i t e s i s e mpty (and has boon for some 

t i m e in th e case shown). 

^ [2] Tho CPU assorts "cpu_diu_wdataval i d" to onablo a writ e to th e D I U buff e r and pr e s e nts 

val i d address, data and wr i to mask. Tho CPU consid e rs th e wr i t e posted and thus comp l ete 
i n th e cycl e fol l ow i ng [2] in tho d i agram b e low. 

25 -* [3] The DIU stores tho addross/data/mask i n its buffer and i ndicat e s to tho arbitration l og i c 

that a post e d wr i t e wishes to partic i pat e i n any upcom i ng arb i tration. 
[ 4 ] Prov i ded tho CPU stil l has a pr e acc e ss ent i tlem e nt le ft, or i s n e xt in l i n e for a round - 
robin award, a s l ot is arb i trat e d in favour of tho post e d writ e . Note that post e d CPU writ e s 
have h i gh e r arbitration pr i ority than s i mu l taneous CPU reads. 

30 [5] Th e DRAM wr i to occurs. 

[6] Th e ear li est that "dlu_cpu_wr i te_rdy" can be re asserted i n tho "MSN1" stat e 

of th e DRAM writo. In tho same cycl e , hav i ng s e en the ro assertion, tho CPU can asynchronous l y 
turn around "cpu_d i u_wdatovalid" and onablo a subs e quent posted wr i to, shou l d it w i sh to do so. 
Th e timing of a non CPU/non CDU DIU wr i t e acc e ss i s shown b e low in Figur e 113. 
35 Compared to a read accoss, wr i te data is on l y avai l ab le from the requestor 4 cycles after th e 
address. An e xtra cycl e is us e d to e nsure that data is first reg i stered i n tho DAU, boforo bo i ng 
dospatoh e d to DRAM. As a result, writes are pro arb i trated 5 cyc l es i n advanco of tho main 
arb i tration d e c i s i on to actually wr i to tho data to memory. 
Th e d i agram above shows th e fo ll ow i ng sequence of events : ■ 
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[1] A non CPU b l ock signa l s a write r e quest 

-* [2] A r e g i storod vers i on of this Is availab l e to the DAU arbitrat i on l og i o. 

^ [3] Write pro arb i trat i on ooours in favour of th e r e questor. 

[4] A wr i te acknowledgm e nt i s roturnod by the D I U. 

5 ^ [5] The pre arb i trat i on w i l l on l y bo uphold i f the requester supp l ies 4 consecutive wr i te data 

quart e r - words, qual i f i ed by an asserted wval i d flag. 

[6] Prov i ded th i s has happened, th e main arb i trat i on logic is in a pos i tion at [6] to r e confirm 

the pro arbitration d e cis i on. Note however that such r e confirmation may hav e to wait a 
further one or two DRAM accesses, i f the wr i t e is pr e-e mpt e d by a CPU pr e- acc e ss and/or 
10 a scheduled r e fr e sh. 

[7] Th i s Is tho oarlioGt that the wr i te to PRAM can occur. 

-* Note that no i thor tho arbitrat i on at [8] nor th e pr e- arbitrat i on at [9] can award i ts resp e ctive 

slot to a non CPU writ e , du e to th e ban on back to back acc e sses. 
Tho timing of a CDU D I U wr i to aocoos i s shown overleaf in F i gure 114. 
15 Th i s is simu l ar to a regu l ar non-CPU writ e acc e ss, but us e s pag e mode to carry out 4 cons e cutiv e 
DRAM wr i tes to contiguous addr e sses. As a cons e quenc e , subs e qu e nt access e s ar e d e lay e d by 
6 cycles, as shown in tho d i agram. Note that a now writo can bo pro arbitrated at [10] i n Figure 
4447 

20.14.11 Command Multiplexor Sub b l ock 
20 Tab le 136. Command Multipl e xor Sub - block l O D e fin i t i on 



Port name 



Pi no I/O 



D e scr i ption 



Clocks and Res e ts 



System C l ock 



prst_n 



Syst e m r e s e t, synchronous act i ve l ow 



D I U R e ad I ntorfaco to SoPEC Units 



: un i t^_diu_radr[21 :5] 47 



R e ad address to D I U 



17 b i ts w i de (256 bit al i gned word). 



d i u <un i t> rack 



Out Acknowledge from DIU that read request has boon 
accepted and now road addr e ss can b e placed on 



<unit> diu radr 



D I U Wr i to I ntorfaco to SoPEC Units 



: unit^_d i u_wadr[21 :5] 47 



In 



Wr i t e addr e ss to D I U e xc e pt CPU, SCB, CDU 



17 b i ts wid e (256 - b i t a l igned word) 



cpu_d i u_wadr[21:4]] 22 



CPU Writo address to DIU 



(128 bit aligned addr e ss.) 



opu_diu_wmask 



46 



In 



Byto enables for CPU writo. 



cdu_d i u_wadr[21:3] 49 



In 



CDU Writo address to DIU 



PEA23US 



283 









19 bits wide (64 bit aligned word) 


Addresses cannot cross a 256 bit word DRAM boundary. 


diu_*^unit>_waok 


4- 


Qui 


Acknowledge from DIU that write request has boon 




accepted and new write address can bo placed on 


<unit>_diu_WQdr 


Outputs to CPU Interface and Arbitration Logic sub biock 


re_arbitrate 


4- 


Out 






Signalling telling the arbitration logic to choose tho next 
arbitration winner. 


re_arbltrate_wadv 


4- 


Out 






Signal tolling the arbitration logic to choose tho next 
arbitration winner for non CPU writes 2 timoslots in 


advance 


uoDug uutputs to UPU configuration and Arbitration Logic Sub-block 


write_sel 




Out 






Signal indicating tho SoPEC Unit for which tho curront 


write transaction is occurring. Encoding is doscribod in 
Table . 


wrlte_oompleto 




Out 






Signal indicating that write transaction to SoPEC Unit indi 
cated by write_sel is comploto. 


Inputs from CPU Interface and Arbitration Logic sub- block 


arb_gnt 


4- 


(ft 


Signal lasting 1 cycle which indicates arbitration has 




occurred and Qrb_6el is valid. 


arb_sol 


5 


>n 


Signal indicating which requesting SoPEC Unit has won 




arbitration. Encoding is doscribod in Table . 




dir^sol 


2 


In 


Signal indicating which sense of access associated with 




arb_Gol 

00: issuo non CPU writo 
01 : road winner 
10: write winner 
1 1 : refresh winner 


Inputs from Rood Write Multiplexor Sub block 




write_data_valid 


2 


In 


Signal indicating that valid writo data is available for tho 




current command. 
OO-not valid 

01 'CPU write data valid 

10-non-CPU write data valid 

1 1 -both CPU and non CPU writo data valid 




wdata 




In 


256-bit non-CPU write data 






cpu_wdata 


32 


In 


32 bit CPU writo data 






Outputs to Road Writo Multiplexor Sub block 




writo_data_accopt 


2 








Signal indicating tho Command Multiplexor has accepted 
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the write data from tho write multiploxor 


00-not valid 

01 -acoepts CPU write data 
10-aGGepts non CPU write data 
1 1 -net valid 


Inputs from DCU 


dcu_dau_adv 






Signal indicating to DAU to supply next command to DCU 






dcu_dau_wadv 


4- 




Signal indioating to DAU to initiate next nen CPU write 






Outputs to DCU 


dau_dGu_adr[21 :5] 




Out 


Signal indicating the address for the DRAM aoGOSS. This is 




a 256 bit aligned DRAM address. 




dau_dGu_rwn 


1- 




Signal indicating tho direction for the DRAM aoGOSG 




(1~road, Q-writo). 


dau_dGU_cduwpage 


4- 


Out 


Signal indicating if access is a CDU write pago modo 




access (1-CDU page mode, O=not CDU page mode). 




dau_dGu_refresh 


4- 


Out 


Signal indicating that a refresh command is to bo issued. If 




asserted daujdcujadr, dau_dcu_rwn and 


dau_dcu_cduwpage are ignored. 


dau_dGu_wdata 




Out 


256 bit write data to DCU 






dau_dGu_wmask 


32 


Out 


Byte oncodod write data mask for 256- bit dQuJdcu_wdatQ 
to DCU 



20.14.11,1 Command Multiploxor Sub - biock DoGcription 

Th e Command Mult i pl e xor sub block i ssu e s r e ad, wr i te or r e fr e sh commands to tho DCU, 
according to the SoPEC Unit s ele ct e d for DRAM acc e ss by th o Arbitration Logic. Tho Command 
Mu l t i ploxor signa l s tho Arb i tration Logic to porform arb i trat i on to soloct tho n o xt SoPEC Un i t for 



5 DRAM access. I t does this by asserting th e r e _arbitrat e s i gnal. ro_arbitrate is ass e rt e d when the 
DCU indicates on dcu_dQu_adv that i t needs the next command. 
Th e Command Mu l tip le xer i s shown i n F i gur e 115. 

In i tially, the i ssu i ng of commands i s d e scr i b e d. Then th e addit i onal comp l ex i ty of handling non - 
CPU wr i t e commands arb i trat e d i n advanc e i s i ntroduced. 
10 DAU DCU interfaoe 

Soo Sect i on 20.1 5 for a d e script i on of th e DAU DCU i nterface. 
Generat i ng re_arbitrat e 

Tho cond i tion for assort i ng ro_Qrbitrato is that tho DCU is l ooking for another command from th e 
DAU. Th i s i s i ndicat e d by dcu_dau_Qdv b ei ng assort e d. 

15 

re arbitrate = dcu dau adv 



I nt e rfac e to SoPEC DIU roquoGtoro 
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Wh e n the CommQnd Multiplexor in i tiates arb i tration by asserting rojarbitrato to tho Arbitration 
Log i c sub block, tho arb i trat i on winn e r i s i ndicat e d by tho Qrb_Gol[1:0} and dir_Gol[1 :0] s i gna l s 
returned from tho Arb i trat i on Logic. Tli e va l id i ty of thoso signa l s i s i ndicatod by arbjgnt The 
encod i ng of arb_eol[4:0] is shown in Tab le . 
5 Th e va l ue of orb_eol[4:0] is usod to control tho ctooring muitipioxor to select th e D I U address of 
the w i nn i ng arbitrat i on requestor. Th e Qrb_gnt s i gnal i s decoded as an acknowledgo, 
dfu_<unit>__*ack back to tho winning D I U requestor. Th e tim i ng of thoso op e rations i s shown i n 
F i gur e 116. adr[21:0] is tho output of th e st ee ring multiplexor oontroi l od by QrbjQOl[4:0]. Th e 
st ee ring mult i plexor can acknowledgo D I U requestors i n successive cyc l es. 

10 

Command Issuing Logic 

Th e address pr e sented by th e winn i ng SoPEC requestor from tho steer i ng multipl e xor is 
presented to the command issuing logic together with Qrbjsol[4:0] and dir_GQl[1:0l 
The command i ssu i ng l og i c translates tho winning command into tho signals requ i red by tho DCU. 
15 QdrJ[21:0l Qrb_co/[4:0] and dir_G e f[1 :0] oomoG from the steer i ng mu l tip le xer. 

dau_dGu_adr [21:5] — = adr[2l!5] 

dau_dGu_rwn = — (dir_ocl [1 ! 0] — read) 

dQU_dGu_cduwpagG = — (arb_OGl [ 4 ; 0] — CDU write) 

20 dau dGu rofrcoh = — (dir ocl[l i O] =« rofreoh) 

dQujdGu__vQUd i ndicates that a va l id command is avai l ab le to th e DCU. 
For a wr i t e command, dQu_dcu_valid wi l l not bo asserted unti l ther e i s a l so val i d wr i te data 
pr e s e nt. Th i s i s i nd i catod by the s i gnal writ e _jdQtQ_valid[1 :0] from th e R e ad Wr i t e Data Mult i p l exor 
25 sub - block. 

For a write command, tho data issued to the DCU on dQu_dcu_wdatQ[265:0J i s mu l t i p le x e d from 
cpu_wdata[31:0] and wdatQ[255:0} d e p e nding on whether th e write is a CPU or non CPU writ e . 
Th e wr i te data from the Writ e Mu l tiplexor for th e CDU i s avai l ab l e on wdatQ[63:0]. This data must 
bo issued to th e DCU on dQU_dcu_wdQtQ[265:0}. wdota[63:0] is copi e d to each 6 4 bit word of 
30 dau_dcu_wdQtQ[255:0l 

dau_dGU_wdata[255!0] » 0x00000000 

if (arjb_OGl [4 : 0] = '^ CPU write) then 

dau_dQU_wdata [31 ! 0] — = cpu_wdata [ 3 1 ; 0 ] 

35 cloif {arb_ael [il!0] '>'^ CDU write) ) then 

dau_dcu_wdata [63:0] — ° wdata[63 i 0] 



dau_ 


_dGU_ 


wdata [12 7 : 


64] = 


■ wdata [63; 




dau_ 

dau 


_dGU^ 

dou 


_wdata[lQl: 
wdata [255; 


128] 
192] 


=» wdata [63 
« wdata [63 





40 eise 
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dau_dGu_wdata [255 ; 0] — « wdata[255iO] 



CPU wr i te mask i ng 

Th e CPU wr i t e data bus is on l y 128 b i ts w i de. cpu_dlu_wmQsk[15:0] i nd i cates how many bytos of 
5 that 128 bits should be wr i tt e n. The associated address opu_diu_WQdr[21:^J i s a 128 b i t a l ign e d 
addr e ss. Th e actual DRAM wr i t e must be a 256 - b i t access. Th e command mu l t i plexor issues tho 
256 b i t DRAM addr e ss to th e DCU on daujdcu_Qdr[21:5]. cpujdiu W3dr[^]an6 
cpu__diu_wm a 6k[1 5:0] ar e us e d jointly to construct a byt e writ e mask dQu_dcu_wmQ6k[31 :0} for 
this 256 b i t wr i to access. 

10 CDU write masking 

Tho CPU performs four 6 4 bit word writ e s to A contiguous 256 b i t DRAM addresses w i th tho first 
address specifi e d by Gdu_diu_wQdr[21:3]. Th e wr i t e address Gdujdiu_wQdr[21 :5] is 256 b i t 
aligned w i th b i ts cdu_diu_WQdr[A\2i\ al l ow i ng th e 6 4 b i t word to b e s e l e cted. If those A DRAM 
words l ie i n th e samo DRAM row th e n an e fficient access w i l l be obta i ned. 

15 Tho command mu l t i p l exor logic must i ssu e 4 success i ve acc e ss e s to 256 b i t DRAM addresses 
cdu_diu_wQdr[21:5l+1, +2, +3. 

dQu_dcu_wma6k[31 :0] i nd i cates which 8 bytes (6 4- bits) of th e 256 bit word ar e to bo wr i tten. 
dau_dcu_wma6k[31 :0] is ca l culat e d using cdujdiu_wadr[^:3] i. e . b i ts 8*odu_diu_wadr[^:3J to 
8*{cdu_diu_wadr[1:3]+1) - 1 of dau_dcu_wmaGk[31 :0]ar e ass e rt e d. 
20 Arbitrat i ng non CPU writes In advanc e 

I n tho caso of a non CPU writo commands, th e wr i t e data must be transferr e d from the SoPEC 
r e questor before th e writ e can occur. Arb i tration should occur e ar l y to a l low for any dolay for tho 
writo data to bo transforrod to tho DRAM. 

Figur e 113 indicat e s that writo data transfer ov e r 64 bit busses wi ll tak e a further 4 cycl e s aft e r the 
25 address i s transforrod. Tho arbitration must therefore occur 4 cyc l es i n advanc e of arbitrat i on for 
r e ad accesses, Figur e 109 and Figur e 1 10, or for CPU writes Figure 112. Arb i trat i on of CDU write 
acc e ss e s, F i gure 11 4 , should tak e p l ac e 1 cycle in advanc e of arbitrat i on for r e ad and CPU writo 
access e s. To simp l ify i mp le mentation CDU writo acc e ss e s aro arbitrat e d 4 cycl e s i n advanc e , 
simi l ar to oth e r non - CPU writ e s. 
30 Tho Command Mult i p le xor gen e rat e s anoth e r version of ro_arbitrat e callod r e _prbitrato_wQdv 

basod on th e signal dcu_c/au_w a d\/ from th e DCU. I n tho 3 cyc le DRAM access dcu_dau_adv and 
th e r e fore ro^arbitrato ar e ass e rt e d in the MSN2 state of the DCU stat e- mach i n e . dGu_dau_wadv 
and therefore ro_QrbitrQt e _wadvvA\ \ th e refore bo assorted in tho follow i ng RS7 state, seo Figure 
117. Th i s match e s th e t i m i ng r e qu i red for non - CPU writ e s shown i n Figure 113 and F i gur e 11 4 . 

35 

r e _QrbitrQto_WQdv oouBos th e Arbitrat i on Log i c to p e rform an arb i tration for non - 
CPU in advance. 

rc_arhltratc = dcu__dau_adv 

40 rc arbitrate wadv «=» dcu dau wadv 
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I f tho winnor of th i o arbitration i s a non CPU wr i to then Qrb__gnt is assert e d and th e arbitration 
winner is output on Qrb_6el[4:0] and dirjsol[1:0]. Oth e rwise orbjgnt is not assortod. 
S i nce non CPU wr i t e commands are arbitrat e d early, th e non CPU comnrtand i s not i ssued to tho 
5 DCU imm e d i at el y but i nstead writt e n into an advance command rog i stor. 

— (arb_ocl( 4; 0 °= non CPU write) — then 

advanGG_cmd_rQgiotGr [3 ; 0] — = arb_ocl [ 4 ! 0] 

advQncQ_Gmd_rcgiatcr [5 ; 4 ] — - dir_OGl [1 : 0]- 

10 advanQQ_Gmd_rcgiotQr [2 7 i 6] — « adr[21 : 0] 

I f a DCU command i s i n progress then the arbitration i n advance of a non CPU writo command 
w il l overwrite tho stoor i ng multipl e xor input to tho command issuing logic. Tho arb i trat i on in 
advance happens in tho DCU MSN1 state. Tho now command is ava i lab l e at th e steer i ng 
15 mu l t i plexor in th e MSN2 state. Th e command i n progr e ss w i ll hav e b ee n latchod in tho DRAM by 
MSN falling at tho start of tho MSN1 state. 

Issuing non CPU wr i to commands 

Tho orb_eoi[4:0] and dirjDol[1:0] va l u e s g e nerated by th e Arbitrat i on Log i c rofioct the out of ord e r 
20 arbitrat i on sequonco. 

This out of order arb i trat i on soquonco is exported to tho Road Wr i t e Data Mu l tiplexor sub - b l ock. 

This is so that wr i t e data i n ava il abl e in time for the actual writ e operation to DRAM. Oth e rwis e a 

lat e ncy would be introduc e d e v e ry t i me a writo command is soloctod. 

How e v e r, tho Command Mu l t i p l exor must e x e cute the command str e am In order. 
25 I n ord e r command e x e cut i on i s ach i eved by wa i ting unti l rojarbltrato has advanced to tho non 

CPU wr i te tim e slot from which re_Qrbitrato_WQdv has pr e v i ously issued a non - CPU wr i t e written 

to th e advanc e command rogistor. 

I f r e _arb/^rato_wac/\/ arb i tratos a non CPU wr i t e in advanco th e n within th e Arbitration Logic the 
timeslot is mark e d to indicato wh e th e r a wr i t e was issued. 
30 When rojarbitroto advances to a write t i meslot i n the Arbitrat i on Log i c thon on e of two actions can 
occur d e pending on v^othor tho s l ot was marked by ro_QrbitrQtQ_wadv to I nd i cat e whether a wr i to 
was i ssu e d or not. 

^ Non - CPU wr i t e arb i trat e d by ro^arbitrate^wadv 

I f tho timos l ot has b e en marked as hav i ng i ssued a wr i te thon th e arb i trat i on logic r e sponds to 
35 re_arbitrQt e by i ssuing Qrb_Gol[4:0l dir_€ e i[1 :0] an6 ass e rting arbjgrtt as for a normal arb i trat i on 
but se l ect i ng a non CPU wr i to acc e ss. Norma ll y, r e jarbltrato does not i ssu e non - CPU writo 
acc e ss e s. Non CPU wr i too aro arbitrated by ro_Qrbitrat e _wadv. d'ir_€Ol[1:0] — 00 ind i cates a non 
CPU writo i ssu e d by rojarbitroto, 

Tho command multiplexor does not writ e th e command i nto th e advanc e command r e g i ster os it 
40 has alr e ady b ee n p l ac e d ther e e ar l i e r by r e jarbitrato^wadv. I nst e ad, th e already present wr i to 
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command in the advance command reg i st e r i s issu e d whon writo_datQ_valid[1} ~ 1 . Not e , that the 
vaiuo of Qrb_G e l[4:0] i ssu e d by rojarbitrato could specify a different wr i t e than that in tho advance 
command register s i nce time has advanced. It is always the command i n th e advance command 
register that is i ssued. Tho stoor i ng mu l t i p l exor in this cooo must not I ssue an acknowledg e bac l < 
5 to SoPEC r e qu e st e r ind i cat e d by tho value of Qrbjsel[4:0]. 

if (dir_OGl [1 : 0] 00) then 

command_ioauing_logic [2 7 ! 0] 

advancc_Gmd_rcgiatQr [2 7 ; 0] 

10 eise 

conunand_igouing_logic [27 ! 0] ~ 

otccring_mul tip lexer [27 ; 0] 

ack ■-■ arb_gnt i\ND NOT (dir_ocl [1 ; 0] — == 00) 

15 

^ Non - CPU write not arb i trated by ro_arbltrat e _wQdv 

If tho t i moslot has boon marked as not hav i ng i ssued a writo, th e r e jarbitroto wil l us e th e un used 
r ea d t i mes l ot soioction to replac e the un usod writo t i mos l ot w i th a rood t i m e slot according to 
S e ction 20.10.6.2 Unus e d road t i m e slots a ll ocat i on. 
20 Th e m e chanism for wr i t e tim e slot arbitration s e l e cts non CPU writ e s in advance. But tho selected 
non CPU writ e is stored i n tho Command Multiplexor and i ssu e d when th e wr i to data is ava i lab le . 
This moans that ovon i f this timos l ot is overwr i tten by the CPU r e programming tho tim e slot b e fore 
th e wr i t e command i s actually i ssu e d to th e DRAM, the origina ll y arb i trated non CPU writo wi ll 
always bo corr e ctly i ssu e d. 

25 

Acc e pting writ e commands 

When a v r Tite command is issu e d th e n write _data_acccpi[ 1:0] is ass e rt e d. Thi s t e lls th e Writ e Multiplexor 
that th e curr e nt v ^ xite data has b ee n acc e pted by the DRAM and th e writ e multiplexor can r e c e iv e writ e data 
30 from tho n e xt arbitration wimier if it i s a wito. write _data_acccpt[ 1:0] diff e r e ntiat e s between CPU and 
non CPU writ e s. A writ e oommand is Icnown to hav e b ee n issued when rc_arbitratc_wadv to d e cid e on th e 
next command i s d e t e ct e d. 

I n the case of CDU writ e s th e DCU wi ll generate a s i gna l dcu_dau_cduwaGc e pt v^hloh te l ls th e 
Command Mu l t i pl e xor to i ssu e a wlt a jdatajaoGopttl]. Th i s w i l l result in tho Writo Mu l tiplexor 
35 supply i ng th e next CDU writ e data to tho DRAM. 

wr±ta_data_acccpt [0] ° RICING EDGE (rc^ajrJbi trot c_wadvj 

AND 

conimand__ioouing_logic {cLir^aol [IJ = ^1) 
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Gommand_ioouing_logic {arb_acl [4 : 0] ^^CPU) 



10 



wr±tc_datajuLCCcpt [1] ° — (RISING BDGE{rc_arbitratc_wadv) 
AN© 



coinmand_ioouing_logic (diir^ool [1] ^ = 1) 



commQnd_ioouing__logic (arb_acl [ 4 : 0] ' ^ ^non^CPU) ) 
GR 



dGu_dau_GduwaGGcpt ■ « 1 



15 



Debug log i c output to CPU Conf i gurat i on and Arb i tration Logic sub block 
writ e _Gel[^:0] r e fl e cts th e valuo of arb_Gei[^:0] at th e command Issuing l og i c. Tho o i gnai 
writo__comp!oto I s assortod whon ovory any b i t of writ e jdQtQj3Co e ptl1:0] is assorted. 



writQ_Gomplctc — 

writc_dQta_aGGcpt [0] 



writG_data_aGGopt [0] 



"OR 



wntQ_Gof[^:0] and whtojcomploto arc CPU roadablo from the DlUPorformanco and 
20 WritoPorformanco status rog l stors. Whon v \ frito_compl e t e i s ass e rted writ e _coi[1:0]vA \\ I ndicate 
which wr i t e acc e ss tho DAU has i ssued. 
20.11.12 CPU Conf i guration and Arb i trat i on Log i c Sub block 

Tab le 137. CPU Configurat i on and Arb i tration Log i c Sub b l ock l O D e finit i on 



Port name 



p;r^r> i/r\ 

I II 1^ If W 



D e scr i pt i on 



C l ocks and Resets 



4- \B 



System Clock 



prst_n 



4 \B 



System reset, synchronous active low 



CPU I ntorfaco data and contro l signa l c 



cpu_adr[10:2] 



9 \fi 



9 b i ts (b i ts 10:2) ar e r e quir e d to decod e th e 



configurat i on regist e r address spac e . 



cpu_dataout 



32 



Shared wr i t e data bus from th e CPU for DRAM and 



configuration data 



diu_cpu_data 



32 



Out 



Configuration, status and debug read data bus to the 



dlu_cpu_debug_va ll d 



Out S i gnal I nd i cating the data on the diujGpujdato bus i s 



val i d debug data. 



cpu_rwn 



Common read/not writ e signal from th e GPU 



cpu_acode 



2 CPU access code signa l s. 
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CPU acoderOI — Proarnm (QW Dntn M ^ nrrr^^,*^. 


Gpu_acode[1 ] — User (0) / Supervisor (1 ) aocoss 


Tlie DAU will only allow supervisor modo aocossos to 


data spaco. 


Gpu_diu_sol 


4- 




Block select from the CPU Whon cdu dsn nn! xr. hinh 




both cpujadr and cpu_dataout aro valid 




diu opu rdy 




Oi it 


Ready signal to the CPU When diu cnu rd\f Ir high it 






indicatos tho last cycle of tho access. For a writo cycio 

this moans gdu d3t30ut ha^: been realf^tcrcd bv the 


block and for a read cycle this means the data on 


diu_cpu_dota is valid. 


diu_cpu_bQrr 


4- 


Otrt 






Bus error signal to tho CPU indicating an invalid 














<unit>_diu_rroq 


4^ 




SoPEC unit requests DRAM road. 


DIU Write Interfaoo to SoPE< 




e 




diu_cpu_write_rdy 


A- 




Indicator that CPU posted write buffer is empty. 


^unit>_diu_wreq 


4 




Non CPU SoPEC unit requests DRAM writo. 


Inputs from Command Multiplexor sub block 


re_arbitrato 


4- 


In 






Signal tolling the arbitration logic to choose the next 
arbitration winner. 


ro_arbltrate_wadv 


1- 




Signal tolling tho arbitration logic to choose the next 




arbitration winner for non CPU writes 2 timoslots in 


advance 


Outputs to DCU 


dau_dcu_msn2stall 


1- 


Out 






Signal indicating from DAU Arbitration Logic which 
when asserted stalls DCU in MSN2 state. 




Inputs from Road and Write f 


^ultiplexor sub block 


read_cmd_rdy 


2 




Signal indicating that road multiplexor is ready for noxt 




road read command. 

OQ-not ready 

01 -ready for CPU road 

10-roady for non CPU read 

1 1 -ready for both CPU and non-CPU roads 




write_Gmd_rdy 


2 








Signal indicating that write multiplexor is ready for noxt 

writo command. 

OQ-not ready 

01 -ready for CPU writo 

10-ready for non CPU write 
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1 1 -roady for both CPU and non CPU writo 




Outputs to othor DAU sub-block s 


arb_gnt 


4- 




Signal lasting 1 cycle which indicatos arbitration has 




occurred and arbjool is valid. 


arb_sel 


5 


l« 


Signal indicating which requesting SoPEC Unit has 




wen arbitration. Encoding is described in Table . 




clir_Gol 




IR 


Signal Indicating which sense of access associated 
with arbjDol 

00: issue non CPU write 
01 : road winner 
10: write winner 
1 1 : rofrosh winner 


Dobug inputs from Road Writo Multiplexor sub block 


read_sel 


§ 


IR 


Signal indicating the SoPEC Unit for which the current 




road transaction is occurring. Encoding is described in 


Table . 


road_comploto 


4- 


t« 


Signal indicating that read transaction to SoPEC Unit 




indicated by roodjsel is complete- 




Dobug Inputs from Command Multiploxor sub block 


wrlto_sol 


§ 


l« 


Signal indicating the SoPEC Unit for which the cunront 




write transaction is occurring. Encoding is described in 


Tabic . 


write_oomploto 


4- 




Signal indicating that write transaction to SoPEC Unit 






Indicated by wnte_GOl is complete. 


Dobug Inputs from DCU 


dcu_dau_ref reshcom plete 


1- 








Signal indicating that the DCU has completed a 
refresh. 


Debug Inputs from DAU lO 


various 


R 




Various DAU lO signals which can be monitored in 




debug mode 



Th e CPU Interface and Arbitration Logic sub block i s shewn in F i gure 118. 
20.14.12.1 CPU Intorfaco and Configuration R e giGtere Doscription 

Tho CPU Interfac e and Configurat i on Registers sub b l ock provides for th e CPU to access DAU 

5 sp o ctfic r e gist e rs by r e ading or wr i t i ng to the DAU address spaco. 

Tho CPU subsystem bus i nt e rfac e is descr i bed in more d e tai l in Sect i on 1 1 . 4 .3. The DAU b l ock 

wi ll on l y a ll ow superv i sor modo accesses to data space ( i . e . cpujacod e [1 :0] - b1 1). A ll other 

access e s w il l result i n diu_Gpu_borr bo\x\Q ass e rted. 

The configurat i on rog i sterc descr i bed in S e ct i on 20.1^.9 
10 Table 130. DAU conf i gurat i on registers 
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QxQO 


Reset 


1- 


0x4- 






A write to this rogistor causos a reset 
of tho DIU. 

This rogister can be read to indioato 


the rosot state: 

0 — reset in progress 

4 — rosot not in progress 


Refresh 




RofroshPoriod 


0 




Refresh controllor. 




When sot to 0 refresh is off, othorwiso 


tho value indioatos the number of 


cycles, less one, between each 


refresh. [Noto that for a systom clock 
frequency of 1 60MHz, a value 


exceeding 0x63 (indicating a 100 cycle 
refresh poriod) should not be 
programmed, or the DRAM will 
malfunction.] 


Timeslot allocation and control 




NumMainTimeslots 


6 


0x04- 






Number of main timesiots (1 64) loss 


OxOG 


CPUPreAccessTime 


4 


0x0 




s lots 


(CPUPreAccoeeTimoeiote * 1 ) main 
slots out of a total of 
{CPUTotaiTimoelotG * 1) are pro 


ceded by a CPU access. 


0x4© 


CPUTotalTimeslots 


4 


0x0 


(CPUPreAocosGTimoelotG ^ 1) main 




slots out of a total of 
{CPUTotalTimoGlotG + 1) are pro 


ceded by a CPU access. 


0x100 0x1 FC 


MainTimoslot[63:0] 


54x4 










[63:1][3:0] 
=-0x0 

=^©xE 


Programmable main timesiots (up to 
6^ main timesiots). 


0x200 


ReadRoundRoblnLo 




0x000 










For each read requester plus refresh 

0 - loveH of round- robin 

1 ~ Ievel2 of round robin 
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The bit order is dofinod in Table . 




0x204 


EnableCPU Round 


4 


0x4- 


Allows tlio CPU to Darticoate in the 




Robin 


unused read round-robin scheme. If 


disabled, the shared CPU/rofrosh 


round robin position is dodicatod 


solely to rofrosh. 


Ox2Qg 


RotationSyno 


4 


0x4 








Writing 0, followed by 1 to this bit 
allows tho timeslot rotation to advance 


on a cycle basis which can be 
determined by the CPU. 


0x206 


minNonCPURoodAd 


42 


0x800 


12 MSBs of lowest DRAM address 




F 






which may be read by non CPU 
requesters. 


0x240 


minDWUWritoAdr 


42 


0x800 


12 MSBs of lowest DRAM address 








which may be written to by the DWU. 




0x244 


minNonCPUWritoAd 


45 


0x800 


12 MSBs of lowest DRAM address 




F 




which may bo written to by non CPU 


requesters other than tho DWU. 


Debug 


0x300 


DebugSeleGt[11:2] 


40 


0x304 










Debug address soloot. indicatoo tho 
address of the register to report on tho 


diu_cpu_dQta bus when it is not 
otherwise being used. 
When this signal carries debug 
information tho signal 
diu_cpu_debug_vQiid w'lW bo asserted. 




Debug: arbitration and performanco 






0x304 


ArbitrationHlstory 


22 










Bit 0 - arb^gnt 

Bit 1 - arb_executed 

Bit 6:2-arb_ool[^:0] 

Bit 12:7 - timeslot_numbor[5:0] 

Bit 1 5:1 3 ~ access_type[2:0] 

Bit 16- bacl<2back_non_cpu_writo 


Bit 17 - 


sticky_back2back_non_cpu_wrlto 
[Sticky version of same, oloarod on 


Bit 18 " rotation_sync 
Bit 20:19 - rotation_state 
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Bit 21 ~ Qtiokyjnva l id_non_cpu_adr 
S e eSootion 20.1^.0.2 D I UDobugfor 



a doscription of the fioldo. 



R e ad on l y register. 



9x308 



DiUPorformanoo 



i t 10 ~ l lu_d i u_rroq 
Bit 1 1 - pcu_diu_rr e q 



Bi 



B 



B 



i t 0 - cpu_diu_rroq 



i t 1 - sob_diu_rroq 



i t 2 - cdu_d i u_rreq 
t 3 - cfu_d i u_rr e q 



t 4 ~ lbd_diu_rreq 
i t 5 - sfu_diu_rreq 



t 6 - td_diu_rroq 
t 7 - tfs_diu_rroq 



it 8 - hou_diu_rroq 
it 9 - dnc_diu_rreq 



it 12 - cpu_diu_wroq 



i t 13 - SGb_d i u_wroq 



it 14 ^ cdu_diu_wroq 
1 15 ~ sfu_diu_wroq 



16 - dwu_diu_wr e q 
17" rofresh_r e q 



22:18 -road_Gol[1:0] 



23 - read_compl e t e 



28:24 - wr i te_6oi[4:0] 



29 ~ writo_comp l oto 



30 ~ dou_dau_rofreshcomp ie t e 



Sec Section 20.1 4 .9.2 D I UDobugfor 
a d e scription of tho f i e l ds. 



R e ad on l y r e gister. 



D e bug D I U r e ad requ e st e rs interface oignak 



0x30C 



CPUR e ad l nt e rfaco 2^ 



B i t 23 - diu_cpu_raok 



B i t 2 4 ~ d i u_cpu_rval i d 



Bit 0 - cpu_diu_rroq 
B i t 22:1 -cpu_adr[21:0] 



R e ad on l y register. 



0x84« 



SCBRoadlnt e rfaoo 



20 



B i t 0 ~ scb_d i u_rroq 

B i t 17:1 ■ sob_diu_rodr[21 :6] 



Bit 18 ~ d i u scb rac l < 



Bit 19 - diu sob rval l d 
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Road only rogistcr. 



9x344 



CDU Road int e rfac e 



20 



B i t 0 - Gdu_diu_rr e q 

Bit 17:1 -cdu_diu_radr[21:5] 



B i t 18 " d i u cdu rack 



Bit 10 ~ d i u odu rvalid 



R e ad on l y r e gist e r. 



CFUR e ad l nt e rfaoo 



20 



Bit 0 ~ cfu_d i u_rr e q 

Bit 17:1 -cfu_d i u_radr[21:5] 



B i t 18 - diu cfu rack 



B i t 19 - d i u cfu rva li d 



Road only register. 



0x31 C 



LBDRoadinterfaco 



20 



B i t 0 - lbd_diu_rroq 



Bit 17:1 - l bd_d i u_radr[21:51 
Bit 18 - diu I bd rack 



Bit 19 - d i u I bd rvalid 



R e ad on l y r e gister. 



9x320 



SFUR e ad l nterfac o 



20 



Bit 0 - sfu_d i u_rr e q 

Bit 17:1 -sfu_diu_radr[21:5] 

Bit 18 - d i u sfu rack 



B i t 19 ~ diu sfu rvalid 



Read on l y r e g i st e r. 



9x324 



TDRoadlnt e rfac e 



20 



Bit 0 ~ td_diu_rr e q 



Bit 17:1 - td_d i u_radr[21 :5] 



B i t 18 -diu td rack 



Bit 19 - diu td rva li d 



Rood on l y rog l stor. 



9x328 



TFS R e ad I n t e rf aco 



20 



B i t 0 ~ tfs_d i u_rr e q 

B i t 17:1 " tfs_diu,rodr[21:5] 



B i t 18 - diu tfs rack 



B i t 19 - d i u tfs rval i d 



R e ad only register. 



9x32G 



HCURoad l ntorfaco 20 



B i t 0 - hcu_d i u_rroq 

B i t 17:1 - hcu_d i u_radr[21 :5] 



Bit 18 - d i u hcu rack 



B i t 19 - diu hou rva li d 



R e ad on l y r e g i st e r. 



9x330 



DNCRoad i nt e rfaoo 20 



i t 0 - dno_d i u_rreq 

it 17:1 - dnc_diu,rodr[21 :5] 



B i t 18 - diu dno rook 
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B i t 19 - d i u dnc rva li d 



Read only rog i otor. 



0x 334 



LLUR e ad I nt e rfac e 



20 



Bit 0 - l lu_,d i u_rroq 



B i t 17:1 - i l uu_diu_rodr[21:5] 



B i t 18 - d i u ll u rack 



B i t 19 - d i u l l u rvalid 



R e ad on l y rogistor. 



Qx33g 



PCUR e ad l nt e rfaoe 



20 



B i t 0 ~ pcu_d i u_rroq 



B i t 17:1 - pcu_d i u_radr[21:5] 



B i t 18 ~ d i u_pcu_rack 



Bit 19 - d i u_pcu_rva l id 
R e ad on l y r e g i st e r. 



Debug DIU writ e roquostors interfac e signals 



Qx33G 



CPUWr i tolntorfaco 27 



B i t 0 ~ opu_d i u_wroq 

Bit 22:1 -cpu_adr[21:0] 

B i t 21:23 " cpu_diu_wmask[1 :0] 



B i t 25 ~ d i u_cpu_wack 
B i t 26 - cpu_diu_wvalld 



R e ad only regist e r. 



0x340 



SCBWr i t el nt e rfaoe 



20 



Bit 0 ~ scb_diu_wr e q 



Bit 17:1 - scb_diu_wadr[21:5] 



B i t 18 d i u scb wack 



Bit19-scb d i u wva li d 



R e ad only rog i ster> 



0x344 



CDUWr i t el nt e rfaoo 



22 



B i t 0 ~ odu_diu_wr e q 



B i t 10:1 - Gdu_d i u_wadr[21:31 



B i t 20 ~ d i u odu wack 



B i t 21 - cdu diu wvalid 



Read on l y r e gist e r. 



0x3i8 



SFUWr l t el nt e rfaoo 



20 



Bit 0 - sfu_diu_wr e q 



B i t 17:1 - sfu_diu_wadr[21:5] 
B i t 18 - diu sfu wack 



B i t19~sfu diu wva li d 



R e ad on l y r e gist e r. 



Ox34G 



DWUWr i tolntorfaco 20 



B i t 0 ~ dwu_d i u_wr e q 

B i t 17:1 - dwu_diu_wadr[21 :5] 

B i t 18 " diu_dwu_wack 

B i t 10 " dwu d i u wval i d 



Road on l y rog i stor. 
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Dobug DAU DCU i nt e rfac e s i gnals 



Qx3§Q 



DAU DCU I ntorfaoo 



2§ 



B i t 16:0 - dau_c l cu_adr[21 :5] 
B i t 1 7 ~ dau dou rwn 



B i t 18 ^ dau_dGu_cduwpago 
Bit 19 - dau_dcu_rofroGh 
3 i t 20 - dau dou msn2sta ll 



Bit 21 - dcu dau adv 



B i t 22 - dcu dau wadv 



Bit 23 - dcu_dau__rofroGhcomp le t e 
Bit 2 4 ~ dcu dau rva li d 



Road only register. 



aro impiomontod horo. 

20.1^,12,2 Arbitration Logic Desoription 

Arb i trat i on is trigg e r e d by the s i gnal rejarbitrato from the Command Mu l t i p l exor sub blocl< with tho 
s i gnal arbjgnt ind i cating that arbitration has occurred and the arb i trat i on winner i s ind l catod by 
5 arb_G e l[4:0]. The encoding of Qrb_6 0 i[4:O] is shown in Tab l e . Tho signa l clir_€oi[1:0] indioatos if 
th e arbitrat i on winner is a road, wr i t e or refresh. Arbitration should comp l ete w i th i n on e c l ock oyc l o 
so arbjgnt is norma l ly ass e rt e d the c l ock cycl e aft e r rojarbitrato and stays high for 1 clock cyc i o, 
arb_6 e l[^:0] and dir_eoi[1 :0] r e ma i n p e rsistent until arbitrat i on occurs aga i n. Th e arb i trat i on t i ming 
is shown i n Figur e 119. 

10 20.1 4 .12.2.1 Rotat i on Synchronisat i on 

A configuration bit, RototionSync, is us e d to i n i tialise advancomont through tho t i mos l ot rotation, 
i n ord e r that tho CPU wi ll know, on a cyc l e bas i s, which timos l ot i s being arb i trated. This i s 
e ss e ntial for d e bug purposes, so that e xact arb i tration sequenc e s can b e r e produced. 
I n g e n e ra l , if RotationSync is sot, slots continue to bo arbitrated in tho regu l ar ord e r sp e cifi e d by 

15 the t i m e s l ot rotation. Wh e n th e bit i s cleared, the curr e nt rotation continu e s unti l th e slot point e rs 
for pro and ma i n arbitration reach zero. Tho arbitration logic then grants DRAM acc e ss 
exc l usively to tho CPU and rofrosh o s. 

Wh e n the CPU again wr i tes to RotationSync to caus e a O - to - 1 transit i on of tho b i t, th e rdy 
acknowl e dgment back to tho CPU for th i s write w ill b e e xact l y co i nc i d e nt w i th th e RST cycle of th e 

20 in i tial r e fr e sh which h e ralds th e e nabl i ng of a new rotat i on. This refresh, a l ong w i th th e s e cond 
access which can bo eith e r a CPU pr e- acc e ss or a r e fr e sh, (d e p e nding on th e CPU's r e qu e st 
inputs), form a 2 - acc e ss "preamb le " b e for e th e first non - CPU r e quest e r i n th e now rotation can be 
sorv i cod. Th i s proomblo is nocossary to giv e the wr i te pr e- arbitration th e n e c e ssary h e ad start on 
th e ma i n arb i tration, so that write data can b e l oaded i n time. Soo F i gur e 105 below. Tho same 

25 proamblo procodure i s fo l lowed wh e n e merging from reset. 

Th e al i gnment of rdy w i th th e commoncomont of th e rotat i on onsuros that tho CPU is a l ways ab l e 
to calcu l ato at any point how far a rotation has progress e d. RotationSync has a r e s e t value of 1 to 
onsure that tho defau l t pow e r up rotation can take place. 
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Not e that any CPU wr i tes to th e D i U's oth e r conf i gurat i on regist e rs should on l y bo mado whon 
RotationSync i s cioared. This e nsures that acc e ss e s by non CPU requ e st e rs to DRAM ar e not 
affected by partial configuration updates which hav e y e t to bo comp l otod. 

20.1 4 .12.2.2 Mot i vat i on for Rotation Synchronisation 

5 Th e motivat i on for this f e atur e is that commun i cat i ons with SoPEC from extorno l sources are 
synchron i s e d to tho i nternal c l oo l < of our pos i tion w i thin a P I U full times i ot rotation. This m e ans 
that if an oxt e rnai source told SOPEC to start a pr i nt 3 s eparat e t i mes, it wou l d lik el y b e at thr ee 
d i ff e r e nt points w i th i n a fu l l DIU rotat i on. Th i s differ e nc e m e ans that the D I U arbitrat i on for oach of 
th e runs would bo diff e r e nt, wh i ch wou l d manifest i tsolf oxtorna ll y as anoma l ous or inconsist e nt 

10 print porformanco. The l ack of reproduc i b ili ty i s tho problem horo. 

How e ver, if in respons e to th e e xternal sourc e saying to start th e print, w e caus e d th e int e rnal to 
pass through a known stat e at a f i xed t i m e offs e t to other i nterna l actions, this would r e sult I n 
reproduc i ble pr i nts. So, tho plan i s that th e softwar e wou l d do a rotation synchronis e act i on, then 
wr i t e s "Go" i nto var i ous PEP un i ts to causo th e prints. Th i s moans th e DIU stat e w i ll b e tho 

15 ident i cal with rospoct to tho PEP un i ts state betw ee n s e parate runs. 

20.14.12.2.3 Wind down Protoco l when Rotat i on Synchron i sat i on i s Initiated 

Whon a zero i s writt e n to "RotationSync", this i n i tiates a "wind down protocol" in tho DIU, in which 
any rotation a l r e ady b e gun must b e fu l ly comp l otod. Th e protocol impl e m e nts the fol l owing 
s e quonco : 

20 ^ Tho pro arbitrat i on log i c must roach tho e nd of whatever rotation it is on and stop pro 

arbitrating. 

Only wh e n this has happened, doos th e ma i n arb i trat i on consid e r do i ng li k e wis e with /to 

curr e nt rotation. Not e that th e ma i n arbitrat i on lags th e pre arbitration by at least 2 DRAM 
accossos, subject to variation by CPU pr e acc e ssos and/or sch e dul e d refr e shes, so that tho 
25 two arb i trat i on proc e ss e s ar e som e tim e s on diffor e nt rotat i ons. 

^ Once the ma i n arbitration has reached th e e nd of its rotation, rotat i on synchron i sat i on is 

considered to bo fu ll y activated. Arbitrat i on th e n proceeds as outl i n e d i n th e n e xt s e ct i on. 

20.1 4 .12.2. 4 Arbitration during Rotat i on Synchronisat i on 

Note that wh e n RotationSync is '0' and, assum i ng th e term i nating rotation has comp l ete l y dra i n e d 
30 out, thon DRAM arb i trat i on is grant e d according to tho fol l owing fixed prior i ty order : 
Scheduled Refresh > CPU(W) > CPU(R) > Default Rofrooh. 

CPU pre acc e ss count e rs p l ay no part in arb i tration during this p e riod. It i s only subsequent l y, 
wh e n emerging from rotat i on sync, that th e y ar e r e loaded with the valu e s of 
CPUProAcco€GTimoGlots and CPUTotalTimeelote and norma l s e rvic e r e sum e s. 

35 20.14.12.2.5 T i mesiot based arb i tration 

T i m e s i ot bas e d arb i tration works by hav i ng a point e r point to tho current tim e s i ot. Th i s i s shown in 
F i gur e 95 r e p e at e d her e as Figuro 121. Whon ro arb i tration i s s i gnaled tho arb i trat i on winner i s 
tho current timesiot and tho point e r advanc e s to the next timesiot. Each t i mes i ot donotes a s i ngl e 
acc e ss. Th e durat i on of tho times i ot dep e nds on tho accoss. 
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I f th e SoPEC Unit assign e d to the curr e nt tim e s l ot is not roquost i ng thon the unused tim e s l ot 
arb i trat i on mochanism out l in e d in Soct i on 20.10.6 i s us e d to sol e ot the arb i trat i on w i nn e r. Not e 
that this unusod slot ro allocat i on Is guarantood to produce a resu l t, bocauso of tho inclusion of 
r e fr e sh in th e round - robin sch e m e . 

5 

Pseudo code to r e pr e s e nt arb i trat i on is giv e n b e low: 



if rc_arbitratG 1 then 

arb^gnt « — t 

1 P if current timcalot rcquGOting then 

Ghoooc (arb_ocl , dir_ocl) at current 

timoolot 

Qloc // un uocd timeolot acheme 

choooG winner according fee un uocd 

1 5 timeolot allocation of Section 20.10,6 

arb_gnt = 0 

20.14.12.3 Arbitrating non CPU writ e s in advanc e 

I n th e cas e of a non CPU writo commands, tho write data must bo transf e rred from tho SoPEC 
r e qu e st e r b e for e th e writ e can occur. Arbitration should occur oariy to allow for any delay for tho 

20 writ e data to bo transf e rr e d to th e DRAM. 

F i guro 113 ind i cat e s that wr i t e data transfer over 6 4 bit buss e s w i l l tako a furth e r 4 cycl e s after tho 
addr e ss i s transf e rr e d. Th e arb i tration must th e r e for e occur 4 cyc le s i n advance of arbitrat i on for 
r e ad acc e ss e s. Figur e 109 and Figuro 1 10, or for CPU wr i tes Figuro 112. Arb i tration of CDU writo 
acc e ss e s. F i gur e 114, shou l d ta l ^ e plac e 1 cycl e i n advanc e of arbitrat i on for road and CPU wr i to 

25 acc e sses. To s i mplify i mp le m e ntation CDU wr i te acc e ss e s ar e arbitrat e d 4 cycl e s in advance, 
similar to oth e r non-CPU writ e s. 

Th e Command Mult i p le xor g e nerates a s e cond arb i tration signal ro_arbitrat e _wadv wh i ch in i t i at e s 

th e arbitrat i on i n advance of non CPU writo accossos. 

Tho timoslot sch e m e is th e n mod i fi e d to have 2 separat e po i nters: 

30 r e jarbitrate can arb i trat e road, r e fr e sh and CPU read and writ e acc e ss e s accord i ng to tho 

posit i on of th e current t i moslot po i nter. 

^ r0_Qrbitrat e _wadv can arb i trat e on l y non CPU wr i to acc e ss e s accord i ng to tho posit i on of 

the writ e lookah e ad po i nter. 

Ps e udo - cod e to r e pr e sent arbitration i o g i ven bo l ow: 

35 

/ / rc_Qrbitrate 

— (rc_arbitratc 1) — ftNB — (current timeolot pointer !■ non 
CPU writo) — then 
arb_gnt ° 1 

40 . if current timeolot rcqucoting then 
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choooQ (arb^acl, — dir_ool) — at current timcolot 

cloG // un uocd read timcolot ochcmQ 

chooao winner — acoording fee un uocd read timcolot 

allocation of Ccction 2 0.10. 6 .2 
5 I f th e SoPEC Un i t assign e d to the current tim e slot i s not requesting then tho unuood road t i mos l ot 
arb i tration m e chanism out li ned in S e ction 20.10.6.2 is us e d to sel e ct t i n e arbitrat i on w i nner. 



/ / ro_arbitrQtG_wadv 

4r€ — ( r Q_a r b i t r a t G_wa dv — — M — AN© — (write — lookahcad — timcolot 

10 pointer =^ non CPU write) then 

if write lookahcad timcolot rcqucoting then 

Ghoooe (arb_ocl , — dir_ool) — at write lookahcad timcolot 

arb_gnt = 1 

cloif un uocd write timcolot ochcmc hao a requcotor 

1 5 Ghoooe — winner — according — fee — un uocd — write — timcolot 

allocation of Ccction 20.10. 6 .1 

arb_gnt ° 1 

eloG 

//no arbitration winner 

20 arb_gnt ■= 0 

r e jarbitrat e i s generated in th e MSN2 stat e of th e DCU stat e machine, whor e as 
ro_QrbltrQto_WQdv m gen e rated i n the f?S7" state. Soo Figur e 103. 

Tho write l ookahoad po i nt e r points two timos l ots i n advanc e of th e curr e nt t i m e s l ot point e r. 
25 Th e r e for e r e _arbltrat e _wodv caus e s th e Arbitration Logic to perform an arb i tration for non CPU 

two tim e s l ots i n advanc e . As not e d in Tabl e — , e ach times l ot l asts at le ast 3 cycl e s. Th e r e for 

ro_arbitrato_wadv arb i trat e s at l oast A oyclos in advanco. 

At init i a l isation, the wr i t e l ookah e ad pointer points to tho first tim e s l ot. Th e curr e nt t i m e s l ot po i nt e r 
is i nval i d unti l tho wr i t e i ookah e ad po i nter advanc e s to tho third t i m e slot wh e n tho current times l ot 

30 po i nt e r w i l l po i nt to th e f i rst tim e s l ot. Th e n both point e rs advanc e in tandem. 

Some access e s can be preceded by a CPU acc e ss as in Tabl e . Th e s e CPU accesses aro not 
a ll ocated tim e slots. I f this i s tho cas e th e tim e slot wi l l l ast 3 (CPU acc e ss) + 3 (non CPU acc e ss) 
~ 6 cycles. I n that cas e , a s e cond wr i t e lookah e ad po i nter, the CPU pro access write lookah e ad 
pointer, is solootod wh i ch points on l y one t i mes l ot in advanc e . r e _arbitrat e _wadvw '\ \ \ st i l l arb i trate 

35 4 cycl e s in advanc o . 

20.1 4 .12.3.1 I ssu i ng non CPU writ e commands 

Although the Arb i trat i on Logic will arb i trat e non - CPU wr i t e s in advanc e , th e Command Mu l tip le xor 
must issue a l l Qccoos e s in tho t i meslot ord e r. Th i s i s ach i ovod as fo ll ows: 
\ f ro_QrbitrQto_wadv orblirai e s a non - CPU write i n advanco then w i th i n tho Arbitration Log i c tho 
40 timoslot is marked to indicate whether a wr i te was issued. 
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/ / rc__arbitrato_wadv 

4rE — ( rc_arbi tratc__wadv — «— — 3r) — AND — (write — loolcahcad — timcolot 

pointer == non CPU write) then 

if write lookahead timcolot rcqucoting then 

choooc ( arb_oel , dir_oel ) — at write loolcahead timcolot 

arb_gnt ° — i 

MARK_timQalot = 1 

eloif un uocd write timcolot achcmc hao a rcqucator 

choooc — winner — according — fee — un uocd — write timcolot 

allocation of Section 20,10.6.1 

arb_gnt = 1 

MARK^timeolot ■ 1 

eloe 

//no pre arbitration winner 

arb_gnt = — 9- 

MARK_timGolot = 0 

When r e jarbitrato advanoos to a write tim e slot in th e Arbitrat i on Log i c then one of two actions can 
occur d e p e nd i ng on wh e th e r the s l ot was marked by r e _arbitrQto_wadv to i nd i oato whothor a wr i te 
was i ssu e d or not. 

^ Non - CPU wr i t e arbitrat e d by re_Qrbitroto_WQdv 

I f tho timosiot has boon marked qq having issued a wr i te then the arb i tration logic r e sponds to 
r e jarbitrato by i ssuing arb_e e l[4:0l dlr_eol[1 :0] on(\ ass e rt i ng arb_gntQS for a norma l arb i trat i on 
but s e l e ct i ng a non CPU write access. Norma l ly, rejarbltrato doos not i ssuo non CPU wr i to 
acc e ss e s. Non - CPU writes oro arbitrat e d by re_arbitrat e _wadv. dir_G e l[1:0] — 00 Ind i cates a non 
CPU writ e I ssu e d by rojarbitrato. 

^ Non - CPU wr i t e not arb i trated by ro_Qrbitrat e _wadv 

I f th e t i m e slot has boon marked as not having issu e d a writo, tho ro_arbitrato wi ll use tho un used 
road t i mosiot ooloction to r e plac e the un used writo timos i ot with a road timosiot accord i ng to 
S e ct i on 20.10.6.2 Unus e d road t i m e slots allocat i on. 

//re_arbitratc except for non CPU writco 

— (re_arbitrate °= — — AND — (current timcolot pointer 1 « non 
CPU write) — then 

arb_gnt = 1 

if current timcolot rcqucoting then 

choooc (arb_oGl , — dir_ocl) — at current timcolot 

eloe // un uocd read timcolot ochemo 
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choooG winner according fee un uocd read timealot 

allocation of Section 20.10.6.2 
arb_gnt ° 1 

5 //non CPU write MARKED ao iooued 

eloif — ( r e_a rb i t rat e — ~ — 1^ — MJ© — ( current — timcolot pointer — 

non CPU write) — AND 

(MARK_timGolot = = 1) — then 

//indicate — fee — Command Multiplexor — that non CPU write 

10 hao been arbitrated in 

//advance 



arb_gnt = 1 

dir_oel[l!0] — 00 

15 //non CPU write not MARKED ao iooued 

eloif — (rG_arbitrate — ~ — 1-) — AND — ( current — timcolot pointer — 

non CPU write) — AND 

(MARK_timeolot 0) then 

choooc winner according fee un uocd read timcolot 

20 allocation of Section 20.10.6.2 
arb_gnt - 1 

20.14.12.4 Flow control 

If road commands ar e to win arbitration, tho Road Multip l exor must bo ready to aocopt tho road 
25 data from the DRAM. This i s i ndicated by tho roQcl_cmd_rcly[1:0] signa l . r e ad_cmcl_rdy[1 :0] 
supplies flow control from tho Road Mult i p le xor. 

read_cmd_rdy [ 0 ] i — / /Read — multiplexor — ready — §eae — GP9 

30 read_cmd_rdy [1] a= i //Read multiplexor ready for non CPU 

read 

The Road Mu l tiplexor w i l l normally always acc e pt CPU roads, soo Soot i on 20.1 4 .13.1, s o 
r e ad_cmd_rdy[0] — 1 shou l d a l ways app l y. 
35 S i m i lar l y, i f wr i te commands ar e to w i n arbitrat i on, tho Wr i t e Multip le xor must b e r e ady to acc e pt 
tho wr i te data from tho w i nning SoPEC requ e stor. Th i s i s indicated by the writo_cmd_rdy[1 :0] 
signal. writo_omd__rdy[1 :0] suppl i es flow contro l from tho Wr i to Mult i p l exor. 

write_cmd_rdy [0] a^l — //Write — multiplexor — ready — fea? — GPU 

40 write 
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writG_cmd_rdy [13 — //Write multiplexor — ready — for non 

CPU write 

The Wr i t e Mu l t i plexor wi ll norma ll y a l ways accept CPU wr i tos, soo Soot i on 20. 11. 13.2, go 
5 wnt e _jomd_rdy[0] — 1 should a l ways apply. 

Non CPU road flow contro l 

I f r e jarbitrat e s el ects an accoss th e n th e signal clau_dcu_mGn2stall i s assorted until tho Read 
Wr i to Mu l tiplexor i s roady, 
10 arb_gnt i s not ass e rt e d unt il th e R e ad Write Multip l exor i s r e ady. 

This m e chan i sm will sta ll tho DCU access to th e DRAM unti l th e R e ad Wr i te Multiplexor i s ready 
to acc e pt th e n e xt data from th e DRAM i n th e case of a read. 

//other acceoo flow control 
15 dau_dGu_mon2atall « — ( ( (ro_arbitratG oeleeto CPU read) — MTO — 
read_cmd_r dy [ 0 ] = = 0 ) — ©ft 

( r Q_arb i t rate oeleeto non CPU 

read) — AND rcad_Gmd_rdy [1] == 0) ) 

arb_gnt not aaacrtcd until dau__dGu_mon2otall dc ao aorta 

20 

20.14.12.5 Arbitration Hiorarchy 

CPU and r e fresh ar e not included in th e tim e slot allocat i ons d e fin e d in th e DAU configurat i on 
registers of Tabl e . 

Th e h ie rarchy of arb i tration under norma l op e ration is 
25 a. CPU acc e ss 

b. Refresh access 

c. Timeslot accoss. 

This is shown in Figure 12 4 . Tho first DRAM acc e ss i ssu e d after reset must bo a rofrosh. 

As shown in Figure 118, th e D I U r e qu e st signa l s <unit>_diujrreq, <unit>_diu_wr e q ar e r e gister e d 

30 at th e input of the arbitration b l ock to e as e t i ming. Th e e xc e ptions ar e the r e fr e siijr e q signal, 

wh i ch is generated l ocal l y i n the sub block and cpu_diu_rroq. The CPU r e ad r e qu e st signal is not 
r e g i st e r e d so as to ke e p CPU DIU read acc e ss lat e ncy to a minimum. Sinc e CPU writ e s ar e 
poetod, cpu_diu_wroq i s reg i storod so that the DAU can procoos tho writo at a l ator juncture. The 
arbitration log i c is cod e d to perform arbitration of non - CPU r e qu e sts first and then to gate th e 

35 r e su l t with th e CPU requests. In this way the CPU can make th e requests ova il ablo late i n tho 
arb i trat i on cycle. 

Note that wh e n RotationSync is s e t to '0', a modifi e d h ie rarchy of arbitration i s us e d. This i s 
outlined i n sect i on 20.11.12.2.3 on page 280. 

20.14.12.6 Timeelot qccogg 
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Tho basic timoo i ot arb i tration is basod on tho MainTimoGfot configuration rog i stors. Arbitration 
works by tho t i mos l ot po i ntod to by e ith e r th e curr e nt or wr i to l ookah e ad pointer w i nning 
arb i trat i on. Tho po i nters thon advanoo to tho noxt t i mosiot. Th i s was shown in F i gure 00. 
Each main tim e slot po i nt e r g e ts advanc e d each timo it i s accessed regardl e ss of wh e th e r th e s l ot 
5 i s us e d. 

20.14.12,7 Unus e d tim e elot allOGQtion 

I f an ass i gned s l ot is not used (because its corr e sponding SoPEC Unit is not r e quest i ng) then i t is 
r e assign e d according to th e sch e m e descr i bed in S e ct i on 20.10.6. 

On l y used non CPU accossos are r e al l ocat o d. CDU wr i te acccssGs cannot be I nc l ud e d i n t he 
10 unus e d t i mes l ot allocation for wr i to as CDU acc e sses tak e 6 cycl e s. Th e write acc e ss e s wh i ch th e 
CDU wr i t e could otherwis e replac e r e quir e on l y 3 or 4 cycles. 

Unused wr i te accesses ar e re a l located accord i ng to tho f i xed prior i ty sch e me of Tabl e . Unus e d 
r e ad t i m e s l ots are re al l ocat e d accord i ng to th e two lev e l round robin scheme describod i n 
Sect i on 20.10.6.2. 

15 A point e r po i nts to th e most r e c e nt l y re al l ocated un i t In each of th e round rob i n levels. I f th e unit 
i mmediately succedl i ng tho pointer is requesting, then this un i t wins the arbitration and tho po i nter 
is advanced to r e fl e ct the now winner. If this is not th e cas e , th e n th e subsequent un i ts (wrapp i ng 
back eventua l ly to tho pointod unit) in the leve l 1 round rob i n ar e exam i n e d. Wh e n a requesting 
unit is found this unit wins tho arb i trat i on and th e point e r is adjust e d. I f no un i t i s request i ng then 

20 tho pointer does not advanc e and th e second lev el of round rob i n is examined in a s i milar fashion. 
In the fo l low i ng ps e udo codo th e b i t i nd i ces are for tho RoadRoundRobinLovol configuration 
r e gist e r d e scrib e d in Tablo . 

//choooo the winning arbitration level 

25 Icvcll - 0 

Ievcl2 ° 0 

for i -» 0 to 11 

if unit(i) — rcqucoting AND RcadRoundRobinLcvcl (i) — - 

0 then 

30 Icvcll ° 1 

if unit(i) — rcqucoting AND RcadRoundRobinLcvcl ( i ) — «= 

1 then 

level 2 = 1 

35 Round rob i n arbitration is offoct i voly a pr i or i ty ass i gnment w i th tho un i ts assigned a prior i ty 
accord i ng to tho round rob i n ord e r of Tab l o — but starting at tho un i t currently po i ntod to. 

//Icvclptr io pointer of oclcctcd round robin level 

priority io array 0 to 11 // index 0 ia CCDR(O) — etc. 

40 from Table 
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//aooign doGrcaoing — prioritico from fefee current 

pointer; maximum priority io 11 

for i 1 1 to 12 

5 , priority ( levolptr — i — i-) — = 12 i 

i-H- 



Th e arb i tration w i nner I s the on o w i th th e h i gh e st prior i ty providod i t is roquosting and its 
ReadRoundRobinLev e l b i t points to the choson l evel. The lovolptr is advoncod to tho arbitrat i on 
10 w i nner 

The prior i ty comparison can bo don e in tho h i orarohico l manner shown i n F i gure 125. 
20,1^.12,8 How Non CPU Addroee R e strict/one Aff e ct Arbitration 

R e call from Tab l e "DAU configuration r e gist e rs," on page288, " DAU conf i gurat i on registers," on 
page 1 that there oro m i n i mum va li d DRAM address e s for non CPU access e s, d e fined by 
15 mir^NonCPUR e adAdr, minDWUWriteAdr an6 minNoriCPUWritoAdr, Sim il arly, a non CPU 
r e qu e st e r may not try to acc e ss a location abov e th e high memory mark. 

To e nsur e comp li ance with those addr e ss r e strictions, th e following D I U respons e occurs for any 
incorrectly addressed non CPU writ e s : 

I ssu e a writ e acknowledgm e nt at pre arbitration time, to pr e v e nt tho wr i t e r e qu e stor from 

20 hang i ng. 

Disregard th e i ncom i ng wr i te data and write valids and vo i d th e pr e arb i tration. 

^ Subs e qu e nt l y re a l locate the writo slot at ma i n arbitration time v i a the round rob i n. 

For any i ncorr e ctly addr e ss e d non - CPU r e ads, tho response i s : 

^ Arbitrate the slot in favour of th e sch e du le d, m i sb e hav i ng r e qu e st e r. 

25 ^- I ssue the rood acknowledgement and rval i ds to keep the requ e st e r from hang i ng. 

^ Int e rc e pt the read data com i ng from tho DCU and send back al l zeros inst e ad. 

I f an inval i d l y addr e ss e d non CPU access is attempted, th e n a sticky b i t, 

€ticl<yJnvaiid_non_cpu_adn i s set i n tho ArbitrationHistory configuration r e g i st e r. See Table n 

page293 on pag e 1 for d e ta i ls. 
30 20.1^.12.9 Rofrost) Controiior Description 

Th e refresh contro l l e r impl e ments th e funct i ona l ity described i n d e tail in S e ct i on 20.10.5. R e fr e sh 

is not i nclud e d in the times l ot a l locations. 

CPU and refr e sh have prior i ty over oth e r accesses. If tho refresh contro ll er is r e questing i.e. 
r e fr e elijr B q is asserted, th e n th e refr e sh request will win any arb i trat i on initiated by re^arbitrato, 

35 Whon tho refresh has won tho arbitrat i on r e frosfijroq io do assorted, 

Th e r e fr e sh count e r i s reset to Rofr e 6f}Poriod[8:0] i.e. tho numb e r of cycles between each refresh. 
Ev e ry t i me this counter decrements to 0, a refresh is issued by ass e rt i ng rsfr e ehjr e q. Th e count e r 
immediately reloads with th e value In Ro1roGt)Poriod[8:0J and continu e s its countdown. It does not 
wa i t for an acknowledgment, since tho priority of a refresh requ e st supersedes that of any 

40 pend i ng non CPU access and i t w il l be serv i ced imm e d i ate l y. I n th i s way, a refresh r e quoet Is 
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guarant ee d to occur e v e ry (RofroGhPeriod[8:0] + 1) cyc l os. A giv e n refrosh r e quest may i ncur 
som e incid e nta l de l ay in being sorviced, due to a l ignm e nt with DRAM acc e ss e s and tho poos i b i l i ty 
of a higher pr i ority CPU pro accoos. 

Refr e sh i s also i ncluded in tho unus e d r e ad and wr i to t i moslot a l locat i on, hav i ng s e cond option on 
5 awards to a round rob i n posit i on shar e d w i th th e CPU. A r e fr e sh i ssu e d as a r e su l t of an unusod 
timoslot allocat i on also causes tho rofrosh counter to ro l oad with tho va l ue in RofroGhPoriod[8:0J. 
Tho first acc e ss I ssued by tho DAU aft e r r e s e t must b e a r e fr e sh. This assures that refreshes for 
all DRAM words fal l within tho r e qu i r e d 3.2ms window. 

10 / /ioouc — a — rcf rcoh — request — arf — counter — reachca — 0 — ©a? — at 

rooct or for re allocated olot 

ar€ Rcf rcohPcriod i-= 0 MJB (rcf rcoh_cnt ~ 0 GR 

diu_ooft_rcoGt_n o or 

prot_n 0R 

1 5 \inuacd_timcalot_allocation == 1) — then 
rcfrcoh^rcq - 1 

//dc aaaert rcf rcoh rcqucot when rcf rcoh aclccd 

elac if rcfrcoh_ack «° 1 then 

rGfrcah_rcq - 0 

20 

//refrooh counter 

if refrcoh^cnt 0 OR diu^oof t_rGOCt_n 0 OR proton "ta O 

OR unuacd_titncolot_allocation 
1 then 

25 rcfreoh_Gnt = Rcf rcohPcriod 

elac 

rcfrcoh^^cnt « rcfreoh^cnt i 

30 R e fr e sh can procedod by a CPU acc e ss in th e sam e way as any oth e r acc e ss. This is controll e d 
by tho CPUProAccoGGTimoefotG and CPUTotaiTimodote configuration rogistors. Rofrosh w i ll 
ther e for e not aff e ct CPU performanc e . A s e qu e nce of access e s i nclud i ng r e fr e sh might th e refore 
be CPU, rofrosh, CPU, actual t i m e s l ot. 
20.14.12.10 CPU Tim e slot Controlior DoGcription 

35 CPU access e s hav e priority ov e r a ll oth e r acc e ss e s. CPU accoss is not i nclud e d i n th e tim e slot 
allocations. CPU access i s contro lle d by th e CPUProAcc e eGTim e elotG and CPUTotalTimoGlotG 
configurat i on r e g i st e rs. 

To avo i d the CPU hav i ng to wait for its next timoslot it is des i rab le to hav e a m e chan i sm for 
e nsuring that th e CPU a l ways g e ts th e noxt avai l ab le t i meslot without incurr i ng any latency on tho 
40 non - CPU timeslots. 
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This i s b e dono by def i ning e ach t i m e s l ot as cons i sting of a CPU access procoding a non - CPU 
access. Two counters of A b i ts oach are dofinod allowing tho CPU to g e t a maximum of 
{CPUPr e AocoeBTim e slots ^ 1) pro acc e sses out of a total of {CPUTotQiTim e Giote ^ 1) ma i n slots. 
A t i meslot counter starts at CPUTotafTimoefote and docromonts ovory timeslot, wh i le anoth e r 
5 count e r starts at CPUPreAocosGTimeGlots and decrements every tim e s l ot in which tho CPU us e s 
i ts accosG. I f the pr e access ont i tloment is used up b e fore {CPUTotalTimocfotc ^1) slots, no 
further CPU acc e ss e s ar e a l lowed. Wh e n tho CPUTotaiTimeeiotG counter r e ach e s zero both 
count e rs ar e r e set to the i r r e spoct i vo i n i t i a l va l u e s. 

When CPUProAGc e GGTim e eiote is s e t to zoro then only one pro ocooss wil l occur during every 
10 (CPUTota l Timos l ots + 1) slots. 

20.1 4 .12.10.1 Cons e rv i ng CPU Pr e Accossos 

In sect i on 20.10.6.2.1 on page IJt i s described how tho CPU can b e al l owed participat e i n the 
unus e d r e ad round robin schemo. Wh e n enab l ed by tho configurat i on bit 
EnableCPURoundRobin, the CPU shares a joint position in th e round robin with r e fresh. I n this 
15 case, th e CPU has prior i ty, ahead of refr e sh, in availing of any unus e d slot awarded to this 
posit i on. 

Such CPU round robin acc e sses do not count towards d e pl e t i ng th e CPU's quota of pr e 
acc e sses, Gpoclfiod by CPUProAcceGGTimoGfotG. Note that in order to cons e rv e th e s e pr e 
acc e ss e s, th e arbitrat i on l og i c, wh e n faced w i th the choice of servicing a CPU request e i ther by a 
20 pre access or by an imm e diate l y fo l lowing unused read slot which the CPU Is po i sed to yvin, wil l 
opt for th e l att e r. 

20.14.13 Read and Writ e Data Multip le xor sub - b l ock 

Tab l e 1 38. Road and Wr i te Mu l tiplexor Sub block lO Definit i on 



Port name 



Pins I/O 



Descript i on 



C l ocks and R o s o ts 



Pelk 



Syst e m Clock 



prst_n 



Syst e m r e s e t, synchronous activ e low 



DIU Road I nterface to SoPEC Units 



diu data 



64 



Out 



S e cond 6 4- b i ts i s b i ts 127:64 of 256 bit word 



Third 6^ b i ts is bits 191 :128 of 256 b i t word 



Data from D I U to SoPEC Un i ts except CPU. 



First 6 4 b i ts is bits 63:0 of 256 b i t word 



Fourth 6^ bits is bits 255:102 of 256 bit word 



dram_cpu_data 



255 



Out 256 bit data from DRAM to CPU. 



diu <un i t?* rva li d 



Out S i gna l from D I U t ell ing SoPEC Un i t that val i d road data i s on 



the diu data bus 



D I U Wr i t e Int e rface to SoPEC Units 



<un i t^ ■ diu dat a 



64 in 



Data from SoPEC Un i t to DIU except CPU. 
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F i rst 6 4 bits is bits 63:0 of 256 bit word 



Socond 6^ bits is bits 127:6^ of 256 bit word 



Th i rd 6 4 bits is b i ts 191:128 of 256 b i t word 
Fourth 64 b i ts is b i ts 255:192 of 256 bit word 



cpu_d i u_wdatat 



45g 



Writo data from CPU to D I U. 



'^unit> diu wval i d 



S i gnal from SoPEC Unit i nd i cating that data on 
' Unft> dIu rfato i s valid. 



Note that "un i t" rofors to non CPU r e qu e sters only. 



Gpu_d i u_wdatava li d 



Writo enabl e for th e CPU post e d writo buff e r. Also confirms the 
val i dity of Gpu_diu_wdata. 



diu_Gpu_wr i t e _rdy 



Out 



indicator that the CPU posted wr i t e buffer is ompty. 



I nputs from CPU Conf i gurat i on and Arb i trat i on Logic Sub - b l ock 



arb_gnt 



Signal last i ng 1 cycio which indicatos arbitration has occurred 



and arb goUq va li d. 



arb s ei 



Signal indicating wh i ch request i ng SoPEC Unit has won 



arb i tration. Encod i ng is d e scr i b e d i n Tab l o 



dir s e l 



Signal i nd i cating which sense of acc e ss assoc i ated w i th 



arb G0l 



00: issu e non CPU wr i to 



01 : r e ad w i nner 



0: wr i to winner 



1 1 : r e fr e sh winner 



Outputs to Command Mu l t i p le xor Sub - block 



write data valid 



Out 



Signal ind i cating that va li d wr i te data is ava i lab l e for the current 



command. 



00-not va l id 



01 -CPU write data val i d 



l O-non CPU wr i t e data va li d 



1-both CPU and non - CPU wr i t e data valid 



wdata 



Out 



256 bit non CPU wr i to data 



opu_wdata 



32 



Out 



32 bit CPU wr i to data 



I nputs from Command Mu l t i plexor Sub block 



wr i to_data_acc e pt 



S i gna l ind i cating th e Command Mu l t i p l exor has acc e pt e d th e 



wr i t e data from the writ e multip le xor 



00-not va l id 



Ol-accopts CPU writo data 



10-accopts non CPU writo data 



1 1 -not va li d 



Inputs from DCU 
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dcu_dau_rdata 


255 




256-bit read data from DCU. 


dcu_dau_rvalid 


4- 


\^ 


Signal indicating valid read data on dcu_dau_rdatQ. 


Outputs to CPU Configuration and Arbitration Logic Sub biook 


read_omd_rdy 




Oyt 


Signal indicating that read multiplexor is ready for next road 






road command. 

OQ-not ready 

01 ready for CPU read 

1 0"ready for non CPU road 

11 -ready for both CPU and non CPU roads 




write_cmd_rdy 


2 


Out 


Signal indicating that write multiplexor is roady for noxt write 

command. 

OQ-not roady 

01 -ready for CPU writo 

1 0-ready for non CPU writo 

1 1 -roady for both CPU and non-CPU writes 




Dobug Outputs to CPU < 


Confic 


]|urati 


on and Arbitration Logic Sub block 


read_sel 




Out 


Signal Indicating tho SoPEC Unit for which the current road 
transaction is occurring. Encoding is doscribod in Table . 




read_Gomplete 


4- 


Out 


Signal indicating that road transaction to SoPEC Unit indicated 
by roQd_eol is comploto. 



20.1^.13.1 Read Multiplexor logic doecription 



. The Road Mu l tip le xor has 2 road channels 

^ a s e parate read bus for th e CPU, dram_cpu_datQ[266:0]. 

5 and a shar e d r e ad bus for tho rest of SoPEC, diu_dQta[63:0J. 

Tho val i d i ty of data on tho data bussos Is Indicatod by signals diu_<unit^_rvQlid. 

Tim i ng wav e forms for non - CPU and CPU D I U r e ad acc e sses ar e shown in Figure 90 and F i gur e 

91. rospoct i voly. 

Th e R e ad Multiplexor timing i s shown i n F i gur e 127. F i gure 127 shows both CPU and non CPU 
10 reads. Both CPU and non CPU channels aro independent i . e . data can bo output on tho CPU 
r e ad bus whi l e non CPU data is be i ng transm i tted I n A cyc l es ov e r th e shar e d 6<1 - b i t r e ad bus. 
CPU read data, dram_cpu_data[265:0l i s available i n the same cyc le as output from th e DCU. 
CPU r e ad data n ee ds to bo register e d i mmediately on enter i ng the CPU by a fl i p - f l op e nab l ed by 
th e diu_cpu_rvQlid signa l . 

15 To e as e timing, non CPU road data from tho DCU i s first roglstorod in the R e ad Mult i plexor by 
captur i ng i t i n tho shared read data buffer of Figure 126 enabled by th e dGujdaujrvalid signa l . 
Th e data i s th e n partition e d in 6 4 b i t words on diujdata[63:0]. 
20.1 4 .13.1.1 Non CPU R e ad Data Coherency 

Note that for data coher e ncy reasons, a non CPU read w ill always resu l t i n read data being 
20 return e d to th e request e r wh i ch inc l udes tho after effects of any pending ( i .e. pre arbitrated, but 
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not yet oxocutod) non - CPU writo to tho same address, which is currontly oaohod i n tho non CPU 
writ e buffer. This is shown graphical l y i n Figur e n pag e 31 9 on pago Errorl Bookmark not 
dof i nod- 

Shou l d th e pend i ng wr i te b e partial l y mask e d, then the road data roturnod must toko account of 
5 that mask. P e nding, mask e d writ e s by th e CDU and SCB, as w e l l as a l l unmaskod non CPU 
writes arc fully supported. 

Sinc e CPU wr i tes aro d e a l t with on a dedicat e d wr i te ohanno l , no att e mpt is mado to imp le ment 
coh e r e ncy betwe e n post e d, un e xecut e d CPU writes and non CPU roads to tho samo address. 

20.1 4 .13.1.2 Read mu l tipl e xor command queue 

10 Whon tho Arbitration Logic sub b l ock i ssues a road command the assoc i ated va l ue of 

Qrb_6ol[^:0], which indicates wh i ch SoPEC Unit has won arbitration, is written into a buffer, tho 
r e ad command queue. 

writG_cn =■ arb_gnt AND dir_acl [1 ! 0] 01" 

15 if writo_cn« ei l then 

WRITE arb_OGl into read command queue 

Th e e ncoding of arb__e e l[4:0] i s giv e n in Tab le . dir_Gol[1:0] — "07 " i nd i cat e s that th e op e ration is 
a r e ad. The r e ad command queue is shown in F i gure 128. 
20 The command qu e u e could contain va l u e s of arb_G e l[4:0} for 3 roads at a tim e . 

I n tho scenar i o of Figure 127 th e command queue can contain 2 valu e s of arb_Gei[1:0] i.e. 

for th e s i multaneous CDU and CPU accesses. 
^ In th e sc e nario of F i gur e 1 30, the command qu e ue can contain 3 valu e s of arb_Gel[4:0] i . e . 

at tho t i me of tho oocond dcu_dau_rvalid pu l so the command qu e u e w i l l conta i n an 
25 arbjG e l[4:0] for the arbitrat i on performed i n that cycl e , and tho two pr e vious arb_Gel[4:0] 

values associated w i th tho data for the first two dcujdaujrvalid pu l s e s, th e data assoc i ated 

with th e f i rst dcujdQujrvQUd pu l s e not hav i ng been fu ll y transferod ov e r th e shared r e ad 

data bus. 

The r e ad command queue i s spec i fied as 4 deep so i t is never expected to fi l l. 
30 Th e top of th e command queu e is a s i gna l r e adjtype[4:0] which indicates tho destination of th e 
current road data. The encoding of roQdJtypo[4:0] i s g i ven in Table — r 
20.1^.13.1.3 CPU roads 

R e ad data for the CPU go e s straight out on dram_cpu_data[255:0] and dcu_dau_rvafid is output 
on diujopujrval'id, 

35 cpu_r e ad_Gomploto(0) is ass e rt e d when a CPU read at th e top of th e r e ad command queue 
occurs. cpu_roQd_Gomp!oto(0) causes tho road command queue to b e popp e d. 

cpu_rQad_complctQ (0) — = — (rcad_typc [ 4 ! 0] — CPU read) — 

( dGU_dau_rva lid ==> — t)- 

40 
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If th e curr e nt r e ad command qu e u e locat i on points to a non - CPU access and th e s e cond road 
command qu e u e location po i nts to a CPU acc e ss th e n th e next dcujdfQujrvoUd pu l se roooivod Is 
a s soc i at e d w i th a CPU acc e ss. This is th e sc e nario i l lustrated in F i guro 127. Tho dcujdaujrvQlid 
puls e from th e DCU must b e output to th e CPU as diujopujrvaiid. Th i s is ach i ev e d by us i ng 
cpu_r9aQLco/r?p/ e te( 1 ) to mu l tiplex dGujdQujrvaUdio diujDpujrvol'id, cpu_roQd_comp^oto{^) is 
a lso us e d to pop th e s e cond from top road command qu e ue l ocation from th e r e ad command 
quouo. 

cpu_rcad_GOtnplGtc (1) — = — (rcad^typo non CPU read) 

ANB SECOND ( rcad^typc 

CPU read) AND (dQU_dau_rvalid °° 1) 

20.1 4 .13.1. 4 Mu l tip le xing dcu_dau_rvalid 

r e ad_typ e M:0] ond Gpu_roQdjGomploto{\) mult i plexes tho data va li d signal, dou_dQu_rvalid, from 
th e DCU, b e tw ee n th e CPU and tho shar e d r e ad bus logic. diu_cpu_rvalid i s the road valid s i gnal 
going to tho CPU. noncpu_rvafid is tho road valid signal used by tho R e ad Mu l tip le xor contro l 
logic to gonorato road valid s i gna l s for non CPU reads. 

i f rcad_t ypc [ 4 :0] — CPU read then 

//oclcGt CPU 

diu_cpu_rval id ; « 1 

noncpu_rva 1 i d ! « 0 

(road_typc [4 ; 0] non CPU read) ANB 

SECOND (rcad^typc [ 4 ; 0] CPU read) 

AND dau_dau_rvalid 1 then 

//aclcGt CPU 

diu_Gpu_rvalid : = 1 

nonGpu_rva 1 i d ! = 0 

OlOG 

//oolGGt aharcd road buo logic 

diu_cpu_irval id ? » 0 

noncpu_rval i d : ■ 1 

20.1 ^ ,13.1.5 Non CPU roads 

Road data for tho shar e d r e ad bus is reg i st e red in the shar e d r e ad data buffer us i ng 
noncpu_rvalid. Th e shar e d read buffer has 5 l ocat i ons of 6*1 b i ts with s e parat e r e ad point e r, 
road _ptr[2:0], and writ e pointer, writo _ptr[2:0l 

^ — noncpu_rval id — ~ — 3L — aad — H — apaoGO — — oharod — read 

buffer) — thon 
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oharcd_rcad_data_buf f or [write jtr] 



dau_dau_data [63 ; 0] 

oharcdrcad data buff or [writc^tr 1 1] « 

dcu_dau_data [127 ; 64] 

5 aharcd_rQad_data_buf f or [writo^tr i 2] » 

dGU_dau_data [191 s 12 8 ] 

oharQd_rcad_dat a_buf f or [ wr i t o_p t r f 3 ] 

dGu_dau_datQ [2 55 : 192] 
Th e data wr i tton into th e shar e d r e ad buff e r must bo output to the corroot SoPEC D I U r e ad 
10 r e qu e stor according to th e va l u e of r e ad_type[4:0} at th e top of th e command quouo. Th e data is 
output 6 4 b i ts at a timo on diu_dQtQ[63:0] accord i ng to a multiplexor contro lle d by road _ptr[2:0]. 

diu_data [ 6 3 : 0] — ° oharod_road_data_buf f or [rcad_ptr] 

15 F i gur e 126 shows hovt read Jtypel^.O] a\BO s e l e cts wh i ch shared road bus roquostors 

diu_<unit>_rvQlid signal is conn e ct e d to ehar e d^rvalid. Since tho data from tho DCU is r e gist e r e d 
i n tho Road Mult i p le xor then GhQrod_rvalid i s a d el ayed v e rs i on of noncpu_rvafid. 
When tho road va l id, diu_<unit>_rvalid, for tho command a s sociated with r e ad_type[4:0] has been 
asserted for 4 cyc le s th e n a signal Gharod_rood_compl e t e I s ass e rted. This indicates that th e r e ad 

20 has comp le ted, chared jroadjoompl e t e caus e s th e valu e of rQad_typ e [^:0] in th e r e ad command 
quouo to bo popped. 

A stat e machine for shared road bus acc e ss is shown i n Figur e 129. This show tho gonoration of 
charod^rvaUd, shared_r e ad_compl e t e and tho shared r e ad data buff e r read pointer, r e ad _ptr[2:0l 
b ei ng i ncr e m e nted. 
25 Somo points to noto from F i guro 120 aro: 

eharodjrvalid is assorted tho cyc l e after dcu_dau_rvaiid associat e d w i th a shar e d r e ad bus 

acc e ss. This matches tho cyc le d el ay in captur i ng daujdcu_data[265:0] i n tho shared rood 
data buff e r, shar e djrvalid r e mains ass e rt e d in th e case of back to back shar e d r e ad bus 
acc e ss e s. 

30 shar e d_r e ad_compfoto is assorted i n tho l ast eharod_rvalid cyc l e of a non CPU access. 

sharedjreadjoompl e t e caus e s the shar e d r e ad data queu e to be popp e d. 

20.1 4 .13.1.6 R e ad command qu e u e r e ad point e r l ogic 

Th e r e ad command qu e ue road pointer l ogic works as fol l ows. 

35 if oharod_road_Gomploto " 1 OR opu road complete (0) — ~ — i 

thon 

ror top of read command queue 

if cpu_rGad_complctc ( 1) — == 1 then 

POP ocGond road command quouc location 

40 20.14.13.1.7 D e bug signals 
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Ghor e d_r e Qd_comploto and Cf>u_road_comploto togothor dofino roadjoomploto which ind i cat e s to 
tho dobug l ogic that a road has oomp l otod. Tho sourc e of the road i s i nd i cated on roQd_Gof[1:0J. 

rcad_Gomplotc « ohar Qd_r cad_c omp 1 o t c GR 

5 cpu_rcad_complctc ( 0 ) 

OR Gpu_rcad_complctQ (1) 

if Gpu_rGad_complctG (1) — == 1 thon 

rcad_OGl ; = SECOND ( rGad_typG ) 

gIog 

10 road^OGl : « road typo 

20.1 4 .13.1.8 Flow control 

Th e r e ar e s e parata i nd i cat i ons that the R e ad Mu l tiplexor is ab l o to acoopt CPU and shared read 
bus commands from tho Arb i trat i on Logic. Thes e aro indicated by r e ad_Gmdjrdy[1:0]. 
15 Th e Arb i trat i on Log i c can a l ways i ssue CPU r e ads oxcopt i f tho road command quouo fil l s. Tho 
road command queue should bo l arge enough that this shou l d n e ver occur. 

//Read — Multiplexor — ready — ieae — Arbitration — LogiG — fee 

iaouc CPU roado 

20 rGad_Gmd_rdy [ 0 ] — road Gommand quouo not full 

For tho shared read data, th e Read Multiplexor d e ass e rts th e shar e d r e ad bus road_cmd_rdy[1] 
indicat i on unt il a spac e i s availabl e in th e r e ad command quouo. Tho road command quouo 
should be larg e e nough that this shou l d never occur. 

read_omdjrdy[1] i s a l so deassort e d to provide flow contro l back to tho Arb i trat i on Log i c to koop 
25 tho shared road data bus just ful l . 

//Read — Multiplexor — »efe — roady — for Arbitration — LogiG — feo 

ioouc non CPU reads 

read_Gmd_rdy [ 1 ] => (read — eommand — quoue — aefe — full) — #^JB 

30 (flow control « 0) 

Tho flow contro l cond i t i on is that DCU r e ad data from th e s e cond of two back to back shared r e ad 
bus acc e sses becomes avai l ab l e. Th i s caus e s reQdjomdjrdyl1]\o d e assert for 1 cyc i o, resulting 
in a r e p e ated MSN2 DCU state. The t i m i ng i s shown in F i gur e 130. 

35 

flow_Gontrol « — (road^type [4:0] — °° non CPU read) 

AND — SECOND ( rcad_typc [ 4 ! 0] — ~ — non 

CPU read) 

7\1>TD (eurront DCU otate °° MSN2) 

40 AND (prcviouo DCU otate °= MSNl) . 
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Figur e 130 shows a s e r ie s of back to back transf e rs over tho shared r e ad data bus. Tho oxact 
t i m i ng of tho i mplomontat i on must not i ntroduoo any additiona l l atonoy on shared road bus road 
transf e rs i. e . arbitrat i on must be r e enab le d just i n tim e to koop back to back shared rood bus data 
5 fwHr 

The fol l owing soquonco of ovonts i s ill ustrated i n Figure 130: 

^ Data from th e first DRAM acc e ss is wr i tt e n i nto tho shared road data buffer. 

^ Data from tho socond access is ava i iob l o 3 cyclos lator, but its transf e r i nto tho shar e d r e ad 

buffer is do l ayod by a cycio, duo to tho MSN2 stal l cond i t i on. (During this d el ay, road data 
10 for access 2 is mainta i n e d at the output of tho DRAM.) A s i m i lar 1 cyc l e do l ay is i ntroduc e d 

for ovory subsoquont road occogs unt il tho back to back sequ e nc e com e s to an ond. 
--^ — Not e that arbitrat i on always occurs during th e lost MSN2 stat e of any acc e ss. So, for th e 

second and lat e r of any back to back non - CPU reads, arb i trat i on is d e layed by on e cycl e , 

i . e . i t occurs e v e ry fourth cyc le inst e ad of the standard e v e ry third. 
15 Th i s mechanism provides flow contro l back to th e Arb i tration Log i c sub b l ock. Using th i s 

m e chan i sm means that th e acc e ss rate wil l b e l im i t e d to wh i ch over takes l onger DRAM access 
or transf e r of r e ad data ov e r th e shar e d read data bus. CPU r e ads are a l ways b e accepted by tho 
Road Multip l exor. 

20.14.13,2 Writ e Multiplexor logic doGcription 

20 Th e Writ e Mu l tiplexor supp l i e s writ e data to th e DCU. 

Th e r e are two separate write chann el s, ono for CPU data on cpu_diu_wdata[127:0], on e for non 
CPU data on non_cpu_wc/ota/255;Q/. A signal writo_data_valid[1 :0] indicates to th o Command 
Mu l t i p le xor that tho data is valid. Th e Command Mult i pl e xor th e n assorts a s i gnal 
}Mrite_dQta_Qcc e pt[1:0] Ind i cating that tho data has boon captured by the DRAM and tho 

25 appropriat e chann e l i n th e Wr i te Mult i p l exor can acc e pt tho next wr i t e data. 

T i ming waveforms for write access e s ar e shown in Figur e 92 to Figure 94, r e sp e ctiv el y. 
There are 3 typ e s of write accesses: 
^ CPU accesses 

CPU write data on opujdiu_wdotQ[127:0] is output on cpu_wdata[127:0},S\ncQ CPU writes are 
30 post e d, a loca l buffer is used to stor e tho wr i te data, addr e ss and mask until th e CPU wins 
arbitrat i on. Th i s buffer is ono position doep. writo_dota_valid[0], which i s synonymous with 
!diu_cpu_writ e _rdy, remains assert e d until tho Command Mu l t i pl e xor i nd i cates it has boon writt e n 
to tho DRAM by assort i ng write_data_Qccopt[0]. Tho CPU write buffer can then accept now 
post e d wr i t e s. 

35 For non CPU wr i tes, th e Write Multip le xor multiplex e s tho wr i t e data from th e D I U wr i te requestor 
to tho wr i te data buffer and tho <unit>_diu_wvalld s i gna l to tho write mu l t i p le xor control logic. 
CDU accesses 

6^ bits of wr i te data each for a masked writo to a soparoto 256 b i t word are transferred to 
th e Writ e Mu l t i p le xor over A cyclos. 
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Wh e n a CDU writ e is s ele ct e d the f i rst 6 4 bits of write data on cdu_diu_wdatQ[63:0] aro 
multip l oxod to non_cpu_wcfoto/B3;Q/. writo_data_valid[1] \q assort e d to i nd i cato a non CPU 
access whon cdu_diu_wvQHd i s assorted. Tho data is a l so wr i tten i nto tho first l ocation i n 
the writo data buff e r. This is so that th e data can cont i nue to bo output on 
5 non_cpu_wdoto/63:Q/ and writo jdataj/aUdll] romcimo ass e rted unti l th e Command 

Multiplexor ind i cat e s i t has boon writt e n to th e DRAM by ass e rt i ng writ e jdQtQ_QCGopt[1]. 
Data continuos to b e acc e pted from th e CDU and is wr i tten into tho othor locat i ons i n tho 
writ e data buff e r. Succ e ss i ve writo_dQta_aGc e pt[1] pulsos cause tho suocossive 61 b i t data 
wordo to bo output on wdafaf63;Q/ tog e th e r with whto_data_yaUd[1]. Tho l ast 
10 writ e _data_acc e pt[1] moans tho writo buffer i s empty and n e w writ e data can b e accepted. 

Othor wr i to accesses. 

256 bits of wr i te data ar e transferred to th e Wr i to Mu l tip l exor over 4 suocoss i ve cycles. 
Whon a wr i to is se le cted th e first 6 4 bits of writ e data on <unit>_diu_wdata[63:0] ar e wr i tt e n 
into tho wr i to data buff e r. Th e n e xt 64 bits of data aro wr i tten to tho buffer in ouccoosivo 
cycl e s. Onc e th e l ast 64 bit word is availab l e on <unit>_diu_wdQtQ[63:0] th e e ntir e word i s 
output on non_cpu_wc/oto/]255;Q/, writ e jdQtQ_vQrid assorted to indicato a non - CPU 
acc e ss, and th e l ast 61 bit word is written into tho last locat i on in tho writo data buff e r. Data 
continuos to bo output on non_cpu_wcyoto/255;Q/ and writ e _dQta_vQlid[1] r e mains ass e rt e d 
unti l th e Command Mult i plexor indicat e s I t has been writt e n to th e DRAM by assorting 
wnt e jdatajaoGept[1]. Now writ e data can then be wr i tten into the wr i t e buff e r. 
CPU write mu l tipl e xor contro l l ogic 

Wh e n th e Command Mult i p l exor has issued tho CPU writ e it ass e rts writo_data_accopt[0]. 
writ e jdatajaocopt[0] caus e s th e wr i to mu l tipl e xor to assert writo_cmd__rdy[0]. 
The signa l writo_cmdjrdy[0] toils tho Arb i trat i on Logic sub b l ock that i t can issue anoth e r CPU 
writ e command i .e. th e CPU wr i te data buff e r is e mpty. 
Non CPU writ e mu l tipl e xor control logic 

Tho s i gnal writo_cmdjrdy[1] ioWo tho Arbitration Logic sub b l ock that th e Writ e Multip le xor i s 
ready to accept anoth e r non CPU wr i t e command. Wh e n writo_cmd_rdy[1] i s ass e rt e d th e 
Arb i trat i on Logic can issue a write command to tho Writo Multip le xor. I t does th i s by wr i t i ng th e 
value of arb_GOI[4:0]\Nh \ oh ind i cates which SoPEC Un i t has won arb i tration i nto a writo command 
register, writo_Gmd[3:0]. 

writG_cn ° arb_gnt AND dir_acl [1] ■ »! AND arb_ocl ° non 

35 €Pt? 

if writo^cna gi l then 

writc_cmd = arb_ocl 

The encod i ng of arbjs e l[^:0] i s given in Tabl e . dirjsel[1] — 1 indicates that tho operation i s a 
write. arb_e e i[^:0} is on l y written to tho wr i to command register if tho writ e i s a non CPU writo. 



15 



20 



25 



30 
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A rule was introduc e d i n Soot i on 20.7.2.3 I ntor l oaving read and writ e acGOSGOO to th e e ffect that 
non CPU writ e acc e sses would not b e allocated adjac e nt timos l ots. This moans that a singlo write 
command rog i stor is requir e d. 

Th e writ e command r e gist e r, write_cmd[3:0l i nd i cates th e sourc e of th e writo data. writoj3md[3:0] 
5 multipl e x e s the write data <unit>__cliu_wdata, and the data va l id signal, <unit>_diu_wvQlid, from 
th e s ele ct e d write requestor to the write data buffer. Not e , that CPU writ e data is not includ e d in 
th e multiplex as th e CPU has its own wr i t e chann e l. Th e <un/t>_diu_wvalid are counted to 
g e n e rate the signa l word_Gol[1 :0] which dec i d e s which 64 bit word of th e write data buffer to stor e 
th e data from <unit>_diu_wdata. 
10 — 

//when the Command Multiplexor acccpto the write data 

if writc_data_acccpt [1] — = 1 then 

//rcoct the word oolcct oignal 

word_ocl [1 ! 03 « 00 

1 5 //when wvalid ia aooertcd 

if wvalid =■ — 1 then 

//increment the word oelcct oignal 

if word_oel [1 ; 03 — == 11 then 

word_oel [1 ; 0] — == 00 

20 eiee 

word_OGl [1 5 03 — " word_ocl [1 : 03 — i — t 

wvalid i s th e <unit>_diujm/alid signa l mu l tip l exed by writ e _cmd[3:0J. word_G e i[1 :0] i s 

reset when the Command Multip l exor accepts the wr i to data. This is to e nsur e that word__6ol[1 :0J 
is always starts at 00 for the first wv a lid puls e of a 4 cycl e writ e data transfer. 
25 Tho writo command r e g i st e r is ab le to accept the next writo whon tho Command Multiplexor 

accopts the wr i t e data by ass e rting write_data_QCCopt[1J. Only th e l ast writo jdotoj3ccopt[1] pulse 
assoc i ated with a CDU acc e ss (th e r e ar e 4 ) w ill cause tho writo command rog i stor to bo roady to 
ooo e pt th e next wr i to data. 
Flow contro l back to tho Command Multiplexor 
30 writejamdjrdylO] is ass e rt e d wh e n th e CPU data buffer is empty. 

write_cmdjrdy[1] i s asserted wh e n both th e writ e command register and th e wr i t e data buff e r is 
e mpty. 

PEP Su b system 

21 PEP Control l or Unit (PCU) 

35 24t1 Overv i ew 

The PCU has three funct i ons: 

^ Tho f i rst i s to act as a bus bridge between the CPU bus and th e PCU - bus for reading and 

wr i ting PEP configuration reg i sters. 
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^ Th e s e cond is to support pago banding by al l owing the PEP b l ocks to bo roprogrammod 

botwoon bands by retr i ov i ng commands from DRAM i nstead of being programmod diroctly 
by tho CPU. 

-* Th e third I s to s e nd r e gist e r d e bug information to tho RDU, within tho CPU subsystem, 

5 whon tho PCU Is I n D e bug Mod e . 

24^2 I nterfaces b etween PCU and othcr un i ts 

24^3 Bu s B R I DGE 

Tho PCU Is a bus - br i dg e b e tw ee n the CPU bus and tho PCU bus. Tho PCU Is a slavo on tho 
CPU - bus but is tho on l y master on tho PCU - bus. S ee Figure pago39 on pag e Errorl Bookmark 
10 n o t d o fin o d .. 

21.3.1 CPU acc e ss i ng PEP 

A ll th e blocks in th e PEP can bo addrossod by tho CPU via th e PCU. The MMU In tho CPU 
subsystem w ill d e code a PCU se l ect s i gna l , cpu __pcu_6ol, for all th e PCU mapped addr e ss e s (s ee 
s e ct i on 11. 4 .3 on page 1). Using cpujadr b i ts 15 12 tho PCU w i l l decode Ind i vidua l block soloots 

15 for e ach of tho b l ocks w i thin th e PEP. Th e PEP b l ocks then d e cod e the r e ma i n i ng address bits 
n ee d e d to address the i r PCU - bus mapp e d registers. Note: tho CPU I s on l y permitted to perform 
sup e rvisor mod e data type access e s of th e PEP, I.e. cpujacode - 1 1 . I f the PCU I s selected by 
tho CPU and any oth e r cod e is present on th e cpu^acodo bus the access Is ignored by the PCU 
and tho pcu_cpu_d e rr s i gna l is strobed, 

20 CPU commands hav e priority ov o r DRAM commands. When th o PCU is e x e cuting oach sot of 
four commands rotr l ovod from DRAM tho CPU can acc e ss PCU bus regist e rs. I n tho caso that 
DRAM commands aro being ex e cut e d and th e CPU res e ts the CmdSourc e to z e ro, th e cont e nts 
of th e DRAM CmdFrfo Is i nva li dated and no furth e r commands from the frfo ar e e x e cut e d. Th e 
CmdP e nding and N e xtBandCmdEnabf e work registers ore a l so c le ar e d. 

25 Whon a DRAM command writes to the CmdAdr r e gister i t means the next DRAM acc e ss will 

occur at the address writt e n to CmdAdr Th e r e for e If th e JUMP I nstruct i on is tho f i rst command i n 
a group of four, th e other thr ee commands g e t e x e cuted and then th e PCU w i l l issu e a r e ad 
requ e st to DRAM at tho address specifi e d by tho JUMP i nstruction. I f th e JUMP instruction is tho 
s e cond command then the fol l ow i ng two commands w ill be oxocutod b e fore th e PCU r e qu e sts 

30 from th e new DRAM address sp e cifi e d by th e JUMP i nstruction otc.Thoroforo tho PCU w ill always 
exocuto tho r e ma i ning commands i n e ach four command group befor e carry i ng out th e JUMP 
instruct i on. 

34^4 Pace band i ng 

The PCU can b e programmed to associat e m i crocod e i n DRAM w i th e ach ftnieh e dband s i gna l . 
35 Whon a finlchodband s i gna l i s ass e rted th e PCU wi l l r e ad commands from DRAM and e x e cut e 
thes e commands. Thes e commands ar e each 6 4 b i ts (soe Section 21 .8.5) and cons i st of 32 b i t 
address b i ts and 32 data bits and allow PCU mapp e d r e gisters to b e programmed d i r e ct l y by th e 

PGUr 
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I f more than ono finieh e dband signal is r e c e iv e d at th e samo time, or others ar e r e ceived wh ile 
microcode is a l roady executing, tho PCU w ill hold the commands as ponding, and wi ll execut e 
thom at tho first opportun i ty. 

Each microcod e program associatod with cdujHniGhodband, fbdjRnieh e dband an6 
5 tojnntGhedband wou l d simply r e start th e appropr i at e unit with n e w addrossos — a total of about A 
or 5 m i crocod e instruct i ons. As we l l, or alt e rnat i v e ly, pGujRniehodband can b e us e d to s e t up a ll of 
tho units and thoroforo invofvos many mor e instructions. Th i s minim i zes tho tim e that a unit Is idl e 
in b e tw e en bands. Tho pcu_finiGhodbQnd contro l signa l i s issu e d onc e tho sp e cif ie d comb i nat i on 
of CDU, LBD and TE (programmed i n BandSoloctMoGk) hav e finished thoir proc e ssing for a band. 

10 24-r5 I nterrupts, address legality and security 

I nterrupts ar e g e n e rat e d wh e n th e various pago expans i on units have fin i shed a particular band of 
data from DRAM. Th e cduJTiniGh e dband, IbdJTiniGhedband and to_Rni€hodbQnd signa l s aro 
combin e d i n the PCU into a s i ngle interrupt pcujfiniGh e dband which i s e xported by tho PCU to th e 
interrupt contro l lor. 

15 The PCU mapped reg i sters should only bo access i ble from Supervisor Data Mode. Th e ar e a of 
DRAM wh e r e PCU commands ar e stor e d should b e a Sup e rvisor Mod e on l y DRAM ar e a, 
although this i s not enforced by tho PCU. 

When the PCU is executing commands from DRAM, any b l ock addr e ss d e coded from a 
command wh i ch is not part of th e PEP b l ock addr e ss map wil l caus e tho PCU to i gnore tho 
20 command and strob e th e pcujGu_Qddr e GGjnvaUd i nt e rrupt s i gna l . The CPU can th e n i nt e rrogate 
the PCU to find the source of tho il l ega l command. Tho MMU w i l l ensure that the CPU cannot 
address an i nval i d PEP subsystem block. 

Wh e n th e PCU is executing commands from DRAM, any address decod e d from a command 

which i s not part of th e PEP addr e ss map wi ll caus e th e PCU to: 

25 ^ C e as e e x e cution of curr e nt command and flush al l remaining commands a l ready r e tr ie v e d 

from DRAM. 

^ Cl e ar CmdPending work r e gister. 

^ Clear N e xtBandCmdEnabi e r e gist e rs. 

Set CmdSourco to zero. 

30 I n addit i on to canc e l l ing al l current and p e nd i ng DRAM acc e sses th e PCU strob e s th e 

pGU_icu_addroGS_invalid i nterrupt s i gnal. The CPU can thon i nterrogate tho PCU to find th e 

source of th e Ulcgal command. 

24^6 Debug Mode 

Wh e n the n e ed to mon i tor the (poss i b l y chang i ng) value i n any PEP configuration reg i ster tho 
35 PCU may b e p l ac e d i n Debug Modo. Th i s is done v i a the CPU s e tt i ng certain Debug Addr e ss 
reg i st e r w i th i n th e PCU. Once i n Debug Mode tho PCU continual l y r e ads the targ e t PEP 
configurat i on r e g i st e r and sends tho road va l ue to the RDU. Debug Modo has the l owest pr i ority 
of a ll PCU functions: i f th e CPU w i shes to p e rform an acc e ss or th e r e aro DRAM commands to be 
ex e cut e d they w il l int e rrupt th e Debug access, and th e PCU w i l l r e sume D e bug access once a 
40 CPU or DRAM command has comp l eted. 
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24-r7 I mplementation 

21.7.1 D e f i n i tions of I/O 

TabioiaO. PCU Port Liot 



Port Name 


1 II lO 


l/O 


Doscription 


Clocks and Rosots 








SoPEC functional clock 


prst_n 




In 






Activo low, synchronous rosot In pclk domain 


End of Band Functionality 


cdu_finishedband 










Finished band signal from CDU 


lbd_finishedband 


4- 








Finished band signal from LBD 


to_finiGhodband 










Finished band signal from TE 


pcu_finiGhodband 


4- 


Otrt 






Asserted once tho specified combination of CDU, 
LBD, and TE havo finished thoir processing for a 


band. 


PCU addroQG orror 


pouJcu_addressJnvalid 


1- 


Otrt 


Strobod if PCU decodes a non PEP address from 




commanos reinovou trom ukam or OKU. 








CPU Subsystom intorfaco Signals 


cpu_adr[15:2] 


44 








CPU address bus. 14 bits are required to decode the 

address spaco for the PEP. 


opu_dataout[31:0] 


32 


h=> 


Shared write data bus from the CPU 






pcu_cpu_data[31 :0] 


32 


Out 


Read data bus to tho CPU 








4- 


In 


Common read/not write signal from the CPU 


cpu_rwn 




opu_acodo[1 :0] 


2 


In 


CPU Access Codo signals. Those decode as follows: 




00 - User program access 
-0^ — Usor data access 


AQ — Supervisor program access 
— Supervisor data access 


opu_pcu_sel 


1- 


In 






Block select from tho CPU. Whon cpu jf>cu_G0l is 
high both cpujadr and cpu_dQtaout are valid 




pcu_Gpu_rdy 


4- 


Out 


Ready signal to the CPU. Whon poujGpujrdy is high 




it indicates tho last cycle of the aoooss. For a write 




cycio this moans cpu_dQtQout has been registered by 
the block and for a road cycio this means the data on 


pcu_cpu_datQ is valid. 


pou_cpu_berr 


4- 


Out 






Bus orror signal to the CPU indicating an invalid 

access. 


pcu_cpu_debug_val id 


4- 


Out 






Debug Data valid on pcu_cpu_data bus. Active high. 
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PCU I ntorface to PEP blocks 



pGu_adr[1 1 :2] 



40 



l ocat i ons por PEP b l ock. Oniy the number of b i to 
roqurrod to docodo the addross spaoo ar e e xportod 
to each b l ock. 



PCU address bus. The 10 loaGt significant bite of 



cpu_Qdr [15:2] aWow 32 b i t word oddrossob l o 



pcu_dataout[31:0] 



32 



Out 



Shar e d write data bus from th e PCU 



= unit> _pcu_data i n[31:0] 



32 



R e ad data bus from e ach PEP subbiock to tho PCU 



pcu_rwn 



Out 



Common read/not write s i gna l from th e PCU 



pcu_ * ^unit>_s el 



Out 



Block s el ect for each PEP block from tho PCU. 



Docodod from th e A most s i gnificant bits of 



cpu_adr[15:2]. Whon pou_<unit>jool i s h i gh both 
pcujadr and pcajdotaout ar e valid 



:unit>_pcu_rdy 



In 



R e ady from oaoh PEP block signal to tho PCU. 



Wh e n <unit> j3cu_rdy is high i t indicat e s the last 
cyc le of th e access. For a wr i t e oyc i o this m e ans 



pcu_dQtQout has be e n r e glstorod by tho b l ock and for 
a road cycl e this m e ans tho data on 
'' Unit> _pcu_datQin i s va l id. 



D I U R e ad I nterfaco s i gna l s 



pcu_d i u_rroq 



1- Out 



acco m pani e d by a valid read addr e ss. 



PCU r e qu e sts DRAM road. A r e ad request must b e 



pcu_diu_radr[21 :5] 



4^ 



Oi if 



Road address to D I U 



17 b i ts wid e (256 b i t a li gned word). 



diu _pcu_rack 



Acknow le dg e from D I U that read request has b ee n 



acc e pt e d and n e w read addr e ss can bo placod on 
pou_dfu_rQdr 



d i u_data[63:0] 



§4 \B 



Data from DIU to PCU. 



First 64 - bits i s b i ts 63:0 of 256 b i t word 



Second 6 4 b i ts is b i ts 1 27:6 4 of 256 bit word 



Third 6A bits is b i ts 101 :128 of 256 bit word 



Fourth 64 bits is bits 255:192 of 256 bit word 



d i u _pcu_rvalid 



S i gnal from DIU tol li ng PCU that va l id road data i s on 



th e diu data bus 



21.7.2 Configuration Rogistors 

Tab l e 140. PCU Configuration Registers 



Addr e ss 



PCU baso* 



register #b»ts 



d e scr i ption 
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Control rogistors 






4- 


CFTtT 




PGUr 






CmdAdrpI ' 
(256 bit 


4^ 


0x00 000 






1 ne aqarcss or tno nexi sei oi conrimgnos lo 
itJtfit^vp iruifi L^r\Mtvi. 


aligned 


When this rogistor is written to, oithor by tho 
CPU or DRAM command, 1 is also written to 


DRAM 


CmdSource to cause the execution of tho 


addrosQ) 






commands at the specified address. 






3 












LafiL 1 v^mj III iiiJi iwuucii tu 


OxOG, Ox40t 


iNexipanQO 




0x00 000 


The address to transfer to CmdAdr as soon 


0x14, 0x18 


mdAdr[3:0][ 










as possible after the next finiGhodBondfn] 
signal has been received as long as 


n'lfi hit 










with a non zero value also sots 


pRAM 
address) 
















0x00 000 


The address to transfer to CmdAdr when the 


rr21 •'51 








A write from the PCU to NoxtCmdAdrfn} with 




write from tho PCU to NextCmdAdrfn] with a 0 


^aiue clears CmdPending[4] 


9x20 


CmdSourco 


4- 


9x0 


9 — commands are taken from the CPU 




1 — commands are tal<en from the CPU as well 


as DRAM at CmdAdr. 


9x24 






DxOO 00 


Debug address select. Indicates the address 
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of tho rog i stor to report on th e pcu_cpu_dQtQ 



buG whon it i s not oth e rwiso b e ing uood, ond 



tlio PEP bus i s not be i ng usod 

Bits [1 5:1 2] s ele ct tho un i t (soo Tablo ) 



Bits [1 1 :2] se l ect tho rogistor w i thin tho unit 



Work rogistors (road only) 



al i gned 



l nval i dAddre 4^ 



;s[21:3 ] 
(64 bit 



DRAM ) 



0 



DRAM Addr e ss of curr e nt 6 4- b i t command 



attempting to oxoouto. 
R e ad on l y regist e r. 



Ox2G 



CmdP e ndin 



Q)(QQ 



For oach bit n. whoro n is 0 to 3 



§ 



0 no commands p e nding for 
N e xtBandCmdAdrfn] 



commands ponding for 



NextBandCmdAdrfn] 



For bit 4 



0 no commands p e nding for NoxtCmdAdrfn] 
commands pending for NoxtCmdAdrfn] 



R e ad on l y rogistor. 



Flnish e dSo 



3 



0x0 



Tho appropriato b i t is sot wh e nev e r th e corr e 



Faf 



spend i ng input finish e dBand flag is set and 
th e corresponding b i t in the BandSoloctMoGk 
bit is also sot. 



I f a ll FiniGh e dSoFar bits aro sot whorovor 



BandS e loct b i ts are also set, all 



FlniGhodSoFar b i ts ar e c le ar e d and tho output 
pcujriniGhodbond s i gna l i s g i v e n. 



R e ad only r e g i ster. 



rwQQ 



N e xtBandC 



0x0 



mdEnab l o 



This register can bo written to indirectly ( i . e . 
th e b i ts ar e s e t or cleared via writ e s to 



N e xtBandCmdAdr[n]) 



0 ■ do nothing at tho noxt finiGhodBandln] 
s i gnal. 



For oach bit: 



1 — Execute i nstruct i ons at 



N e xtBandCmdAdr[n] as soon as poss i b l e 



aftor rocoipt of tho next finiGhodBandln] 
si gna l . 
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BitO lbd_finishedband 
— odu_finishedband 
Bit2 te_finishedband 
Bit3 pGu_finishodband 
Read only register. 



24^8 Deta i led descr i pt i on 

21.8.1 PEP B l ocks Rogistor Map 

All PEP acoess o s arc 32 - bit r e gistor acc e ss e s. 

From Table 1 4 0 i t can bo soon that four b i ts only ar e n e cessary to addr e ss e ach of tho sub 
b l ocks w i th i n th o PEP part of SoPEC. Up to 1 4 bits may bo us e d to addr e ss any configurablo 32 
bit r e gist e r w i thin PEP. Th i s g i v e s scop e for 1024 configurabl e r e gist e rs p e r sub block. Th i s 
address wi l l com e e ith e r from tho CPU or from a command stor e d i n DRAM. Th e bus is 
ass e mbl e d as fol l ows: 

adr[15:12] ~ sub b l ock addross 

— adr[n:2] ~ 32 bit rog i stor addroso within cub block, only tho numb e r of bits r e qu i red to 
decodo th e r e gist e rs within oaoh sub - b l ock aro used. 
Table 111. PEP blocks Rogistor Map 





Block Soloot Dooodo 
- cpu_adr[15:12] 


PGU 




Gey 


0x4- 




0x2 




0x3 


spy 


0x4 




OxS 






Hey 






VIWJ 


ewy 


0x8 


y=y 


OxA 




QxB 


Reserved 


OxC to OxF 







21.8.2 Internal PGU PEP protoco l 

Th e PCU p e rforms PEP conf i gurat i on rogistor occossos via a soloct signa l , pcu_<block>_ooL Tho 
r e ad/ writ e sense of the acc e ss is communicated v i a th e pcu_rwn signal (1 ~ road, 0 ~ writ e ). 
Wr i t e data i s c l ocked out, and road data clocked in upon rec ei pt of the appropr i ate soloct 
r e ad/wr i te addross combinat i on. 
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F i gure 133 shows a writ e op e rat i on fo l low e d by a road oporation. Tho road operat i on is shown 
w i th wa i t otatos wh i lo the PEP b l ock r e turns the read data. 

For accoss to th e PEP blocks a simpl e bus protocol i s usod. Tho PCU first d e t e rmin e s wh i ch 
part i cular PEP b l ock i s be i ng addressed so that tho appropriate b l ock so l oct signal can b e 
5 gonoratod. Dur i ng a wr i te accoso PCU wr i te data is driven out with th e address and block s e l e ct 
s i gna l s in the first cycle of an access. The address e d PEP block responds by as se rting i ts r e ady 
signa l ind i cat i ng that it has r e gistered tho wr i to data and the acc e ss can comp l oto. Tho writo data 
bus is common to a l l PEP blocks. 

A read acc e ss is in i tiated by dr i vi n g t ho addr e ss and s e lect signa l s dur i ng the first cyc i o of an 
10 accoss. Tho address e d PEP b l ock r e sponds by p l acing th e r e ad data on its bus and ass e rting its 
ready s i gnal to i ndicat e to th e PCU that the r e ad data i s va li d. Each b l ock has a s e parat e po i nt to 
point data bus for road accossos to avo i d the need for a tr i- stateab l e bus. 
Cons e cut i v e acc e ss e s to a PEP b l ock must b e separated by at l oast a s i nglo cycle, dur i ng which 
tho soloct signa l must bo do assorted. 

15 21.8.3 PCU DRAM access requir e m e nts 

The PCU can e x e cut e reg i ster programm i ng commands stored in DRAM. Thoso commands can 
b o oxocutod at th e start of a pr i nt run to In i tial i ze al l th e r e gist e rs of PEP. Th e PCU can also 
e x e cute instructions at th e start of a page, and botwoon bands. In th e int e r band time, i t i s cr i tica l 
to hav e th e PCU op e rat e as fast as possiblo. Th e r e for e in the i nter pag e and inter band time tho 
20 PCU noods to g o t low l atency accoss to DRAM. 

A typ i cal band change requires on tho order of 4 commands to restart each of tho CDU, LBD, and 
TE, fol l ow e d by a s i ngl e command to term i nat e th e DRAM command stream. Th i s is on tho order 
of 5 commands per restart component. 

The PCU do e s s i ng le 256 bit r e ads from DRAM. Each PCU command is 6 4 bits so e ach 256 bit 
25 DRAM r e ad can contain 4 PCU commands. Th e r e qu e st e d command i s road from DRAM 

together w i th tho next 3 contiguous 64 b i ts wh i ch are cach e d to avo i d unn e c e ssary DRAM reads. 

Wr i ting zoro to CmdSourc e causes tho PCU to flush commands and t e rm i nat e program accoss 

from DRAM for that command stream. Tho PCU requ i res a 256 bit buffer to tho 4 PCU commands 

r e ad by e ach 256 - b i t DRAM acc e ss. When tho buffer i s e mpty tho PCU can r e qu e st DRAM 
30 accQSG aga i n. Add i ng a 256 - b i t doub le buff e r wou l d al l ow th e n e xt sot of 4 commands to bo 

fetched from DRAM whil e th e curr e nt commands ar e b ei ng e xecuted. 

1024 commands of 64 bits r e quires 8 kB of DRAM storag e . 

Programs stor e d in DRAM ar e r e f e rred to as PCU Program Code. 

21.8. 4 End of band un i t 

35 Tho stato mach i ne i s rospons i blo for watching th e various input xx^finieh e dband signa l s, sett i ng 

the Fmfsh e dSoFar f \ ags, and outputt i ng tho pcu_fini6hodband f \ agG as sp e cifi e d by tho 

BandSoloct register. 

Each oyole, th e e nd of band unit porfomifl the following taslcs: 



PEA23US 325 



10 



15 



20 



25 



30 



pcu_f iniohcdband 



( Fini ahodSoFar [ 0 ] 



BandScloctMaok [0] ) 



(FiniohodCoFar [1] 



BandSGlGGtMaok[l] ) AND 



(FiniohodSoFar [2] 



BandSGlcctMaok[2] ) AND 



(BandSGlGQtMaok [0] 



-GR 



BandSclGGtMaolc [1] OR BandSclGCtMaok [2] ) 

3r€ — (pGu_f iniohcdband = = -3r^ — fefeea 

FiniohcdSoFar [0] — =^-0- 

FiniahcdCoFar [1] — 



FiniahGdSoFar [2] 



clac 



FiniohGdSoFar [0] 



(FiniohGdSoFar [0] 



-OR 



lbd_f iniohGdband) AND BandSGlGctMaolt [0] 



FiniohGdSoFar [1] 



(FiniohcdSoFar [1] 



-OR 



-GR 



cdu_f ini ohcdband ) — AND BandSGlGctMaolc [1] 

FiniohGdSoFar [2] = (FiniohcdSoFar [2] 

tG_f iniohcdband) AND BandSclGCtMaok [2] 



Not e that i t is the rosponslbility of th e microcodo at th e start of printing a pago to onsuro that a ll 3 
Finish e dSoFar b i ts ar e cloarod. I t is not nocoosary to c le ar th e m b e tween bands s i nc e th i s 
happens automat i ca l ly. 

If a bit of BandSoIoctMaek is cl e ar e d, then tho corrosponding bit of FiniohodSoFar has no impact 

on th e g e neration of pcu^flnisii e dband. 

21 .8.5 ExoGuting commands from DRAM 

Rog i stors in PEP can bo programmed by means of simp l e 64 - b i t commands fotchod from DRAIVI. 
Th e format of tho commands is g i v e n in Tab l e 1 4 2. Register locations can have a data va l ue of 
up to 32 bits. Commands aro PEP regist e r wr i t e commands on l y. 
Tablo 1 4 2. R e gister wr i t e commands i n PEP 



command 



Regist e r wr i te 



da ta 



itoM:32 . 



b i ts 31 16 



bits 15 2 



address 



b i ts 1 0 



Duo attontion must be paid to tho ondiannoss of the prooossor. The LEON proc e ssor i s a b i g 
e ndian processor (b i t 7 i s tho most significant bit). 
21.8.6 Genera l Operat i on 
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Upon a R e sot cond i tion, CmdSourGO i s cl e ar e d (to 0), wh i ch moans that al l Gommands are i nit i a ll y 
sourc e d on l y from th e CPU bus intorfaco. R e g i st e rs and can then bo wr i tton to or road from ono 
l ocation at a time v i a the CPU bus int e rfac e . 

I f CmdSourco is 1, commands are sourc e d from th e DRAM at C/nddAofrand from tho CPU bus. 
5 Wr i ting an addr e ss to CmcMdr automatical l y s e ts CmdSourc e to 1, and causes a command 
stream to b e r e tri e v e d from DRAM. Tho PCU w i l l oxoouto commands from th e CPU or from tho 
DRAM command str e am, giving h i gh e r pr i ority to tho CPU a l ways. 

If CmdSourco is 0 tho DRAM roquostor exam i n e s the CmdP e nding bits to dotormino if a new 
DRAM command stream is p e nding. I f any of CmdPending bits aro sot, then tho appropriat e 
10 N e xtBondCmdAdr or NoxtCmdAdr i s cop i ed to CmdAdr (caus i ng CmdSourco to g e t sot to 1) and 
a now command DRAM str e am is retr i ev e d from DRAM and e x e cut e d by tho PCU, I f th e r e ar e 
mu l t i ple pond i ng commands the DRAM r e qu e stor will s e rvice th e low e st number ponding b i t first. 
Noto that a now DRAM command stream on l y g e ts r e tr i ev e d when tho curr e nt command stream 
is empty. 

15 If thoro aro no DRAM commands pending, and no CPU commands th e PCU d e faults to an i dl e 
stat e . When id le th e PCU address bus defau l ts to th e D e bugSoi e ct r e gister valu e (bits 11 to 2 in 
particular) and th e d e fau l t unit PCU data bus is r e flected to th e CPU data bus. Tho default un i t is 
dotorm i nod by tho DobugSoloct roQicior bits 15 to 12. 

I n conjunct i on with this, upon receipt of a finishodBandfr)] s i gnal, NextBandCmdEnabfofn] i s 
20 copied to CmdP e nding[n] and N e xtBandCmdEnablo[n] is clear e d. Not e , e ach of th e LBD, CDU, 
and TE (whore present) may bo ro programmed ind i vidual l y b e tween bands by appropriately 
sott i ng NoxtBQr}dCmdAdr[2 0] r e sp e ctive l y. How e v e r, e x e cution of intor - band commands may bo 
postpon e d unt i l a ll b l ocks specif ie d i n th e B a ndS e i e ctMaek r e g i ster have pulsed their finiehedband 
signa l . Th i s may bo accomplish e d by only s e tting NoxtBandCmdAdr[3] (ind i r e ctly causing 
25 NextBandCmdEnabi e [3] to b e set) i n which case i t is th e poajfiniehodband s i gnal which causes 
N e xtBandCmdEnQblo[3] to b e copi e d to CmdPonding[3]. 

To conv e niently updat e mu l t i pl e registers, for e xampl e at the start of print i ng a page, a series of 
Wr i t e R e g i st e r commands can b e stored i n DRAM. Whon tho start address of tho first Wr i te 
Register command is writt e n to th e CmdAdr ro gist o r (via th e CPU), tho CmdSourc e r e gister is 
30 automatica l ly sot to 1 to actually start the ex e cut i on at CmdAdr. A l ternatively the CPU can wr i te to 
A/ e x(Cmc/Ac/r caus i ng th e CmdP e nding[4] bit to get sot, which will then got serviced by tho DRAM 
r e questor i n th e pond i ng bit arb i tration ordor. 

Th e final instruction i n the command b l ock stored i n DRAM must be a reg i st e r writ e of 0 to 
CmdSourco so that no more commands aro road from DRAM. Subsequent commands w i ll come 
35 from p e nd i ng programs or can b e s e nt via the CPU bus i ntorfaco. 
21.8.6.1 DobugModo 

Debug mode is implemented by rousing tho normal CPU and DRAM access decode logic. Whon 
in th e Arbitrat e state (se e stat e mach i n e A bo l ow), th e PEP addr e ss bus i s defau l t e d to the valu e 
i n th e D e bugS e loct rog i stor. The top b i ts of tho DobugSoloct regist e r ar e us e d to decode a s ele ct 
40 to a PEP un i t and th e r e ma i n i ng b i ts aro reflected on th e PEP address bus. The se l ected un i ts 
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r e ad data bus is r e f le otod on tho pcu_cpu_dQtQ bus to tho RDU in tho CPU. Tho 
pcu_cpu_dobug_yQfid signal i nd i cat e s to th e RDU that the data on tho pGujGpujdata bus is valid 
d e bug data. 

Norma l CPU and DRA I VI command acc e ss w i ll r e qu i r e tho PEP bus, and as such w il l caus e th e 
5 d e bug data to bo invalid dur i ng tho acc e ss, this is i nd i catod to the RDU by s e tting 
pcu_cpujdobug_yQlid to zoro. 
Th e d e cod e l og i c i s : 

/ / Default Debug decode 
if otatc == TVrbitratc then 

10 ti (cpu_j)Gu_oel ~ 1 AJffi Gpu_QGodc 

SUPERVI COR_DATA_MODB ) then 

pGu_cpu_dcbug_val id = — 0 ■/-/■ — — error 

Gondition 

pGU_Gpu_data =— & 

15 ClOQ 

<unit> a dcGodo (DobugScleGt [15 ; 12] ) 

if (<unit> == rCU ) then 

pGU_Gpu_data = Internal PCU regiotcr 

elae 

20 pGu_Gpu_data = <unit>jpGU_datain [31 ; 0] 

pGU_adr [ll ! 2] » DcbugSelGOt [11 ! 2] 

p Gu_Gpu_dcbug_va lid = 1 AFTER 4 cloclc Gyoloo 

— pGU_Gpu_dQbug_val id =— 0^ 

25 21.8.7 Stat e Machin e s 

DRAM command fetch i ng and g e n e ra l command ox e cut i on is accomplish e d us i ng two state 
mach i nes. Stat e machine A eva l uates wh e th e r a CPU or DRAM command is b e ing e x e cuted, and 
proc ee ds to oxocut o th e command(s). Sinc e th e CPU has priority ov e r th e DRAM it i s perm i tt e d to 
int e rrupt th e e x e cut i on of a str e am of DRAM commands. 

30 Machin e B d e cides wh i ch addr e ss shou l d b e us e d for DRAM acc e ss, f e tch e s commands from 

DRAM and fil l s a command fifo which A oxeoutos. The r e ason for s e parat i ng th e two funct i ons is 
to faci l itate th e e x e cution of CPU or Debug commands wh ile state machine B is p e rform i ng DRAM 
reads and f i l l ing th e command f i fo. In tho cas e wh e r e stat e machin e A is ready to oxocuto 
commands ( i n i ts Arbitrat e state) and i t soos both a full DRAM command f i fo and an act i ve 

35 cpu jjcu_6 e l th e n th e DRAM commands ar e executed last. 

21.8.7.1 Stato Maohino A : Arbitration and e x e cution of oommandG 

Th e stat e- machine ent e rs the R e s e t state wh e n th e re i s an active strob e on e ith e r th e r e s e t p i n, 
proton, or th e PCU's soft reset register. Al l registers i n the PCU are z e roed, un l ess otherwis e 
spoc i fiod, on tho next r i s i ng clock edge. The PCU s e if - d e ass e rts the soft r e set i n the pcii< cyc l e 
40 after it hao boon oosortod. 
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The state chang e s from Roeot to Arbitrato whon pr€t__n — 1 and PCUjooftree e t — 1 . 
Th e stat e- machine wa i ts in tho Arbitrato state unt i l i t d e tects a r e quest for CPU aocoss to tho PEP 
units (cpu _pcu_€oi — 1 and cpu_Qcodo — 1 1 ) or a r e quest to e xecute DRAM commands 
CmdSource — 1 , and DRAM commands ar e avai l ab l e, CmdFifoFull — 1 . Not e if {opu _pcu_Gol — 
5 1 and cpujacodo !" 1 1) tho CPU is attempt i ng an ill egal access. Tho PCU ignores th i s command 
and strobes th e cpu _j)cu_borr for one cycle 

Whi le i n th e Arbitrato stat e th e machino ass i gns the DobugS e f e ct r e gister to tho PCU unit deoodo 
l ogic and th e remain i ng b i ts to th e PEP address bus. Wh e n in this state tho dobug data r e turn e d 
from the selected PEP unit i s r e flected on th e CPU bus (pcujspujdatQ bus) and tho 

10 pcu_cpu_debug_valid^'\ . 

If a CPU acc e ss r e qu e st is detect e d {cpu _pcu_Got — 1 and cpu_acode — 11) th e n th e mach i ne 
proceods to th e CpuAcc e GG stat e . I n th e CpuAcc e ee stat e tho cpu addr e ss is docodod and us e d 
to d e t e rmin e th e PEP un i t to select. Tho remaining addross bits are passed through to tho PEP 
address bus. Tho machine remains i n th e CpuAccoes stat e unt il a val i d r e ady from th e select e d 

15 PEP unit is r e c e ived. Whon rec ei v e d tho machine r e turns to tho arb i trato state, and tho ready 
s i gnal to tho CPU is pulsed. 

// doGodc the logic 

pGu_<unit>_aGl = dccodo (cpu^adr [15 5 12] ) 
pcu^Qdr [11 ! 2] = cpu_Qdr [11 : 2] 

20 The CPU i s prevented from g e n e rating an i nval i d PEP unit addross (prevented in tho MMU) and 
so CPU acc e sses cannot generate an inva li d addr e ss error. 

I f th e stat e mach i no det e cts a r e qu e st to ex e cut e DRAM commands {CmdSource — 1), i t will wa i t 
i n th e Arbitrat e state until commands have boon loaded into the command FIFO from DRAM (al l 
contro l led by state mach i n e B). When the DRAM commands ar e available {cmdjRfo_fuii — 1) the 

25 state machine wi ll proc ee d to th e DRAMAcc e ee stat e . 

Wh e n in th e DRAMAccosg state tho commands ar e e xecuted from th e cmd_fifo, A command i n 
th e cmdJTifo consists of 6 4 bits (or wh i ch tho F I FO holds 4 ). The decod i ng of tho 61 b i ts to 
commands i s given in Tab l e — . For e ach command th e decode is 
/ / DRAM command decode 

30 pcu <unit> — ool = decode ( cmd fifo[Gmd count:] [15 : 12] — )- 

pcu_adr [11:2] ° cmd_f if o [Gmd_GOunt] [11 : 2] 

pcu_dataout = cmd_f if o [cmd_GO\int] [ 6 3 ; 32] 

Wh e n th e s el ect e d PEP unit returns a r e ady signal {<unit> jjcu_rdy — 1) indicat i ng th e command 
has comp l et e d, th e stat e machin e w ill r e turn to the Arbitrate state. If more commands e xists 

35 (cmdjGOunt !"0) tho transition wil l decrement the command count. 

Wh e n in th e DRAMAcc e se stat e , if when decoding the DRAM command addr e ss bus 
{cmd_flfo[omd_cour)t][15:12]), tho address solocts a r e s e rv e d addr e ss, the state mach i ne 
procoeds to the AdrError state, and thon back to th e Arbitrate stat e . An addross error int e rrupt w i l l 
bo generated and tho DRAM command F I FOs wil l be cl e ar e d. 



PEA23US 329 



A CPU aocoQG can pro ompt any p e nd i ng DRAM commands. Aftor oaoh command is oompl e t e d 
tho state mach i ne r e turns to th e Arbitrate stat e . I f a CPU aoo e ss i s r e quired and DRAM command 
str e am is oxoouting th e CPU acc e ss always ta l < e s pr i ority. I f a CPU or DRAM command sots th e 
CmdSourco to 0, a ll subsoquont DRAM commands I n th e command F I FO aro cleared. I f th e CPU 
5 sets the CmdSourco to 0 tho CrndPor^ding and NextBandCmdEnablo work reg i st e rs ar e also 
cl e ared. 

21.8.7.2 Stat e Machine B: F e tching DRAM commarids 

A syst e m res e t (pret^n — 0) or a software r e set (pcu_Goftroeot_n — 0) wil l causo tho stato mach i ne 
to rosot to th e R e s e t state. Tho state machine remains in the R e s e t unt il both reset conditions aro 

10 r e mov e d. When removed th e machin e proc ee ds to th e Wait state. 

Th e state mach i ne waits i n th e Wait stat e unti l i t det e rmines that commands ar e n e eded from 
DRAM. Two possibl e condit i ons ex i st that requir e DRAM acc e ss. Eith e r th e PCU Is proc e ssing 
commands wh i ch must be fetched from DRAM (cmdjsourco — 1), and tho command F I FO Is 
e mpty {cmdjnfojFuif — 0), or th e cmdjsourc e — 0 and tho command F I FO i s e mpty and there are 

15 som e commands pend i ng {cmd jp e nding |-0). I n ei th e r of th e s e conditions tho machin e proc ee ds 
to th e Ack stat e and Issu e s a read request to DRAM {pcu_diu_rr e q — 1), i t calcu l at e s th e addr e ss 
to road from dependent on tho transition condit i on. In tho command pond i ng transit i on cond i tion, 
th e high e st priority N e xtBandCmdAdr {or NextCmdAdr) that i s p e nding i s used for the r e ad 
addr e ss (pcu_diu_radr) and is a lso cop ie d to th e Cmcy/\c/r register. I f mu l tip l e pond i ng b i ts ar e s e t 

20 th e lowest pend i ng bits ar e serviced first. In th e normal PCU processing trans i t i on the 
pcu_diu_radr is th e CmdAdr register. 

Whon an acknowl e dg e i s r e ce i v e d from tho DRAM tho stato mach i no goos to tho FiflFifo stato. I n 
the FillFifo stat e th e mach i n e waits for the DRAM to respond to th e r e ad r e qu e st and transf e r data 
words. On rece i pt of the first word of data diu _pcu_rvafid — 1 , tho machino stores tho 6A bit data 
25 word i n th e command F I FO {Gmd_fifo[3J) and trans i t i ons to the Data1, Data2, Data3 states each 
t i me waiting for a diu jyoujrvalid — 1 and storing the transferred data word to cmd_frfo[2], 
cmdJRfo[1] and cmdjRfofO] r e sp e ctively. 

Wh e n th e transfer i s comp l ete th e mach i n e r e turns to the Wait stato, s e tting th e cmd_count to 3, 
th e cmd_fifo_fulf is s e t to 1 and th e CmdAdr i s incromontod. 
30 I f tho CPU s e ts th e CmdSourc e r e g i st e r low wh i l e th e PCU is in tho m i ddle of a DRAM acc e ss, 
the statomach i ne r e turns to the Wait stat e and th e DRAM acc e ss is abort e d. 

21.8. 7. 3 PCUJCU_AddroGGjnvQiid interrupt 

Whon tho PCU is executing commands from DRAM, addrosoos docodod from commands wh i ch 
aro not PCU mapped addr e ss e s ( 4- b i ts only) w il l resu l t i n tho curr e nt command b ei ng ignored and 

35 th e pcujcuj a ddr e ssjnvaiid int e rrupt s i gna l i s strob e d. Wh e n an i nva li d command occurs al l 
rema i n i ng commands alr e ady retr ie ved from DRAM ar e flushed from th e CmdFifo, and the 
CmdPonding, NoxtBandCmdEnabi e and CmdSource r e gist e rs are cloarod to z e ro. 
The CPU can then interrogate tho PCU to find th e source of th e il l e gal DRAM command via the 
invalidAddr e ss register. 

40 Th e CPU i s prevented by the MMU from g e nerat i ng an i nvalid address command. 
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22 Contono Decoder Unit (CDU) 

22t1 Overv i ew 

The Contone Decoder Unit (CDU) i s r e spons i ble for p e rform i ng the opt i ona l dooomproQs i on of the 
contono data l ayer. 

5 The input to the CDU is up to 4 p l an e s of compr e ss e d conton e data i n JPEG i nter le av e d format. 
This w i l l typical l y bo 3 plan e s, r e pr e s e nting a CMY contono image, or 4 p l an e s r e pr e s e nting a 
CIVIYK conton e imag e . Th e CDU must support a page of A 4 length (11.7 inch e s) and L e tt e r width 
(8.5 i nches) at a reso l ution of 267 pp i i n 4 co l ors and a print spood of 1 sido p e r 2 s e conds. 
Th e CDU and th e othor pag e e xpans i on un i ts support tho notion of page band i ng. A compr e ss e d 
10 pag e is d i vid e d i nto one or mor e bands, w i th a numb e r of bands stored i n memory. As a band of 
th e pag e is consumed for print i ng a n e w band can bo download e d. Tho new band may b e for th e 
current pag e or th e next pago. Band - fin i sh interrupts hav e b e en prov i ded to notify the CPU of froo 
buff e r spac e . 

Th e compr e ss e d conton e data is road from tho on chip DRAM. The output of th e CDU i s th e 

15 d e compr e ssed conton e data, separat e d into plan e s. The d e compr e ss e d contono i mag e i s wr i tt e n 
to a circular buff e r in DRAM with an expected minimum sizo of 12 l i nos and a conf i gurable 
maximum. Th e decompr e ss e d conton e imago is subsequently r e ad a lino at a tim e by th e CFU, 
optiona ll y co l or conv e rt e d, sca le d up to 1600 pp i and then passed on to tho HCU for tho noxt 
stag e in th e pr i nting p i po li no. Tho CDU a l so outputs a cduJniGh e dband control flag i ndicating 

20 that tho CDU has f i nish e d reading a band of compr e ssed conton o data i n DRAM and that area of 
DRAM i s now froo. Th i s flag i s us e d by the PCU and i s ava i labl e as an i nterrupt to tho CPU. 

22r2 Storage requ i rements for dccompressed contone data i n DRAM 

A s i ngl e SoPEC must support a page of A 4 length (1 1 .7 inches) and L e tt e r w i dth (8.5 i nches) at a 
r e solution of 267 pp i in A colors and a pr i nt spood of 1 sid e p e r 2 seconds. Tho pr i nthoads 

25 spocifiod In tho B i lithic Printhood Spec i ficat i on [2] hav e 1382 4 nozzles p e r color to prov i d e full 
b lee d pr i nt i ng for A 4 and L e tter. At 267 ppi, ther e ar e 2304 conton e pix e ls^ p e r lino rq>resentcd by 
2 8 8 JPEG bloclcs per color. How e v e r e ach of th e se bloclcs actually stor e s data for 8 lin e s, sinc e a singl e 
JPEG block is 8 X 8 pix e l s . Tho CDU produc e s conton e data for 8 lin e s in parallel, while tho HCU proc e ss e s 
data lin e arly across a line on a lino by line basis. Th e contone data is d e cod e d only once and then buffer e d 

30 in DRAM, This means w e r e quire two s e ts of 8 buffer lin e s — on e s e t of 8 buff e r lines is being consum e d by 
th e CFU whil e the othor sot of 8 buffer lino s is being gen e rat e d by th e CDU. 

Th e buff e r requ i r e ment can b e r e duced by using a 1 .5 buff e ring schomo, wh e r e th e CDU fi l ls 8 
linos wh i le tho CFU consumes 4 l i n e s. Tho buffer spac e r e quir e d is a m i nimum of 12 l in e stor e s 
p e r co l or, for a tota l spac e of 1 08 KBytes' * ^. A oiroular buffer scheme is employ e d wh e reby th e CDU 
35 may only begin to writ e a lin e of JPEG bloolcs (equals 8 linos of oontone data) wh e n ther e ar e 8 lin e s fr e e in 



^P i xo l s may b e 8, 16. 2A or 32 bits dopond i ng on tho numbor of color p i anos (8 bits per co l or) 
^12 linoG X 1 Go l oro x 2301 bytoo (assumoo 267 pp i , A color, fu ll blood A'l/Lottor) 
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th e buff e r. Onoo the full 8 linos have b e en written by tho CDU, th e CFU may now begin to read thorn on a 
lin e by lino basis. 

This r e duct i on i n bufforing comes w i th the cost of an i ncr e as e d poak bandwidth roqu i romont for 
th e CDU wr i t e acc e ss to DRAM. Tho CDU must bo abl e to wr i te th e d e compr e ssed conton e at 
5 tw i c e th e rat e at which tho CFU r e ads tho data. To a l low for trade offs to b e mado botwoon poak 
bandw i dth and amount of storage, tho s i zo of tho circu l ar buffer is configurabl e . For examp l e, if 
th e ciroulor buffer is configured to bo 16 l i nos it bohav e s lik e a double buff e r scheme whoro tho 
p e ak bandw i dth roquiromonts of the CDU and CFU ar e e qual. An i ncroas e ov e r 16 l inos allows 
th e CDU to write ah e ad of tho CFU and provides i t w i th a margin to cop e w i th v e ry poor l oca l 

10 compression ratios i n th e i mago. 

SoPEC should also provid e support for A3 printing and pr i nting at r e solutions above 267 ppi. Th i s 
i ncr e ases tho storag e r e qu i rement for th e d e compr e ssed conton e data (buff e r) in DRAM. Tab l e 
1 A3 g i vos tho storage roquiromonts for tho d e compr e ssed conton e data at som e samp l e contono 
r e solut i ons for different pag e s i zes. I t assum e s 4 co l or pianos of conton e data and a 1 .5 buffering 

15 sch e me. 

Tab l e 1 4 3. Storage requirements for decompressed contone data (buffer) 





Contone resolution 


Scale 






WW') 




Pixels per line 


Storage required 




(kBytes) 


A1/Lottor° 


267 


6 


2304 


408^ 




40Q 


4 


34§6 


462 


SOO 


2 


gQ12 


324 




267 


6 


32 1^3 


152.25 




400 


4 




228.37 


800 


2 


9744 


456.76 



a-. — Required for CFU to conv e rt to fina l output at 1600 dpi 
20 — Bi l ithic printhoad has 1382 4 nozzles per co l or provid i ng ful l b lee d print i ng for A 4 /L e tt e r 
— B i-li th i c pr i nth e ad has 19488 nozz le s p e r co l or providing fu ll b lee d print i ng for A3 
d. 12 l i nes x 4 colors x 2304 bytos. 
22t3 Decompression performance requ i remcnts 

Th e JPEG d e cod e r core can produoo a single color p i xol e v e ry system clock (pclk) cycl e , making 
25 it capab i o of d e cod i ng at a p o ak output rat e of 8 b i ts/cycl e . SoPEC procossos 1 dot (bi level i n 6 
co l ors) per system c l ock cycle to achieve a pr i nt spood of 1 s i do p e r 2 seconds for full bl ee d 
Al/Letter printing. The CFU rep l icates pixels a scale factor (SF) numb e r of t i m e s i n both tho 
hor i zontal and v e rtica l d i r e ctions to convert th e final output to 1600 pp i . Thus th e CFU consumes 
a 4 co l or p i x e l (32 bits) ev e ry SFx SF cycles. The 1 .5 buffer i ng ochemo descr i bed i n sect i on 22.2 
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on pag e 1 m e ans that tho CDU must wr i t e th e data at twico th i s rato. With support for 4 co l ors at 
267 pp l , th e d e compr e ss i on output bandw i dth r e quir e m e nt i s 1.78 bits/oyc l o' ^^T 
Th e JPEG d e coder is fod diroctly from tho main memory v i a tho DRAM i nt e rface. Tho amount of 
compr e ssion d e t e rm i nes tho i nput bandw i dth r e qu i r e m e nts for th e CDU. As the l ovol of 
5 compress i on i ncrooDOs, tho bandw i dth d e cr e ases, but th e qual i ty of th e f i na l output i mago can 
a l so d e cr e ase. A l though th e av e rage compr e ss i on ratio for conton e data i s e xpoctod to bo 10:1, 
tho avorogo bandwidth allocated to tho CDU allows for a local m i n i mum compression rat i o of 5:1 
over a single l ino of JPEG blocks. Th i s oquatos to q poak input bandwidth requiromont of 0.36 
bits/cycio for A co l ors at 267 ppi, ful l blood A 4 /L e tter print i ng at 1 sido por 2 s e conds. 

10 Toblo 1 44 giv e s tho docomprossion output bandwidth r e qu i rements for d i ff e r e nt resolut i ons of 
conton e data to moot a print speed of 1 s i do por 2 seconds. Higher resolution requires higher 
bandwidth and larger storage for decompressed contono data in DRAM. A reso l ution of 4 00 pp i 
conton e data in 4 colors requ i res 4 b i ts/cycle"^, which is practical using a 1.5 bufForing sch e m e . 
How e v e r, a r e solution of 8 00 ppi would require a doubl e buffering scheme (16 lin e s) so the CDU only has 

15 to match th e CFU consumption rat e . In this case tho dooompr e ssion output bandwidth r e quirement is 8 
bits/cycle^, the limiting factor being tho output rate of the JPEG decoder core. 

Tob l o 144. CDU performance roquiromonts for ful l blood A 4 /Lottor printing at 1 s i de p e r 2 
seconds. 

20 



Contone 


Scolo 
factor 




resolution 


Decompression output bandwidth 
requirement (bits/oycle)° 


vkFv 






2€7 


S 




400 


4 


4 


800 


2 


8- 



a. Assumes 4 color p i x el contono data and a 12 l ine buffer. 

b. Scale factor 2 r e quir e s at l e ast a 16 lin e buff e r. 

Data flow 

Figure 1 36 shows the genera l data flow for contono data — compress e d contono planes are r e ad 
25 from DRAM by tho CDU, and tho docomprossod conton o data is wr i tt e n to the 12 li ne circular 
buff e r i n DRAM. Th e l in e buff e rs ar e subs e qu e nt l y road by the CFU. 

Tho CDU allows the contono data to be pass e d d i r e ctly on, wh i ch will b e th e cas e i f th e co l or 
r e presented by e ach color plan e i n the JPEG i mag e is an availab le ink. For e xamp l e, th e four 



" ^2 X ( ( 4 ooloro X 8 bits) / (6 x 6 oyolos) ) - 1 .78 b i ts/cycIo 
^2 X ( oo l oro X 8 bits) /{Ax A oyo l os) ) - A b i ts/oycio 
" ^{A colors X 8 b i ts) / (2 x 2 oyo l os) - 8 b i ts/oycio 
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colors may bo C, M, Y, and K. direct l y repr e sontod by CMYK inks. Tho four colors may repr e s e nt 
gold, motallio groon etc. for mult i SoPEC pr i nting with oxaot colors. 

Howovor JPEG produc e s b e tt e r compression ratios for a g i ven visiblo qual i ty wh e n l um i nanc e and 
chrominanco ohannolo arc separated. With CMYK, K can bo considered to be l uminance, but C, 
5 M, and Y e ach conta i n l um i nance informat i on, and so wou l d need to b e compressed with 

appropriate l um i nance tab l es. Wo thoroforo prov i de tho moans by wh i ch CMY can be passed to 
SoPEC as YCrCb. K doos not nood co l or conv e rsion. When be i ng JPEG compr e ssed, CMY is 
typical l y convert e d to RGB, th e n to YCrCb and thon finally JPEG compr e ss e d. At decompress i on, 
the YCrCb data i s obtain e d and wr i tten to th e docompress e d contono storo by tho CDU. This i s 
10 r o ad by th e GFU whore tho YCrCb can th e n b e optiona l ly color converted to RGB, and final l y 
back to CMY. 

Tho external R I P provides convoro i on from RGB to YCrCb, specifica l ly to match the actua l 
hardware impl e m e ntat i on of the inv e rs e transform within SoPEC, as p e r CC I R 601 2 [2A] except 
that Y, Cr and Cb are normalized to occupy all 256 lev e ls of an 8 - bit binary e ncod i ng. 
15 The CFU prov i d e s th e translat i on to ei th e r RGB or CMY. RGB is inc l ud e d s i nc e i t is a necessary 
st e p to produce CMY, and some printers increase their co l or gamut by includ i ng RGB inks as well 
as CMYK. 

22t5 I mplementation 

A b l ock diagram of th e CDU i s shown in Figure 137. 

20 Al l output signa l s from tho CDU (cclu_cfu_wradv8lin e , cclu_fmi€hodbQnd, cdujcu Jpogorror, and 
control s i gna l s to th e D I U) must always be va l id aftor reset. If tho CDU is not curr e ntly decoding, 
cdu_cfu_wradv8lin e , cdujHniehodbQnd and cdujcu Jpogorror w i ll a l ways be 0. 
Th e r e ad contro l unit Is r e spons i bl e for k ee p i ng th e JPEG d e cod e r's input FIFO fu ll by r e ading 
compr e ss e d contono bytestroam from externa l DRAM via tho D I U, and produces the 

25 cdujRnieh e dband s i gnal. The writ e control un i t acc e pts th e output from th e JPEG d e coder a ha l f 
JPEG block (32 bytes) at a t i m e , writes i t i nto a doub l e buffer, and wr i tes tho double buff e r e d 
d e compr e ssed half blocks to DRAM v i a tho D I U, i nt e ract i ng with th e CFU in order to shar e DRAM 
buff e rs. 

22.5.1 Dofinitiono of I/O 

30 Table 1 4 5. CDU port list and description 



Port name 


^11 lO 


m 


Description 


Clocks and reset 


Pdk 


A- 




System clock. 


Jeik 


4- 


In 


Gated version of systom clock used to clock the 


JPEG decoder core and logic at the output of tho 




core. Allows for stalling of tho JPEG core at a pixel 
sample boundary. 
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iGlk_enable 


4- 




Gating signal for jclk. 


prst_n 


4- 


In 


Syotom rosot, GynchronouG active low. 


— 






+ 


lo 


. 


|rst_n 


Rosot for jolk domain, synchronous activo low. 


PCU interface 








pcu_cdu_sel 


4- 


\B 


Block select from the PCU. Whon pcu_cdu_eol is 
high both pcu^adr and poujdataout aro valid. 








\B 


Common read/not write signal from tho PCU. 


pou_rwn 




pGu_adr[7:2] 


6 


\B 


PCU address bus. Only 6 bits are recjuirod to decode 
the address space for this block. 




pcu_clataout[31 :0] 


32 




Shared write data bus from the PCU. 






cdu PCU rdv 


4- 


Out 


D£»'3*?iw_i:»i«ri<5j thf* POIJ Whp^n rrfu nrti rH\/ i*^ hinh 








it indicates the last cycle of the access. For a write 
cycle this moans pcujdQtaout has boon rogistorod 


by the block and for a read cycle this moans tho data 


on Gdu _j>cujdiQtQin is valid. 


cdu_pcu_datain[31 :Q] 


32 


Gut 


Read data bus to the PCU. 








DIU read interface 


odu_diu_rreq 




Out 








CDU read request, active high. A read request must 


bo aocompaniod by a valid read address. 


diu_cdu_rack 


4- 








Acknowledge from DIU, activo high. Indioatos that a 
read request has boon accepted and the new road 


address can be placed on tho address bus, 


cdujdiujradr. 


Gdu_diu_radr[21 :5] 


47 


Out 








CDU road address. 17 bits wide (256-bit aligned 

word). 


diu_cdu_rvalid 


4- 








Read data valid, active high. Indicates that valid road 
data is now on the road data bus, diujdata. 




diu_data[63:0] 


84 




Read data from DRAM. 






DIU write intorfaoo 


Gdu_diu_wreq 


4- 


Out 








CDU writo request, active high. A write request must 


bo accompanied by a valid write address and valid 
write data. 


diu_cdu_waGk 


4- 








Acknowledge from DIU, active high. Indicates that a 
writo request has been aocoptod and tho now write 


address can bo placed on the address bus, 


cdu_diu_wQdr, 


Gdu_diu_wadr[21 :3] 


48 


Out 








CDU writo address. 19 bits wide (64-bit aligned 
word). 


Gdu_diu_wvalid 


4- 


Out 








Writo data valid, activo high. Indicates that valid data 
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is now on the writo data bus, cdu_diu_dQta, 


odu_diu_data[63:0] 




Otrt 


Writo data bus. 






CFU intorfaco 


cfu_odu_rdadvlino 


4- 








Read line pulso, active high. Indicates that tho CFU 
has finished reading a lino of decompressed contono 


data to the circular buffer In DRAM and that lino of 


the buffer is now froo. 


Gdu_ofujinostoro_rdy 




Qyt 


Indicates if tho contone line store has 1 or more linos 






available to road by the CFU. 


TE and LBD interface 


cd u_start_of_bandstore[2 1 




Out 


Points to tho 256 bit word that dofinos the start of tho 








momory area allocated for page bands. 




cdu_end_of_bandstore[21 : 


4^ 


Otrt 


Points to the 256 bit word that defines the last 


Si 






address of tho momory area allocated for page 


bands. 


ICU intorfaco 




4- 




CDU's finiehedBand flog, active high. Interrupt to tho 


odu^finiohodband 




CPU to Indicate that the CDU has finished 


processing a band of compressed contone data in 


DRAM and that area of DRAM Is now free.This 




signal goes to both the interrupt oontrollor and tho 

PGU. 


odujcujpegerror 


4. 










Active high interrupt indicating an error has occurred 
in the JPEG decoding process and docomprossion 


has stopped. A reset of the CDU must be performed 


to clear this interrupt. 



22.5.2 Conf i gurat i on rog i storo 

Th e configurat i on r e gist e rs I n the CDU aro programmed via tho PCU i ntorfaco. Rofor to s e ction 
21 .8.2 on pag e 1 for the doscription of th e protocol and tim i ng d i agrams for reading and writing 
reg i sters i n th e CDU. Note that s i nc e addr e ss e s in SoPEC ar e byte aligned and th e PCU only 



5 supports 32 - bit r e gister reads and writ e s, th e lower 2 bits of tho PCU address bus aro not requ i red 
to docodo tho address space for tho CDU. When read i ng a register that is l e ss than 32 bits w i d e 
z e ros shou l d b e r e turn e d on tho upper unus e d bit(s) of cdu _j)cu_dotQm, 

S i nco tho CDU, LBD and TE al l accoss tho pago band storo, thoy shar e two r e g i sters that enabl e 
s e qu e ntia l memory acc e sses to the page band stor e s to be c i rcular in nature. Table 1 4 6 l ists 
10 th e s e two regist e rs. 

Table 116. Reg i sters shared between tho CDU, LBD, and TE 



Address 


Register name 


#bit& 


Value on 


description 
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(CDU baso-f) 










Sotup rogistors (remain constant during tho processing of multiple bands) 


0x80 


StartOfBandStoro[21 :5] 




0x0 0000 


Points to the 256 bit word that defines 










Circular address generation wraps to 

this start Gddress. 


9xS4 


EndOfBandStore[21 :5] 




0x1 3FFF 


Points to the 256 bit word that defines 






the last address of tho momory aroo 


allocated for page bands. 

If the current read address is from this 




address, then Instead of adding 1 to 
the current address, tho current 
address will bo loaded from tho Star 


tOfBandStoro rogistor. 



Th e software reset l ogic should inc l ude a circu i t to onsuro that both th e polk and jclk domains are 
r e s e t r e gardl e ss of tho stato of tho jcfk_enabie wh e n tho rosot i s initiated. 
Tho CDU contains tho fo l low i ng additiona l r e gist e rs: 
Tab le 117. CDU r e g i st e rs 



Address 






VqIuo on 




(CDU_baso+) 


Register name 


reset 


Description 


Control rogistors 






4- 






A write to this register causes a reset of 
tho CDU. This torminatos all internal 




operations — within — the — CS6150. — AH 
configuration data previously loaded 


into tho coro oxcopt for tho tables is 


deleted. 




Ge 


4- 


0x0 


Writing 1 to this register starts the CDU. 


Writing 0 to this register halts the CDU. 


When Go is deasserted the state 




machines go to their idio states but all 


counters and configuration rogistors 
keep their values. 

When Go is assortod all counters are 


reset, but configuration registorc keep 




their values (i.e. thoy don't get reset). 
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N e xtBondEnablo i s cioarod whon Go i s 



assortod. 



Tho CFU must bo startod boforo tho 



CDU I s start e d. 



Go must remain low for at loast 38 4 jclk 



cyc le s aft e r a hardware rosot {firetjn ~ 
0) to allow th e JPEG core to comploto 



its memory itnit i alisation soquonco. 
Th i s regist e r can bo road to dotormino i f 



th e CDU is running (1 — runn i ng, 0 



stopped). 



Setup r e gist e rs 



NumL i nosAvail 7- 



Th e number of imag e l i nos of data that 
th e r e I s space avai l able for In the 



d e compress e d data buff e r in DRAM. 



I n normal op e ration this valu e w ill start 
off atNumBuffLin e s and w i l l bo 



d e cr e mented by 8 whonovor th e CDU 



wr i tes a lin e of JPEG b l ocks (8 linos of 



data) to DRAM and incr e mented by 1 



wh e nev e r tho CFU r e ads a line of data 



from DRAM. 



NumLinosAva i l can bo ovenwritten by 
the CPU to prevent th e CDU from 



If this drops < 8 the CDU wi l l sta l l. 



sta l ling. 



MaxPlano 



Defines the number of contone planes 



For example, this will — b e 0 for K 



(gr e ysca l o print i ng), 2 for CMY, and 3 
For CMYK. 



MaxBloc I ^ 



4^ 



QxeOQ 



Number of JPEG MCUs (or JPEG b l ock 
e qu i va l ents, i . e . 8x8 byt e s) i n a l i n e — 1^ 



BuffStartAdr[21 :7] 



4« 



0x0000 



Points to tho start of tho decompress e d 



contone circu l ar buff e r i n DRAM, 
a l ign e d to a half JPEG block boundary. 



A half JPEG block cons i sts of 1 words 



of 256 - b l ts, e nough to hold 32 contone 



p i xe l s i n 4 co l ors, i. e . ha l f a JPEG 
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block. 




BuffEndAdr[21:7] 




0x0000 


Pnint*^ tn thf^ *^tnrt nf thn iT^t hnlf IPFf^ 








n^Wrrrto-i^j KtiKS 9ieilt"vt LI led Idol llclll OT^dSS 


contone circular buffer in DRAM, 




A half JPEG block consists of A words 


of !?56 bits enough to hold 32 contone 


r|iyH<^v in A fiolors i ft hnlf n JPPG 


block. 




NumBuffLinesr6'2 


§ 


0x03 






II lOO \JH—\^ \Jl L^UII^I III L^l \i IIVI III lAmfl 1 1 lO 

nf thr* niimhf^r of Hf^rrim nrf!i«^i=*H 


\Jt LI lO IILIIIILJ^^I \Jl \J\^\J\Jll l\Ji \^\9\3\^\J 

pnntonf* linf^**! Xhf* ti^r^ of tho hiiffp^r 




should be a multiple of 4 linos with a 
minimum size of 8 lines. 


Qy24 


Bypass J pg 


4- 


0x0 








UWW\^\JWI will liJ\J UJf ^WJOwVitU \^ ^ lUI lUU 


fJl^KJIU Ul w W|<#lwU Ull ^i«\JU f iiurii II IL/UV \\J 

niitoutV 

D don't bvos*"* 1 bvm**** 


Should not be changed between bands. 


Qy3Q 


NoxtBandCurr 


4^ 


0x0 0000 




SourcoAdr[21:5] 




t t ITS- £.\j\j-%Jt\. dttyi ttgU-WiJHJ elUiJrtjoo 




containing the start of the next band of 


OV/T 1 1 |>JI V^OOV^U VfV^I ll>\<fl IV^ UOia lll L>fi \1 IIVI. 


whon both DonQBnnd ic 1 and 
NoxtBandEnablo is 1 , or whon Go 


U Ul lUIU^JI lO IIUIII \J \\J 1.' 


0x34 


NextBandEnd 


4« 


0x0 0000 




SourcoAdr[21 :3] 








band of compressed contone data in 


DRAM 

1 \J \l VI • 

Thi^L viliif* i*^ pnnif^H to Fnri^nurcfi/icir 


whon when both DonoBand is 1 and 


N&xtBQndEnshtG is 1 or when Go 


transitions from 0 to 1 . 




NextBand Valid 


3 


0x0 




BytesLastFotoh 


Indicates the number of valid bytes - 1 
in the last 64 bit fotch of tho next band 




of compressed contono data from 


DRAM, eg 0 implies bits 7:0 are valid, 1 
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i mplios bits 15:0 aro valid. 7 imp li oo all 
63:0 b i ts ar e va li d otc. 



This vaiuo is cop i od to 
VaiidBytoeLaGtFotch whon both 



DoneBand is 1 and NoxtBandEnabl e is 



, or wh e n Go transitions from 0 to 1 . 



NextBandEnab l o 



0x0 



Wh e n NoxtBandEnabio i s 1 and 



Don e Band is 1 



N e xtBandCurrSourc e Adr i s cop ie d to 
CurrSourcoAdr 



N e xtBandEndSourceAdr i s copiod to 
EndSourceAdr 



NoxtBandVaiidByteGLaetFotoh i s 



copi e d to ValidBytoGLaetFotoh 
DonoBand is cleared, 



N e xtBandEnablo is cleared. 



N e xtBandEnablo is clear e d whon Go i s 



ass e rt e d. 



Not e that DonoBand gets oloarod 



r e gardless of tho stat e of Go. 



Road only r e gistors 



DonoBand 



0x0 



transit i ons from 0 to 1 . 



Whon tho l ast of the com pressed 
oontono data for th e band has boon 



l oad e d i nto tho l ocal FIFO, th e 
cduJTiniGhedband signa l is given out 



Sp e c i f ie s wh e th e r or not the ourr o nt 



band has finiohod l oading I nto tho local 
F I FO. I t is cloorod to 0 whon Go 



and th e DonoBand flag is s e t. 

If N e xtBandEnabl o i s 1 at th i s timo thon 



CurrSouroeAdr, EndSourcoAdr and 



ValidBytoGLaetFotoh aro updated with 



th e values for tho next band and 



DonoBand i s c le ared. Processing of tho 



n e xt band starts imm e d i ate l y. 
I f NextBandEnablo i s 0 thon tho 



r e ma i nder of th e CDU w i l l cont i nue to 



run, decompressing tho data already 
loaded, wh ile th e r e ad control unit waits 
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for NoxtBsndEnable to bo oot boforo it 


restarts. 




CurrSourceAdr[21 




0x0 0000 


Tho — current — 256 bit — alianod — weFd 


Si 






address within the curront band of 




compressed contono data in DRAM. 


QxAQ 


EndSouroeAdr[21 


4© 


0x0 0000 










The — 64 bit — alignod — word — address 
containing tho last bytes of the current 


band — of compressed contono data in 


DRAM 




ValidBytesLostFot 


3 


0x00 




61=^ 




Indicates the number of valid bytos — X 
in the last 64-bit fetch of tho curront 


band of compressed contono data from 




DRAM, eg 0 implies bits 7:0 are valid, 1 
implies bits 15:0 are valid, 7 implies 


all 63:0 bits are valid etc. 


JPEG docodor coro sotup rogiotors 




JpgDeoMask 












As segments are decoded thoy can 
also bo output on tho DocJpg 
(JpgDecHdr) port with the user 


selecting tho sogmonts for output by 
sotting bits in the jpgDecMask port as 


Follows: 

^ SOF+SOS+DNL 

3 COM^APP 

2-DR( 

1 DQT 

0-DHT 

If any ono of tho bits of jpgDecMask is 


assorted then tho SOI and EOl markers 


aro also passed to tho DocJpg port. 






JpgDeoTType 


1- 


OxQ 






Test type selector: 

0 — DCT coefficients displayed on 


JpgDocTdatQ 

A — QDCT coefficient displayed on 


JpgDecTdata 




JpgDooTootEn 


4- 


0x0 






Signal which causes the memories to 
be bypassed for test purposes. 






4 






JpgDooPTypo 


Signal specifying — parameters to — be 


placed on port JpgDecPVaiuo (See 
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Tablo ). 


JPEG doGoder core read-only status rogistors 


0x60 


JpgDooHdr 


8 


QyQQ 






JPEG — stroam — that — ts currontlv beinn 




decoded. — Segments — soleotod — using 
JpgMQGk 


\J>\\J 1 


JpgDeoTData 




9x0000 


1*^ TSO^ nutnut nf P^IR'^O inriimtn'^ 






^t^'^ f!re>t i^m 1^ l^tftn firc^t Ox<*0 


tne Tirsi ouipui pyie ot ine Tirsi oxo 
block of the tost data. 


-M — i ovjt> ouipul QT iDou, inQicaies 
the first output byte of each 8x8 block 


of test data. 


lU u — 1 1 -oil ouipul losi Qaia port - 
displays DCT coefficients or quantized 




coefficients doponding on value of 




JpgDeoPValuo 




9x0000 








L/eooQing pararnoior bus wnicn enaoios 


various parameters useo By tne ooro to 


B© — reao. — i-Re — edta — avaiiaoie — on — tne 
PValue port is for information only, and 


1^^^^ ^^^^r%4r^%l ^i^,^^ 


uoos not contain control signals tor tne 
docodor core. 


QxGC 


JpgDooStatus 




0x00 000 






0 


Pit 23 jpg_coro_6tQll (if set, indicates 

X _^ X Al_ 1 f~ ^ ^ ^ • ^ ^ X — . 1 1 * -J L. . . . - .1. ? . ■■■ _ . 


that tho JPEG core is stalled by gating 


OT jciK as tne output jKb<j nalToiock 


double buffers of tho CDU arc full) 


Bit 22 — pix_out_j/QHd (This signal is an 
output from tho JPEG decoder coro and 




Is assorted when a pixel is boing output 
Bits 21-16 fifojGontentB (Number of 


bytos in compressed contono FIFO at 


the input of CDU which feeds the JPEG 


decoder coro) 

Bits 15 0 arc JPEG docodor status 


outputs from tho CS6150 (soe Table 


for description of bits). 



22.5.3 Typical operat i on 

Th e CDU shou l d on l y b e started after tho CFU has b e en started. 

For th e f i rst band of data, users sot up NextBandCurrSourc e Adr, NoxtBandEndSourc e Adr, 
NextBandVaiidBytoGLaetFotch, and tho var i ous MaxPian e , MaxBlock, BuffStartBiockAdr, 
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BuffEndBlockAdr and NumBuffLinoQ. Usors th e n s e t th e CDU's Go bit to start procoss i ng of tho 
band. Whon the oomprossod contono data for tho band hoc finiohod being road in, tho 
cdujrinieh e dband int e rrupt w ill bo s e nt to the PCU and CPU ind i cating that th e m e mory 
assoc i atod with th e first band i s now froo. Proc e ss i ng can now start on the noxt band of contone 
5 data. 

I n order to process tho noxt band N e xtBandCurrSourc e Adr, NoxtBandEndSourc e Adr and 
NoxtBandVaUdBytOGLaotFotch nood to be updated befor e finally writ i ng a 1 to N e xtBandEn a bl e , 
Th e r e ar e 1 m e chanisms for r e starting th e CDU b e tw e en bands: 

a. cdaJTiniehodbond caus e s an interrupt to tho CPU. Th e CDU wil l hav e s e t i ts Don e Band bit. 
10 The — CPU — r e programs — the — N e xtBandCurrSourc e Adr, — N e xtBandEndSourc e Adr — an4 

NextBandValidByt e sLaetF e tch r e gist e rs, and s e ts N e xtBandEnabl e to r e start th e CDU. 

b. Th e CPU programs th e CDU's NextBandCurrSourc e Adn N e xtBandCurrEndAdr and N e xt - 
BandValidBytoeLaetFotch registers and sets tho NoxtBandEnabio b i t before the end of tho our 
r e nt band. At th e end of th e curr e nt band th e CDU s e ts DoneBand. As N e xtBandEnabl e is 

15 alr e ady 1, the CDU starts proc e ss i ng th e next band i mmediat e ly. 

0. The PCU i s programmed so that cdu^finishodband tr i ggers tho PCU to execute commands 
from DRAM to r e program th e NextBandCurrSourceAdr, N e xtBandEndSourc e Adr and N e xt - 
BandValidBytOGL o GtFotch registers and sot tho NoxtBandEnabio bit to start tho CDU 
process i ng tho next band. The advantag e of this schem e is that th e CPU cou l d proc e ss band 
20 h e ad e rs i n advanc e and stor e th e band commands i n DRAM r e ady for e x e cution. 

4-, Th i s i s a combination of b and c above. Tho PCU (rather than tho CPU i n b) programs the 

CDU's — N e xtBandCurrSourcoAdr, — N e xtBandCurrEndAdr — an^ — NextBandValidByt e sLaetFetch 
r e g i st e rs and sots th e N e xtBandEnabl e b i t before th e e nd of th e curr e nt band. At th e e nd of the 
current band th e CDU s e ts Don e Band and puls e s cdu^ftnieh e dband. As N e xtBandEnabl e i s 
25 a l ready — — the — QDU — starts — processing — the — Rext — band — i mmediate l y. — S i mu l taneously, 
cdaJTinish e dband trigg e rs the PCU to fetch commands from DRAM. The CDU wi ll hav e r e started 
by the t i me the PCU has f e tch e d commands from DRAM. Th e PCU commands program tho 
CDU's n e xt band shadow r e gist e rs and sets the NoxtBandEnabio bit. 

If an error occurs i n th e JPEG str e am, th e JPEG d e cod e r w i l l susp e nd i ts op e rat i on, an error b i t 
30 wi l l b e s e t in th e JpgD e cStatus reg i ster and th e cor e wi l l ignore any input data and await a r e s e t 
b e for e starting d e coding again. An interrupt is sont to tho CPU by asserting cdujcu Jp e gerror 
and th e CDU shou l d then b e reset by moans of a wr i te to i ts R e set register before a n e w page 
can b e pr i nted. 

22.5.^ Read control unit 

35 Th e r e ad contro l un i t is r e sponsible for reading the compr e ssed contono data and passing it to the 
JPEG decoder via the F I FO. Tho compress e d conton e data i s read from DRAM i n s i ngl e 256 - b i t 
access e s, receiving tho data from the DIU ov e r 4 c l ock cycl e s (64 b i ts per cyc l e). The protoco l 
and timing for read access e s to DRAM is descr i b e d i n section 20.0.1 on page 1 . Read access e s 
to DRAM ar e i mp le m e nted by means of tho stat e mach i ne descr i bed in Figure 138. 
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Al l counters and flags shou l d bo ol e ared after resot. When Go trans i tions from 0 to 1 a il countors 
and flags should toko th ei r in i tia l va l u e . Wh il e th e Go b i t is set, tho stat e maohino rolios on tho 
Don e Band bit to tel l i t whether to attempt to read a band of comprossod oontono data. Whon 
DonoBand is sot, tho state machin e doos noth i ng. Wh e n DonoBand is c l oar, tho state machine 
5 cont i nues to load data i nto tho JPEG i nput F I FO up to 256 - b i ts at a timo whi l o thoro i s spaco 

ava il ab i o i n tho FIFO. Note that tho stato mach i ne has no know l edge about numb e rs of b l ocks or 
numbers of color pianos - it m e rely k ee ps tho JPEG i nput FIFO ful l by consecutiv e reads from 
DRAM. Tho D!U i s rosponsiblo for ensuring that DRAM requests are satisfied at le ast at tho peak 
DRAM r e ad bandwidth of 0.36 bits/cyc i o (s ee soction 22.3 on page 1). 
10 A modulo 4 count e r, rd__count, is use to count e ach of th o 6^ b i ts r e ooivod in a 256 bit road 

acc e ss. It is i ncremented whenev e r diu_cdu_rvQlid i s assorted. As each 64 b i t value is returned, 
i nd i cat e d by diu_cdu_rvaiid bo i ng assorted, Gurr_6ouro e _adr is compared to both ond_GOurco_Qdr 
and ondjofJbandGtoro: 

^ I f {Gurr_60urce_adnrd_oounfi equals ondjsourGo_adr, th e endjofjband contro l signal sent 

15 to tho FIFO is 1 (to signify tho e nd of the band), tho finlehodCDUBand signa l is output, and 

th e Don e Band b i t is s e t. Th e remaining 64 b i t valu e s in th e burst from tho D I U aro i gnored, 
i. e . th e y are not writt e n into tho F I FO. 

If rdjsount equals 3 and [curr_Gourco_adr,rd_coun{i doos not equal ondjGourco_Qdr, thon 

curr_GourGe_adr is updat e d to b e e i th e r GtQrt_of_bQndGtoro or curr_GourGO_qdr + 1 , 
20 d e p e nding on wh e th e r curr_Gourcojadr also equals e nd_of_bandstoro, Tho ondjofjband 

control signa l sent to the FIFO is Q. 
GurrjGOurcojadr is output to tho D I U as cdu_diu_rQdr. 

A count is kept of tho number of 6^ bit values i n th e FIFO. Whon diujGdujrvolid i s 1 and 
ignor e jdata i s 0, data is wr i tt e n to tho FIFO by assorting FlfoWr, and fffo_Gont e ntG[3:01 and 

25 fifo_wr_adr[2:0] Gxe both i ncremented. 

Whon frfo_GontontG[3:0J is greater than 0, jpgjnjstrb is ass e rted to indicato that ther e is data 
availabl e i n tho FIFO for the JPEG d e cod e r core. Tho JPEG decoder core assorts Jpgjn^rdy 
wh e n i t i s r e ady to rocoiv e data from tho FIFO. Note it is a l so possible to bypass tho JPEG 
d e coder coro by setting the BypassJpg reg i ster to 1 . I n this case data is sent directly from tho 

30 F I FO to the ha l f block double buff e r. Wh il e tho JPEG docod o r is not sta ll ed (jpg_cor e _Gtall e qua l 
0), and jpgjn_rdy (or bypass Jpg) and jpg_in_Gtrb arc both 1 , a byte of data is consumed by tho 
JPEG decoder core. fifojrdj3dr[5:0] is thon incremented to se l ect tho next byt e . Tho r e ad 
address i s byte a l igned, i .e. tho upper 3 b i ts are input as the road address for the F I FO and th e 
lower 3 b i ts ar e us e d to s ele ct a byt e from tho 64 b i ts. I f fifo_rdjadr[2:0] - 111 then th e noxt 6^ b i t 

35 va l u e i s r e ad from tho F I FO by assort i ng fffojrd, and f}fo_cont e ntG[3:0} is d e cr e m e nted. 
22.5.5 Compressed conton e FIFO 

Th e compr e ssed conton e F I FO ooncoptually i s a 6^ bit input, and 8 b i t output FIFO to account for 
tho 6 4 bit data transfers from tho DIU, and tho 8 b i t roquiromont of th e JPEG decodor. 
In r e a l ity, th e FIFO is actua l ly 8 e ntr i es doop and 65 b i ts w i d e (to accommodat e two 256 bit 
40 acc e sses), w i th bits 63 - 0 carrying data, and b i t 64 containing a 1 b i t ondjof_bond flag. When e v e r 
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64 - bit data is writt e n to th e F I FO from tho D I U, an ond_of_bQnd flag is also passod i n from tho 
r e ad contro l un i t. Th e ondjofjband b i t i s 1 i f th i s i s th e last data transf e r for tho ourront band, and 
0 if it is not th e last transfer. When e nd_of_band " 1 during an input, th e VQiidBytoeLaGtFetoh 
rog i stor is also oop i od to an imago version of tho samo. 
5 On th e JPEG decoder s i de of tho F I FO, th e r e ad addr e ss i s byte a li gn e d, i .e. tho upper 3 bits aro 
input as the read address for tho FIFO and tho l ower 3 b i ts aro us e d to s e l e ct a byto from tho 64 
bits (1 St byto oorrosponds to b i ts 7 0, second byte to bits 15 8 e tc.). if b i t 6^ i s set on the road, 
bits 63 0 conta i n th e e nd of tho bytostroam for that band, and only tho byt e s spoc i fiod by tho 
imago of Valid ByteeLastFotch aro va l id bytes to bo r e ad and pr e s e nt e d to tho JPEG d e cod e r. 

10 Not e that Valid Byt e sLaetF e tGh i s cop i od to an Imag e r e gister as i t may bo poss i b le for th e CDU to 
b e r e programm e d for th e n e xt band b e for e th e prev i ous band's compr e ss e d conton e data has 
b ee n r e ad from th e FIFO (as an add i t i ona l e ff e ct of this, th e CDU has a non problematic li m i tat i on 
i n that each band of conton e data must b e more than 4 x 6 4 b i ts, or 32 bytos, in length). 
CS6150 JPEG decoder 

15 JPEG decoder functional i ty i s i mpl e m e nted by moans of a modif i ed vers i on of tho Amphion 

CS6150 JPEG d e coder coro. Th e d e cod e r i s run at a nomina l clock sp ee d of 160 MHz. (Amphion 
have stated that tho CS6150 JPEG docodor core can run at 185 MHz in 0.1 3um t e chnology). The 
cor e i s c l ocked by jclk wh i ch a gatod vers i on of tho system clock pcik. Gating tho clock provides a 
m e chanism for stall i ng tho JPEG d e cod e r on a s i ngle color p i x e l - by pix el bas i s. Contro l of tho flow 

20 o f ou tput data Is also provid e d by tho PixOutEnab i nput to the JPEG d e cod e r. How e ver, this only 
allows sta l ling of tho output at a JPEG b l ock boundary and I s insuffic i ent for SoPEC. Thus gating 
of tho clock is emp l oyed and PixOutEnab is inst e ad ti e d high. 

Th e CS6150 decod e r automat i ca ll y e xtracts al l r e levant param e t e rs from th e JPEG byt e stream 
and uses them to control tho decod i ng of tho imago. Tho JPEG byt e str e am contains data for th e 

25 Huffman tab le s, quant i zat i on tables, restart i nt e rva l d e fin i t i on and frame and scan head e rs. Th e 
docodor parses and ch e cks the JPEG bytestream automatical l y d e t e cting and proc e ss i ng a l l the 
JPEG mark e r s e gments. After i dent i fy i ng the JPEG s e gm e nts tho docodor re directs th e data to 
tho appropriato un i ts to b e stored or proc e ss e d as appropriat e . Any e rrors d e tected i n tho 
bytostroam, apart from thoso i n tho entropy coded segments, are s i gnal l ed and, i f an error i s 

30 found, the decoder stops reading tho JPEG str e am and wa i ts to be reset. 

JPEG images must have tho i r data stor e d i n int e r l eav e d format with no subsamp li ng. Images 
l onger than 65536 l in e s ar e al l owed: thoso must have an i nitia l i magoHe i ght of 0. I f tho i mago has 
a Define Number L i nos (DNL) marker at th e e nd (normal l y necessary for standard JPEG, but not 
n e c e ssary for SoPEC's v e rsion of the CS6150), i t must b e e qual to th e tota l imago he i ght mod 

35 6 4 k or an error wi ll be generated. 

See tho CS6150 Databook [21] for moro details on how tho coro i s used, and for t i m i ng d i agrams 
of tho i nterfaces. Note that [21] does not descr i b e th e us e of th e DNL mark e r i n images of mor e 
than 6 4 k lines le ngth as this is a mod i fication to th e core. 

Th e CS6150 d e cod e r can bo bypassed by sott i ng tho BypaeeJpg register. If this rogistor i s sot, 
40 th e n the data r e ad from DRAM must bo i n the samo format as if it was produced by tho JPEG 
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dooodor: 8x8 b l ocks of pixols i n tho oorroot co l or ordor. The data i s uncompressod and i o 
thoroforo loss l oss. 

Tho fo ll owing subsoctions describe th e m e ans by wh i ch tho CS6150 intornals con bo mado 
visiblo. 

5 22,5.6.1 JPEG docodor rocot 

Tho JPEG docodor has 2 poss i ble types of resot, an asynchronous res e t and a synchronous 
cl e ar. I n SoPEC tho asynchronous reset i s connoctod to tho hardware synchronous rosot of tho 
CDU and can be activat e d by any hardware r e s e t to SoPEC (cither from ext e rnal pin or from any 
of th e wak e- up sourcos, e .g. USB activity, Wako up register timeout) or by r e s e tt i ng tho PEP 

10 section {RoeotSoction r o gist o r i n the CPR b l ock). 

Tho synchronous c l ear is connoctod to tho software r e set of th e CDU and can b e activat e d by tho 
l ow to high trans i tion of tho Go reg i ster, or a softwar e r e sot via th e Roeot regist e r. 
Th e 2 typ e s of reset diff e r, in that tho asynchronous rosot, res e ts tho JPEG core and causes tho 
cor e to e nt e r a memory in i t i al i zation sequence that tak e s 384 clock cycl e s to compl e te aft e r th e 

15 r e s e t i s d e ass e rted. Tho synchronous clear r e sets tho core, but l eaves th e m e mory as is. This has 
some i mplications for programming tho CDU. 

i n g e n e ral th e CDU should not be started (i.e. sott i ng Go to 1) until at l east 38 4 cyc le s aft e r a 
h ardware reset. I f the CDU is started boforo then, th e memory in i tialization s e qu e nc e w il l bo 
t e rminated leaving the JPEG core memory i n an unknown stat e . This i s allow e d if th e memory is 
20 to be init i aliz e d from th e i ncom i ng JPEG stream. 
22.6. 6.2 JPEG decod e r paramotor bus 

Th e d e coding parameter bus JpgDocPValuo is a 1 6 b i t port us e d to output various parameters 
e xtracted from the input data stream and current l y used by tho core. Tho A bit selector i nput 
(JpgD e cPTyp e ) determines which Intorna l parameters aro disp l ayed on th e param e t e r bus as per 
25 Tab l e 1 4 8. The data availab le on tho PVaiu e port does not contain contro l signa l s us e d by tho 
CS6150. 

Tabl e 1 4 8. Parameter bus d e finitions 



PType 


Output orientation 


PValuo 


OxQ 


FY[15:0] 


FY: number of linos in frame 






0x4- 


FX[15:0] 


FX: number of columns in frame 






0x2 


00 YMCU[13:0] 


VMCU: number of MCUs in Y direction of tho current scan 






0x3 


00 XMCU[13:0] 


XMCU: number of MCUs in X direction of the current scan 






0x4 


CsO[7:0]_TqO[1 :OLVQ 


CsO: identifier for tho first scan component 


[2:0] H0[2:0] 






TqO: quantization table identifier for the first scon oompo 
VO: vortical sampling factor for tho first scan component. 


Values "14 


HO: horizontal sampling factor for the first scan component 
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Values ""14 



Cs1[7:0LTq1[1:0LV1 



Cs1, Tq1, V1 and H1 for tho s e cond scan compon e nt. 



[2:0]_H1[2:0] 



V1. H1 undofinod i f NS<2 



0x6 



Cs2[7:0LTq2[1 :0LV2 Cs2, Tq2, V2 and H2 for tho oocond ccan oomponont. 



[2:0] _H2[2:0] 



V2. H2 undofinod i f NS<3 



0x7 



Co3[7:0LTq3[1:0LV3 



[2:0] _H3[2:0] 



Cs3, Tq3, V3 and H3 for th e s e cond scan oomponont. 
V3. H3 undofinod if NS'':1 



OxS 



CoH[15:0] 



CsH: no. of rowo in curr e nt scan 



CsV[15:0] 



CsV: no. of columns in ourront scan 



OxA 



DRI[15:0] 



DRI: restart interva l 



000_HMAX[2:0LVMA 



HMAX: max i ma l hor i zontal sampl i ng factor in frame VMAX: 



maximal vertical sampl i ng factor in fram e MCUBLK: 



MCUBLK[3:0LNS[2:0 
] 



number of blocks p e r MCU of the current scan, from 1 to 10 



NiS: numb e r of scan components in curr e nt scan, 1 -4 



22.5.6.3 JPEG d e coder Gtatue rogistor 

Th e status r e gist e r flags i ndicat e th e curr e nt stat e of th e CS6150 op e rat i on. When an error is 
d e t e ct e d during th e decoding process, tho docompross i on process i n tho JPEG dooodor is 
susp e nd e d and an int e rrupt is s e nt to th e CPU by ass e rt i ng cdujcu Jpogo/ror (gen e rat e d from 
D e cError). Th e CPU can ch e ck tho source of tho orror by read i ng tho JpgDooStatuc rogietor. Tho 
CS61 50 waits unt i l a reset process i s i nvok e d by ass e rt i ng th e hard r e s e t prst^n or by a soft r e s e t 
of th e CDU. The ind i v i dual bits of JpgDooStotuG aro sot to zero at rosot and active high to ind i oato 
an e rror condit i on as d e fin e d i n Tabl e 1 4 9. 

Noto: A DeoHfError will not b l ock th e i nput as tho core wi ll try to r e cov e r and produc e th e corr e ct 
amount of p i xol data. Th e D e cHfError I s cl e ar e d automat i cal l y at the start of tho noxt i mago and 
so no intervent i on is r e qu i red from tho usor. If any of th e oth e r e rrors occur i n th e d e cod e mod e 
th e n, fol l ow i ng tho e nror canc e l l at i on, th e cor e wi l l d i scard al l input data until th e n e xt Start Of 
I mag e (SOI) without tr i gg e ring any moro errors. 

Th e progress of tho d e cod i ng can b e mon i tor e d by obs e rving th e values of TbiDof, IDctlnProg, 
D e clnProg and JpglnProg. 

Tab l e 1 49. JPEG decoder status r e gist e r d e finit i ons 



Bit 


Name 


Description 


15 12 


TblDofry:^] 


Indicates the number of Huffman tables dofinod, 1bit/tablo. 


M— 8 


TblDof[3:0] 


Indicates the number of quantization tables defined, 1 bit/table. 








? 


DecHfError 


Set when an undofinod Huffman table symbol is roforoncod during 
decoding. 


& 


CtlError 


Sot whon an invalid SOF parameter or an invalid SOS parameter is 




dotootod. 

Also set when there is a mismatch between the DNL segment input 
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to the core and the number of linos in the input imago which have 


aireooy Been Qecooeo. Aroro r/?af oofcG ® nvptefn&ntBuon of tne 


CS6150 does not roquiro a final DNL whon tho initial cotting for 
ImagoHoight ie 0. Thie is to allow images longer than 64f( linoe. 






HtError 


Set whon an invalid DHT segment is dotocted. 


4 


QtError 




3 


PooError 


Sot when anv of DocFlaQsr6'41 aro sot 


Set when nnv dnta other than the SQI mnrker i'l df^tf^ntf^ fit thr^ 


start of a stream. 

Set when anv SQF marker is detected other than SOFQ Set if 


incomplete Huffman or quantization definition is dotoctod. 




2 


IDctlnProg 


Set when IDCT start*^ nrQce*^qinri fir*^.t rintn nf n *tenn C^innmri whnn 




1^^^^^^ Ik a ^^^.^ ^ J — . 1 J — ^ — ^ — ^ — . _ ' 


IDCT has processed tho last data of a scan. 




DoclnProg 


For each Ecan this sional Is asEerted after the SioSOS ^Stnrt nf 






Scan Segment) signal has been output from tho core and is de 
asserted when the decoding of a scan is comploto. It indioatos that 


tho Goro is in the decoding state 




Q 


JpglnProg 


Sot whon coro starts to process input data (Jpgin) and do asserted 


when decoding has been completed l.o. when the last pixel of last 
block of tho imago is output. 



22,5.7 Ha l f - b l ock buff e r intorfaco 

Sinc e tho CDU writ e s 256 b i ts (4 x 64 b i ts) to m e mory at a t i m e , it r e quir e s a doub l e buffer of 2 x 
256 b i ts at its output. This i s i mp l ement e d i n an 8 x 6 4 b i t F I FO. I t is r e quir e d to b e abl e to stal l th e 
JPEG d e cod e r cor e at I ts output on a ha l f JPEG block boundary, i.e. aft e r 32 pixels (8 bits p e r 



5 p i xe l ). Wo prov i de a m e chanism for sta lli ng tho JPEG docodor coro by gating tho clock to tho 
cor e (w i th jc l k_enab l o) when tho FIFO is fu ll . Th e output FIFO is r e sponsibl e for prov i d i ng two 
buff e r e d ha l f JPEG b l ocks to docoup i o JPEG decod i ng (road control un i t) firom wr i ting those 
JPEG b l ocks to DRAM (wr i t e control unit). Data com i ng in is i n 8 - b i t quant i t i es but data going out 
i s i n 6^ bit quantities for a sing l o co l or plane. 

10 22.5.8 Wr i t e contro l unit 

A l i ne of JPEG blocks i n 4 co l ors, or 8 l inos of d e compress e d contone dat a , is stored i n DRAM 
with tho memory arrang e ment as shown Figur e 139.Tho arrang e m e nt Is i n ord e r to opt i m i z e 
access for roads by wr i t i ng tho data so that A color compon e nts ar e stor e d tog e th e r in each 256 
b i t DRAM word. 

15 Tho CDU wr i tes 8 l i nos of data i n paral l o l but stores tho first 4 l i nes and second 4 l ines soparatoly 
i n DRAM. Th e wr i te sequ e nc e for a s i ng l o li n e of JPEG 8x8 blocks i n A co l ors, as shown in F i gur e 
139, is as fol l ows below and oorrosponds to tho order in wh i ch pixels ore output from tho JPEG 
doGodor core: 
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10 



15 



20 



25 



— block 0 , — color 0, — line 0 — in word p bito — 6 3 0, — line — 1 — is 
word p * l bito 6 3 0/ 

line 2 in word p t 2 bito 63 0, — line 

3 in word p i 3 bito 63 0^ 

— block 0 , — color — 0-; — line — 4 — in word q bito — 63 0^ — line 5 — ia 
word qil bito 63 0^ 

line 6 in word q i 2 bito 63 0, — line 

7 in word q i 3 bito 63 0, 

— block 0, — color 1, — line 0 in word p bito 127 6 4 ^ — line 1 in 
word p i l bito 12 7 6 4 , 

line — 2 — ia — word — p+S — bito — 127 64, 

line 3 in word p i 3 bito 127 64 , 

block 0 , — color 1, — lino 4 — in word q bito 127 6 4 , — line 5 in 

word q i l bito 12 7 6 4 , 

line — 6 — ifi — word — — bito — 127 64 , 

line 7 in word q i 3 bito 127 6 4 , 

repeat for block 0 color 2 , block 0 color 3 



block 1, — color 0, — line 0 in word p i 4 bito 6 3 0, — line 1 in 

word p > 5 bito 63 0, 



etc . 



block N, — color 3, — line 4 in word qi4n bito 255 192, — line 5 

in word qi 4 n i l bito 255 192, 

30 line — 6 — ia — word — q i 4n i 2 — bito — 255 

192, line 7 in word q i 4n i 3 bit 25G 102 
I n SoPEC data is writt e n to DRAM 256 b i ts at a tim e . The D I U reco i vos a 6 4 bit al i gn e d address 
from the CDU, i. e . th e l ower 2 bits indicat e which 6^ bits with i n a 256 bit location ar e b ei ng wr i tt e n 
to. With that addr e ss the DIU a l so r e c e iv e s half a JPEG b l ock (4 linos) in a single oo l or, 4 x 6 4 bits 
35 over 4 cycles. Al l acc e s s es to DRAM must bo padded to 256 bits or the bits wh i ch should not b e 
written are mask e d us i ng the i ndiv i dua l b i t wr i to i nputs of the DRAM. Wh e n writing decompr e ss e d 
contone data from the CDU. oniy 6^ bits out of tho 256 b i t access to DRAM are val i d, and the 
r e ma i n i ng b i ts of the wr i to aro masked by the D I U. This m e ans that the deoomprcssod contono 
data I s wr i tten to DRAM I n 4 baok - to - baok 6 4- b i t wr i t e masked aoo e ss e s to 4 consooutive 256 bit 
40 DRAM locat i ons/words. 
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Writ i ng of docom press e d conton e data to DRAM iG imp l omontod by the stat e mach i n e i n F i gure 
1^0. Th e CDU wr i t e s tho decompr e ss e d contono data to DRAM ha l f a JPEG b l ock at a t i m e , A x 
6A bits ovor 4 cyc le s. A l l counters and flags should be c le ared after resot. When Go trans i tions 
from 0 to 1 all count e rs and flags should take tho i r init i a l va l ue. Whilo tho Go b i t is sot, th e stat e 
5 machine ro l ios on the hQlf_block_okJtojreQci and Uno_etOfojokJto_wrlte flags to to l l it whether to 
att e mpt to wr i t e a half JPEG block to DRAM. Once tho half block buffer interface contains a ha l f 
JPEG block, th e stato machine roquoots a write access to DRAM by assorting cdu_diu_wroq and 
providing tho write addr e ss, corresponding to tho first 6^ bit va l u e to bo wr i tt e n, on cdu_diu_wQcfr 
(only th e address th o first 6 4 bit value in e ach access of ^x64 bits is issued by tho CDU. Th e D I U 

10 can generat e th e addr e sses for tho socond, th i rd and fourth 6 4 bit valu e s). Th e stat e machin e 

th e n waits to r e c ei ve an acknowledge from the D I U before i n i t i ating a r e ad of A 64 b i t values from 
the half b l ock buffer int e rface by ass e rt i ng rd_adv for A cycles. The output Gdu_diu_wvalid i s 
ass e rted in the cycle aft e r rdjadv to i ndicate to tho DIU that val i d data i s pr e s e nt on tho 
cdujdiujdatQ bus and should bo writt e n to th e specified addr e ss i n DRAM. A rd_Qdv_haff_Nock 

15 pulse is then sent to th e ha l f block buffer int e rface to indicate that th e curr e nt road buffer has 

boon road and shou l d now bo availab le to be wr i tten to again. The stat e machin e then returns to 
th e r e quest stato. 

The psoudocode bolow shows how the writ e addr e ss i s calcu l ated on a p e r clock cycio basis. 
Not e counters and flags should b e cloarod after rosot. Whon Go trans i tions from 0 to 1 a ll 
20 count e rs and flags should bo ol e arod and lwr_holfblock_adr qqIg l oaded with buffj^tartjadr ou6 
upr_hQlfblock_Qdr gets loaded with buffjGtQrt_Qdr + max^block + 1 . 

// aoaign write addroao output to DRAM 

Gdu_diu_wadr [g ; 5] = — M /t^ — corrcopondQ — fee 

25 linonumbcr^ — only firot addrcoa io 

— — ioouod — ioa? — each — DRAM 



aaoGoo . — Thuo line ia alwayo 0 . 



// The DIU gcncratGO thcoo 



bito of the addrcoo . 
30 Gdu diu wadr [4 ; 3] ° color 



if (half 1) thon 

Gdu_diu_wadr [21 s 7] — » upr_halfbloG]c_adr // for linoo 

4 7 of JPEG blook 

35 OlOG 

Gdu_diu_wadr [21:7] — = lwr_halfbloG]c_adr // for linoo 

0 3 of JPEG bloGlc 

7^7^ — updatG half, — color, — block and addrcaoco after — each DRAM 
40 write aocGoo 
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ir€ — (rd_adv_half_block =° 1) — then 

if (half °= 1) then 

half » 0 

— (color == inax_planc) — then 

Golor 1 0 

if — (block =- max_bloc3c) — then // end of writing 

a line of JPEC bloclco 

pulac v/radv S line 

block = 0 



// update half block addreoo for otart of next 

line of JPEG bloc]co talcing 

— accoiint — &€ — addrooo — wrapping — ia — circular 

buffer and 4 line offaet 

— (upr_halfbloGk_adr buf f_Gnd_adr) — then 

upr_halfblock_adr « buf f _otart_adr h 

max_block — i — t 

claif — ( upr_hal f block_adr — i — max_bloc3c — i — 1 — 

buf f_cnd_adr) — then 

upr_halfbloc3c_adr « buf f_o tart _adr 

eloe 

up r_hal f b 1 o g3 t_adr — = — upr_hal f bloclc^adr h 

max_bloGk — i — 2- 
qIoc 

block — 

upr_ha 1 f b 1 o c]c_adr — m // move to addreoo 

for lineo 4 7 for next block 
OlOG 

color — M- 

oloe 

half « 1 

i:€ — (color go maxjlanc) — then 

ar€ — (block ■■ max_block) — then // end of writing a 

lino of JPEG blocko 



// update half block addreoo for otart of next 

line of JPEG blocka taking 

/t^ — account — — addreoo — wrapping — — circular 

buffer and 4 line offaet 

iri — (lwr_halfblock_adr °° buff end adr) — then 
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lwr_hal f block_adr ^ buf f _o t ar t_adr h 

niax_bloak — i — i 

cloif — ( Iw^half block_adr — i — max_block — i — 1 — 

buf f _cnd_adr ) — then 

5 lwr_halfbloa3c_adr ■ buf f__otart_adr 

qIoc 

lwr_hal f bloGk_adr — - — lwr_hal f bloa3c_adr — h 

Tnax_block — i — 3- 

10 eise 

lwr_hal f bloGk_adr — n // move to addrcoo 

for linco 0 3 for next blocle 
22.5.9 Contono li no store i ntorfaco 

Th e contone l ino stor e i nt e rfac e i s responsib le for provid i ng the contro l ov e r th e shar e d resouroo 
15 in DRAM. Th e CDU writ e s 8 linos of data in up to A color plan e s, and th e CFU roads thorn l ino at 
a - tim e . Th e contono li n e store i nterface provid e s th e m e chanism for koop i ng track of the numbor 
of lin e s stored in DRAM, and provid e s signals so that a g i v e n l in e cannot be road from until tho 
compl e t e l i ne has b ee n written. 

The CDU writOG 8 lines of data in paral l e l but writes th e first 4 li nes and second 4 lin e s to s e parate 

20 ar e as in DRAM. Thus, wh e n th e CFU has road 4 li n e s from DRAM that aroa now b e comes fre e 
for th e CDU to wr i te to. Thus th e siz e of tho l ino store in DRAM should bo a mu l tip l e of 4 l i nos. 
Th e m i n i mum s i z e of th e l i n e stor e int e rfac e is 8 li n e s, prov i d i ng a sing le buff e r sch e m e . Typical 
s i z e s ar e 12 l in e s for a 1 .5 buff e r sch e me wh il e 16 linos prov i des a doub l e buffer schem e . 
Th e size of tho conton e li n e store is defin e d by num_buffJlnoG, A count i s k e pt of th e numb e r of 

25 l i nos stored in DRAM that ar e available to be wr i tt e n to. When Go trans i t i ons from 0 to 1 , 

NumUnosAvail i s set to th e valu e of num_buffJinoG. The CDU may on l y begin to writ e to DRAM 
as long as there i s spac e ava il able for 8 l ines, indicated when the Uno_Gtor e jokJto_writ e b i t is s e t. 
Wh e n th e CDU has f i n i shed writ i ng 8 l i nes, th o writ e control un i t sends an wradvdlin e pu l s e to th e 
contone l i ne store interfac e , and NumLin e sAvail i s d e crem e nt e d by 8. Th e wr i t e contro l unit th e n 

30 wa i ts for im 0 _store_ok_to_writ e to b e s e t again. 

If th e conton e lin e store is not e mpty (has one or moro l inos available i n i t), tho CDU w i ll ind i cate 
to tho CFU via the cdu__cfuJinoetoro_rdy signa l . Th e oc/t/_cft/_//nostor e _r(/y s i gnal i s g e n e rated by 
comparing the NumUn e sAvQii w i th tho programm e d numjbuffjinoe. As tho CFU roads a li ne 
from tho contone li ne store it wi ll pu l s e th e rdadvlino to ind i cat e that i t has r e ad a fu ll l in e from th e 

35 l i no store. NumUn e sAvail i s incr e m e nted by 1 on rece i ving a rdadvlin e pu l so. 

To e nab le running th e CDU wh i l e th e CFU i s not running th e NumLinoGAvail register can also b e 
updated via the configuration reg i ster interfac e . In this sc e nar i o th e CPU po l ls tho valu e of th e 
NumLin e sAvail r e g i st e r and overwr i t e s it to pr e vent st alli ng of th e CDU (NumLinoeAvail < 8). Tho 
CPU wi ll always have pr i ority in any updating of tho NumLin e sAvail r e g i ster. 

40 23 Contono F I FO Unit (CFU) 
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2^ Overv i ew 

Th e Conton e FIFO Un i t (CFU) io rooponsib l o for roading tho docompross e d oonton e data i ayor 
from tho circular buffer in DRAM, porforming opt i ona l co l or convors i on from YCrCb to RGB 
fol l owed by opt i ona l co l or inv e rs i on i n up to 4 color p l an e s, and thon food i ng tho data on to the 
5 HCU. Scaling of data is porformod i n tho hor i zonta l and vortical directions by th e CFU so that tho 
output to the HCU match e s th e print e r reso l ution. Non i nt e ger scaling is support e d in both th e 
horizontal and vortical dir e ctions. Typically, tho sca l e factor wil l b e th e sam e i n both dir e ctions but 
may bo programmed to b e d i ff e r e nt. 

2^73 Bandwidt h requirement s 

10 Th e CFU must r e ad th e contono data from DRAM fast enough to match th e rat e at wh i ch tho 
conton e data is consum e d by the HCU. 

Pix el s of conton e data are r e p li cat e d a X scal e factor (SF) numb e r of times in tho X d i rection and 
Y sca l e factor (SF) numb e r of t i mes i n th e Y direct i on to conv e rt th e final output to 1600 dp i . 
R e pl i cation i n th e X dir e ction is porformod at th e output of th e CFU on a p i xel by p i xe l basis while 

15 r e p l ication in th e Y d i r e ct i on is p e rformed by th e CFU r e ad i ng each lin e a number of t i mes, 

accord i ng to the Y sca l e factor, from DRAM. The HCU generates 1 dot (b i l ovo l in 6 colors) por 
syst e m clock cycl e to achieve a print sp ee d of 1 sid e per 2 seconds for full bl ee d A 4 /Lottor 
pr i nt i ng. Tho CFU output buffer noods to bo ouppllod w i th a 4 color contone p i xe l (32 bits) ovory 
SF cycles. With support for 4 co l ors at 267 pp i tho CFU must r e ad data from DRAM at 5.33 

20 bits/cyclo ^T 

2dr3 Color space conversion 

The CFU allows tho contono data to bo pass e d d i rect l y on, which w i ll bo the caso i f th e color 
repr e s e nted by each color p l an e i n th e JPEG i mag e is an availabl e ink. For e xample, the four 
co l ors may bo C, M, Y, and K, dir e ctly r e pres e nt e d by CMYK ink s . The four colors may r e pres e nt 

25 gold, m e ta ll ic gr ee n e tc. for mu l t i- SoPEC printing with e xact co l ors. 

JPEG produces b e tter compr e ss i on rat i os for a giv e n vis i bl e qual i ty when luminance and 
chrominance channels ar e separated. With CMYK, K can bo considered to b e l um i nanc e , but C, 
M and Y e ach contain lum i nance information and so wou l d n ee d to bo compr e ss e d w i th 
appropriate l um i nanc e tab le s. W e th e r e fore provide tho m e ans by which CMY can be pass e d to 

30 SoPEC as YCrCb. K do e s not n ee d co l or convers i on. 

When b e ing JPEG compressed, CMY i s typica l ly converted to RGB, th e n to YCrCb and th e n 
fina ll y JPEG compr e ss e d. At docompr e ss i on, th e YCrCb data is obta i n e d, th e n color conv e rt e d to 
RGB, and final l y back to CMY. 

Th e e xterna l R I P provides convors i on from RGB to YCrCb, spec i f i ca ll y to match tho actua l 
35 hardwar e i mp le m e ntat i on of tho inverse transform within SoPEC, as por CC I R 601 - 2 [2 4 ] exc e pt 
that Y, Cr and Cb ar e normal i zod to occupy a l l 256 l e v el s of an 8 bit binary oncod i ng. 



^32 bits / 6 cyc l os - 5.33 b i ts/oyolo 
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Tho CFU prov i des th e translat i on to e ith e r RGB or CMY. RGB i s inolud e d s i nco it is a n e cessary 
stop to produGO CMY, and some print e rs i ncreas e th e ir color gamut by including RGB Inks as w ell 
as CMYK. 

Cons e qu e ntly tho JPEG s tr e om in tho color space converter is ono of: 

5 ^ 1 color p l ane, no color spac e conv e rsion 

2 co l or plan e s, no color spac e conv e rs i on 

3 color p l anes, no co l or spaco conversion 

^ 3 co l or plan e s YCrCb, convers i on to RGB 

4 co l or p i anos, no color spac e conv e rsion 

10 ^ A co l or pianos YCrCbX, conv e rs i on of YCrCb to RGB, no color oonvorsion of X 

Tho YCrCb to RGB conv e rsion is doscr i bod i n [1 A]. Noto that if the data is non comprossod, ther o 
is no spooifio advantage i n p e rform i ng color conversion (a l though tho CDU and CFU do permit it). 
2^ Color space i nvers i on 

In addition to p e rforming optional color conv e rsion th e CFU also provides for optional bit wis e inv e rsion in 
15 up to A color plane s . This provid e s th e means by which th e conver s ion to CMY may b e finalis e d, or to may 

b e us e d to provid e planar corr e lation of th e dith e r matric e s r 

Tho RGB to CMY oonvorsion i s givon by tho ro l at i onship: 

C-255 R 

M-255 G 

20 Y-255 B 

Th e se r e lationships requir e th e pag e RIP to calculat e th e RGB from CMY as follows: 

R-255 C 

G-255 M 

B-255 Y 

25 2^ Scal i ng 

Scal i ng of p i xel data is perform e d in th e hor i zonta l and v e rt i cal dir e ctions by th e CFU so that the 

output to th e HCU match e s th e pr i nter resolution. Th e CFU supports non i nt e g e r scaling with th e 

sca le factor roprosont e d by a num e rator and a d e nominator. Only scal i ng up of th e pix el data i s 

allowed, 1.0. tho numerator shou l d bo greater than or equal to tho denom i nator. For oxampio, to 
30 sca le up by a factor of two and a half, the num e rator is programm e d as 5 and tho denominator 

programmed as 2. 

Scal i ng is i mp le m e nt e d using a count e r as doscribod i n th e ps e udocod e bo l ow. An advance pulse 
i s g e nerat e d to mov e to th e next dot (x scal i ng) or l i n e (y - scal i ng). 

35 i-f — ( count — I — denominator numerator > =» 0) — then 

count = count — i — denominator numerator 

advance « 1 

ClOG 

count ■ count — i — denominator 

40 advance ° 0 
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2^:6 Lead i n and lead out cupp i ng 

Tho JPEG algor i thm e ncod e s data on a b l ock by block basis, oach block cons i sts of 6 4 8 b i t 
p i xels (roprosenting 8 rows oach of 8 pix e ls). If th e i mage i s not a mu l t i ple of 8 pixe l s in X and Y 
then padding must be present. This padding ( e xtra pixels) wil l b e present after decod i ng of tho 
5 JPEG bytestroom. 

Extra padded l ines in th e Y direction (wh i ch may g e t sca l ed up i n the CFU) w i ll bo ignored i n tho 
HCU through th e s e tting of th e BottomMargin register. 

Extra padded pix el s in tho X dir e ction must also bo removed so that th e contone layer is clipped 
to the target page as nocossary. 

10 I n th e cas e of a mu l t i SoPEC syst e m, 2 SoPECs may bo respons i b l e for pr i nting tho same side of 
a pag e , e .g. SoPEC #1 controls printing of th e l e ft s i de of tho pag e and SoPEC #2 contro l s 
print i ng of th e r i ght s i d e of the page and shown in Figure 1 4 1 . Th e d i v i sion of th e conton e layer 
betw ee n tho 2 SoPECs may not fa l l on a 8 p i xe l (JPEG b l ock) boundary. Th e JPEG b l ock on tho 
boundary of th e 2 SoPECs (JPEG block n b el ow) will b e th e l ast JPEG b l ock i n th e lin e pr i nted by 

15 SoPEC #1 and the f i rst JPEG b l ock in tho li ne pr i nt e d by SoPEC #2. P i xels in this JPEG block not 
destined for SoPEC #1 are ignored by appropriat el y s e tting the LoadOutClipNum. Pixels i n th i s 
JPEG block not d e stin e d for SoPEC #2 must b e ignored at th e b e ginn i ng of each l i n e . Th e 
numb e r of pix e ls to b e ignored at th e start of e ach l ino i s specified by the L e adlnCfipNum r e gister. 
I t may also be the cas e that th e CDU wr i t e s out mor e JPEG b l ocks than i s requ i red to bo road by 

20 th o CFU, as shown for SoPEC #2 b ol ow. I n th i s cas e tho valu e of th e MaxBlock r e g i st e r i n the 
CDU is sot to correspond to JPEG b l ock m but th e value for the MaxBlock r e g i st e r i n th e CFU is 
sot to correspond to JPEG block m 1. Thus JPEG b l ock m is not road in by the CFU. 
Addit i onal cl i pping on conton e pix el s is r e qu i r e d wh e n th e y ar e scal e d up to th e pr i nt e r's 
resolut i on. Tho sca li ng of th e first va l id p i xe l i n the l i no is control l ed by sotting tho XetartCount 

25 register. Th e HcuUn e L e ngth r e gister defin e s th e s i z e of th e target pag e for th e contone l ay e r at 
th e pr i nt e r's r e solution and contro l s th e sca l ing of the l ast va li d p i xel in a lino cent to the HCU. 

23^7 Implementation 

Figure 1 42 shows a block d i agram of the CFU. 
23.7.1 D e fin i tions of I/O 

30 Tabl e 150. CFU port l ist and d e script i on 



Port Nam e 



Pins 



Description 



Clocks and r e s e t 



pc^k 



1- l« 



Syst e m clock 



prst_n 



Syst e m reset, synchronous activo l ow. 



PCU i nterface 



pcu_cfu_sel 



B l ock select from th e PCU. Wh e n poujofujsol i s 
h i gh both poujadr and pcu^dataout ar e va li d. 



pcu_rwn 



4- \B 



Common read/not wr i te signal from tho PCU. 



PEA23US 



355 



pcu_adr[6:2] 


4 




PCU address bus. Only 5 bits are required to 




decode the address space for this block. 




pcu_dataout[31:0] 


32 


If) 


Shared write data bus from the PCU. 






G&j DGu rdv 


1- 




It indicates the last cycle of tho access. For a write 


oyolo this means pcujdatQout has been registered 


by the block and for a read cycle this moans the data 


on cfu_pcu_datain is valid. 


cfu_pcu_datain[31 :0] 


32 




Read data bus to tho PCU. 






DIU intorfaco 


ofu_diu_rroq 


1- 


Oi it 


CFU read request, active high. A read roquost must 




bo accompaniod by a valid road addross. 




diu_cfu_rack 


1- 




Acknowlodgo from DIU, active high. Indicates that a 




road roquost has boon accopted and tho now road 


addross can be placed on tho address bus, 


cfujdiujradr. 


cfu_diu_radr[21 :53 




Out 






CFU read address. 1 7 bits wide (256 bit aligned 
word). 


diu_Gfu_rvalid 


1- 


l« 






Road data valid, active high. Indicates that valid read 


data is now on the read data bus, diu_data. 


diu_data[63:0] 


64 


In 


Read data from DRAM. 






CDU intorfaco 


cdu_GfuJinostoro__rdy 


1- 








When high indicatos that tho contone line store has 1 
or more lines available to be read by the CFU. 




cfu_Gdu_rdadvline 


1- 


Otrt 


Read line pulse, active high. Indicates that tho CFU 




has finished reading a lino of decompressed contone 


data to the circular buffer in DRAM and that line of 


tho buffer is now free. 


HCU interface 


hcu_cfu_advdot 


4- 








Informs tho CFU that the HCU has captured the pixel 
data on cfu_hcu_o[0 3]data linos and tho CFU can 


now place the next pixel on the data lines. 




Gfu_hcu_avail 


4- 


Oi it 






Indicates valid data present on cfu_hcu_c[0 3]data 

III IV^O. 


cfu_hcu_cQdata[7:0] 


3 


Otrt 






Pixel of data in contone piano 0. 


Gfu_hcu_c1 data[7:0] 


S 


Out 






Pixel of data in contono plane 1 . 


cfu_hcu_G2data[7:0] 


8 


Out 






Pixel of data in contono piano 2. 


of u_hcu_c3data [7:0] 


8 


Out 






Pixel of data in contono piano 3. 



23.7.2 Configuration rog i stors 
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The Gonfigurot i on rogiotors i n the CFU aro programmod via tho PCU i ntorfac e . Rofer to soction 
21 .8.2 on pago 1 for tho doooription of tho protoco l and t i m i ng diagrams for r e ading and writ i ng 
r e g i storo in tho CFU. Not© that sinco addr e ss e s in SoPEC aro byt e a li gned and tho PCU only 
supports 32 bit register r e ads and wr i t e s, the l ower 2 bits of the PCU addr e ss bus aro not roqu i rod 
5 to d e code tho address space for th e CFU. Wh e n reading a register that i s loos than 32 b i ts wid e 
zeros should be returned on th e upp e r unus e d bit(s) of ofu _pcujdQtain. Tho conf i gurat i on 
r e gist e rs of th e CFU aro l isted in Table 151: 
Tab le 161. CFU reg i sters 



Address 
(CFU baso+) 


Register Name 




Value 
en 

Reset 


Description 


Control registers 


-0x00 




4- 


0x4- 






A write to this register causes a reset of 
the CFU. 


0x04 


Ge 


4- 


nvn 




Writing 1 to this register starts the CFU. 


Writing 0 to this register halts tho CFU. 
When Go is deasserted the state 


machines go to their Idle states but all 


counters and configuration registers 


keep their values. 

When Go is assorted all counters aro 


reset, but configuration registers keop 




their values (i.e. they don't get resot). 
Tho CFU must bo started before tho 


CDU is started. 

This register can be read to determine 


if the CFU is running 

(4 — running, 0 stopped). 


Setup registers 


rwjn 


MaxBleck 


4^ 










Number of JPEG MCUo (or JPEG 
block oquivalents, i.e. 8x8 bytes) in a 


line — 4^ 


1 1 


BuffStartAdr[21:7] 












Points to the start of the decompressed 
contone circular buffer in DRAM, 




aligned to a half JPEG block boundary. 
A half JPEG block consists of 4 words 


of 256 bits, enough to hold 32 contone 


pixels in 4 colors, i.e. half a JPEG 
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BuffEndAdr[21:7] 



4# 



0x0000 



Po i nts to tho ond of th e docomproQQod 
oontono circular buffor i n DRAM, 



alignod to a half JPEG b l ock boundary 

(addroso i s inclusivo). 

A half JPEG block cons i sts of 4 words 



b l ock. 



of 256 b i ts, e nough to hold 32 coritone 
pixels i n 4 colors, i .e. half a JPEG 



b l ock. 



Ox4G 



<1LinoOffsot 



QxOOOQ 



DofinoG th e offs e t betwoon tho start of 



one A lino stor e to tho start of th e noxt 



A l ino storo — 1 . I n F i gure n pago3Q 4 on 
pago Error! Bookmark not defined. 



i f BufStartAdr corr e sponds to l ino 0 
block 0 then BuffStartAdr * 4UnoOffeot 



corresponds to l i n e A block 0. 
4Un e OffGet is specifi e d in units of 128 



This regist e r is r e quir e d in add i t i on to 



MaxBlock as th e numb e r of JPEG 



blocks in a lino requ i r e d by th e CFU 



may be diff e r e nt from th e number of 
JPEG blocks I n a lino written by the 



bytes, og 0 - 128 byt e s, 1 — 256 bytes 



rwon 



YCrCb2RGB 



0x0 



S e t th i s b i t to enabl e conv e rs i on from 



YCrCb to RGB. Should not b e changed 
between bands. 



9x24 



I nv e rtCo l orP l ane 



0x0 



Set th e se bits to perform bit w i so 



inv e rsion on a per color p l an e basis. 



brtO — 1 invert color plan e 0 



0 do not convert 



biti — 1 invert co l or p l an e 1 



0 do not conv e rt 



b«t2 — 1 invert color plan e 2 



0 do not conv e rt 



bit3 — 1 i nv e rt color plane 3 



Shou l d not be changed between 
bands. 
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HcuLineLength 




0x0000 


Numbor of contone pixols — 1 in a lino 






(after scaling). Equals the number of 


hcu_cfu^dotQdv pulses — 1 reooivod 


from the HCU for oaoh line of contone 




Qy2C 


LeadlnClipNum 


3 


rwo 


dumber of contone dIxqIs to be lonorod 




at the start of a lino (from JPEG block 0 


in a line) Thev aro not oaGsod to the 


output buffer to bo scaled in tho X 


% fciT 1 1 ^^^^ WX^^^IX^^^ fell ^1 ^ X 

diroctlon. 


Qy3Q 


LeadOutClipNum 


3 


0x0 


Number of contnnp niypl*^. tn ho innnroH 




at tho end of a line (from JPEG block 


MQxBlock in a line) Thov arc not 


passed to the output buffer to be scaled 


in the X direction. 




XstartCount 


3 


0x00 






ine Into the counter ucod for *^crilina in 




111 •'w x«il \^\^LIUI 1. k^iJUVJ \\J \J\Jl lU \Jl \l l\J 

scaling of tho first pixel in a line to be 


sont to tho HCU. 

This value will typically be zoro, except 


in the case where a number of dots are 


clipped on tho load in to a lino. 






XscaleNum 


3 


0x04- 


Numerator of contone scale factor in X 




direction. 




XscaieDenom 


3 


0x01- 


Denominator of contone scale factor in 




X direction. 


0x40 


YscaieNum 


3 


0x04 


Numerator of contone scale factor in Y 






direction. 


fe(44 


YscaioDonom 


3 


0x04 


Denominator of contone scale factor in 






Y direction. 



23.7.3 Storag e of decompr e ss e d contone data in DRAM 

The CFU r e ads d e compressed contone data from DRAM i n singl e 256 bit acc e s s es. JPEG b l ocks 
of decompr e ss e d contone data ar e stored in DRAM with tho m e mory arrang e m e nt as shown The 
arrangement i s in order to opt i m i ze acc e ss for reads by writing tho data so that A color 
compon e nts ar e s tor e d together i n e ach 256 bit DRAM word. The moans that th e CFU r e ads 6 4 
b i ts in 4 co l ors from a s i ngle l in e i n e ach 256 bit DRAM access. 

Th e CFU r e ads data lino at a time in 1 colors from DRAM. Th e read soquonoe, ao ohov>Ti in Figur e 113, ia 
as follow s : 
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line 0, — block 0 in word p of DRAM 
lino 0 , — block 1 in word p 1 4 of DRAM 



line 0, — block n in word p 1 4n of DRAM 

5 (repeat to read line a number of timca according to ocalc 

factor) 

line 1, — block 0 in word p * l of DRAM 

line 1, — block 1 in word p 1 5 of DRAM 

10 etc 

Th e CFU r e ads a comp l oto l i no i n up to 4 oo l ors a Y soa l o factor number of t i mes from DRAM 
b e for e i t mov e s on to r e ad th e n e xt. W l ion the CFU has fin i sh e d r e ading A linos of conton e data 
that 4 lino storo becom e s availab l o for th e CDU to wr i t e to. 
23.7.4 Decompress e d conton e buffer 

15 S i nc e th e CFU roads 256 bits (4 colors x 6 4 bits) from memory at a t i m e , it r e quires storag e of at 
least 2 X 256 bits at its Input. To al l ow for all possibl e DIU sta ll conditions the i nput buff e r is 
i ncr e as e d to 3 x 256 bits to me e t th e CFU target bandwidth r e quir e m e nts. The CFU reoeivos the 
data from the DIU over 4 clock cycles (6 4 b i ts of a s i ngle co l or per cyc l e). It is i mp l ement e d as 4 
buff e rs. Each buff e r conc e ptua ll y Is a 64 - b i t i nput and 8 bit output buffer to account for th e 6 4- b i t 

20 data transf e rs from th e DIU, and the 8 b i t output per color plan e to th e co l or spac e conv e rt e r. 

On tho DRAM side, wr_d(//f indicates tho current buffer within e ach trip le- buff e r that wr i t e s ar e to 
occur to. wr_g e / se l ects which tr i pl e buff e r to wr i te the 6 4 b i ts of data to wh e n wr_ e n I s ass e rt e d. 
On th e co l or spac e convortor side, rdLbuff indicates tho curront buffer within each tr i p l e buffer that 
reads are to occur from. Wh e n rd_ e n i s ass e rt e d a byt e i s r e ad from each of tho tr i p l e buffers i n 

25 paral lel , rd^e e i i s us e d to s e l e ct a byt e from tho 64 bits (1st byt e corr e sponds to bits 7 0, second 
byt e to bits 15 - 8 e tc.). 

Du e to th e l imitations of avai l ab l e register arrays i n I BM t e chnology, the decompressed contone 
buffer is implemented as a quadruple buffer. Wh il e this off e rs som e b e n e fits for th e CFU i t i s not 
n e cess i tat e d by th e bandw i dth requ i rem e nts of th e CFU. 

30 23.7.5 Y scal i ng contro l un i t 

Tho Y sca li ng control unit i s responsib l e for reading th e d e compressed contone data and passing 
i t to th e color space conv e rt e r v i a th e d e compr e ssed contone buff e r. Th e d e compr e ss e d conton e 
data is road from DRAM in singlo 256 bit accosses, receiving th e data from th e DIU ov e r 4 clock 
cyc l es (6 4 b i ts per cycl e ). Th e protoco l and t i ming for read acc e ss e s to DRAM i s d e scribed i n 

35 s e ct i on 20.9.1 on pag e 1 . R e ad accesses to DRAM aro i mplomontod by moans of tho stoto 
mach i ne d e scr i bed in F i gur e 144. 

Al l counters and flags shou l d be cl e ar e d aft e r reset. When Go transit i ons from 0 to 1 a ll counters 
and flags should take their i n i tia l value. Wh i le tho Go bit is sot, tho state machine re li es on tho 
lino8_ok_to_r e ad and buff_ok_to_write flags to t e l l i t wh e ther to att e mpt to read a l i ne of 
40 compressed contone data from DRAM. When iino8_okjto_r e Qd i s 0 tho state mach i n e do e s 
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nothing. Wh e n Hne8_ok_to_roQd i s 1 th e stato machino continu e s to l oad data i nto tho 
docomprossed contono buffer up to 256 bits at a t i mo wh il o th e r e i s space availablo In tho buffer. 
A b i t Is k e pt for th e status of oach 6 4- b i t buff e r: buff_QVQil[0] and buff_Qvaii[1J. I t a l so k ee ps a 
s i ng l e b i t (rdjbuff) for th e curr e nt buff e r that roads are to occur from, and a s i ngle b i t {wrjbuff) for 
5 tho current buffer that writos aro to occur to. 

buff_ok_to_wn'to equa l s '^buff_QVQii[m_bu^. When a wr_adv_buff pulzo is 
rocoivod, buff_QVQil[wr_buff] \ z sot, and wrjbuff 'xo invortod. Whonovor 
diujGfujrvQlid i s ass e rt e d, w_on is assorted to wr i to th e 6 4 b i ts of data from 
DRAM to tho buffer Go l octod by wr_Gol and wr_buff. 
10 buff_ok_to_road equals buff_avail[rd_buff]. I f th e r e is data avai l abl e i n the buff e r 

and tho output double buffer has space ava il ab l o {outbuff_ok_to_writo equa l s 1) 
then data is road from tho buffer by assorting rd_ e n and rd_6of gets i ncrem e nt e d 
to point to the next va l ue. wr_adv i s assorted in th e fol l ow i ng cycle to writ e th e 
data to th e output double buff e r of th e CFU. When f i n i sh e d r e ading tho buffer, 
15 rd_sof equals b1 1 1 and rd_ e n i s ass e rted, buff_QVGil[rd_buff} i s sot, and rdjbuff \fj 

inverted. 

Each li ne is r e ad a number of tim e s from DRAM, accord i ng to th e Y scal e factor, before the CFU 
mov e s on to start r e ading th e n e xt l in e of d e compress e d conton e data. Sca li ng to th e printh e ad 
r e solution In the Y d i r e ct i on is thus p e rformed. 

20 Tho psoudooodo b e low shows how the r e ad address from DRAM Is ca l cu l ated on a p e r clock 
cycl e bas i s. Not e a l l count e rs and flags should be cleared after reset or when Go is c l eared. 
When a 1 i s wr i tten to Go, both curr^halfblock and llnejstartJiQlfblock got l oaded w i th 
buff_Gtart_Qdn and y_Bcal e joount g e ts l oaded w i th yjscal B jdenom, Scaling i n the Y direction is 
Imp l emented by l ino ropl i cotion by re - reading l in e s from DRAM. Th e a l gorithm for non i nteger 

25 sca li ng i s descr i bed in the ps e udocod e b e low. 

// aooign read addrooo output to DRAM 

Gdu_diu_wadr [ 2 1 ; 7 ] — = curr_half bloclc 

cdu_diu_wadr [ 6 :5] = linQ[liO] 

30 

— update — block, — line, — y_o ca 1 e_coun t — aad — addrooooo — after 
each DRAM read aacooo 
i€ — (wr_adv_buff 1) — then 

if (block == tnax_bloGk) — then // end of reading a line 

35 of aontone in up to 4 colore 
bloclc « 0 

-H- — check whether to advance to next — lino of — contone 

data in DRAM 

— ( y_o cal G_count — i — y_ocale_denom y_o ca 1 G_num >° 0 ) 

40 ^he» 
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y_aGalc_GOunt — « — y_ocalc_count — i — y_ocalc_dcnom 

y_o ca 1 o_nuTn 

puloo RdAdvlino 

if — (line == 3) — then // end of reading 4 line 

5 otorc of Gontonc data 
line = 0 

// update half block addrcoa for otart of next 

line talcing aceount of 

-H- — addreoo — wrapping — ift — circular buffer — afid — 4- 

10 line offoGt 

ar€ — (Gurr_half block °° buf f_end_adr) — then 

Gurr_half block ° buf f_otart_adr 

line_otart_adr ■ buf f_otart_adr 

cloif ( (line_Qtart_adr 1 4line_of f oet ) ~ 

15 buf f_cnd_adr) ) — then 

curr_half block = buf f__otart_adr 

line_otart_adr ° buf f_otart_adr 

cloe 

curr_hal f bloclc = 1 ine_o t art_adr 1- 

20 4linc offaet 

line_otart_adr = 1 ino_o tart_adr h 

4line_of f oet 

cloe 

line — M- 

25 curr_half bloclc ° line_otart_adr 

cloe 

//re read current line from DR?^ 

y_ocalc_count ° y_ocale_GOunt — r y_OGale_denom 

Gurr_half block ■ line_otart_adr 

30 eise 

block — M 

curr_hal f block — m- 

23,7.6 Contono l ine store int e rfac e 

Tho conton e li ne stor e I nt e rfac e i s r e sponsib l e for prov i d i ng th e contro l over the shar e d r e sourc e 
35 i n DRAM. Tho CDU writes 8 lin e s of data i n up to 4 color plan e s, and th e CFU r e ads them l ine at - 
a time. The contono lino store i nt e rfac e provides th e mechan i sm for kooping track of the numb e r 
of linos stored i n DRAM, and provid e s signals so that a given l i n e cannot b e r e ad from unt i l tho 
compl e t e l i n e has b e en wr i tton. 

A count I s kopt of tho number of li nos that have b e en written to DRAM by tho CDU and ar e 
40 avai l abl e to b e r e ad by tho CFU. At start up, buffJine6_QvaH i s sot to th e 0. Th e CFU may on l y 
b e gin to r e ad from DRAM whon tho CDU has written 8 comp le t e li nes of contone data. Whon th e 
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CPU has f i n i shed wr i t i ng 8 l i n e s, i t sends an cdu_Gfu_wrQdv8lino pu l se to tho CFU, and 
buff_linoG_QVQil Is i norementod by 8. The CFU may cont i nuo read i ng from DRAM a s long as 
buffJIn e ejavQil is gr e at e r than 0. rino8jokJto_roQd is sot wh i l e buffJinoG_QVQil is groator than 0. 
When it has compl e t el y finished reading a li no of contono data from DRAM, tho Y scaling contro l 
un i t s e nds a RdAdvUno s i gnal to contono li no stor e Int e rfac e and to the CPU to freo up tho l ino i n 
th e buff e r i n DRAM, buffjlneejavall i s docromontod by 1 on rece i ving a RdAdvlino pu l so. 

23.7.7 Color Space Convert e r (CSC) 

Tho color spaco convortor cons i sts of 2 stagoo: opt i onal color convers i on from YCrCb to RGB 
fo ll owed by optional bit wise invers i on i n up to A color p i anos. 

Th e conv e rt YCrCb to RGB block takes 3 8 b i t inputs defined as Y, Cr, and Cb and outputs eithor 
th e sam e data YCrCb or RGB. Tho YCrCb2RGB parameter is set to enable tho conversion stop 
from YCrCb to RGB. I f YCrCb2RGB equa l s 0, the conversion does not take place, and the input 
pix e ls are pass e d to th e second stage. The ^th color plan e , if present, bypass e s tho convert 
YCrCb to RGB block. Not e that the latency of tho convert YCrCb to RGB block is 1 oyclo. Th i s 
latency should be e qualized for th e 4th color p l ane as it bypasses the block. 
Th e s e cond stage i nvo l ves optional b i t wise i nversion on a per color plane bas i s under the contro l 
of invortjcolor _plan e . For exampl e if the i nput i s YCrCbK, th e n YCrCb2RGB can be set to 1 to 
convert YCrCb to RGB, and invortjoolor _piano can be set to 0111 to then convert the RGB to 
CMY, leaving K unchang e d. 

I f YCrCb2RGB e qua l s Q and invort_color _plano equa l s 0000, no color convorsien or color 

i nversion will take place, so the output p i x e ls w i l l bo the same as the i nput p i x e ls. 

F i gur e ^A6 shows a b l ock diagram of the color space converter. 

Th e convert YCrCb to RGB block is an i mp l em e ntation of [1 A], A l though only 10 b i ts of 

coeff i cients are used (1 s i gn bit, 1 integer b i t, 8 fractional bits), ful l internal accuracy i s ma i nta i ned 

w i th 18 b i ts. Tho conv e rs i on is i mpl e m e nt e d as follows: 

R*"Y'H(350/256)(Cr 128) 

G*-Y (183/256)(Cr 128) (88/256)(Cb 128) 

B* - Y + (454/256)(Cb 128) 

R*, G* and B* ar e round e d to th e nearest integer and saturat e d to th e rang e 0 255 to g i ve R, G 
and B. Note that, wh il e a Roo e t results In al l zero output, a z e ro input g i ves output RGB ~ [0% 

23.7.8 X scaling control unit 

The CFU has a 2 x 32 b i t doub l e-buffer at i ts output between the color space converter and th e 
HCU. The X soa l ing control un i t performs th e sca li ng of tho contono data to th e pr i nt e rs output 



'1701s saturated too 

135.5, with round i ng bocomos 136. 

227 i s saturated to 0 
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r e so l ut i on, prov i d e s th e m e chanism for k ee p i ng track of the curront road and wr i to buffors, and 
e nsur e s that a buff e r cannot be r e ad from unt i l i t has boon wr i tten to. 

A b i t i s kopt for tho status of each 32 - bit buffer: buff_QVQil[0] and buff_avail[1J. It also koopc a 
singl e b i t (rd^buff) for th e curr e nt buff e r that r e ads are to occur from, and a single b i t {wr_buff) for 
5 tho curront buffer that wr i tes are to occur to. 

Th e output va l u e outbuff_ok_to_writ e e quals ^buff_QVQif[wr_buffI. Conton e pix e ls aro counted as 
they aro receiv e d from th e Y - scal i ng contro l un i t, i. e . wh e n wr^adv is 1 . Pix e ls in tho load i n and 
l e ad - out ar e as aro Ignor e d, i . e . they are not wr i tt e n to tho output buffer. Lead -i n and le ad - out 
clipp i ng of pixels i s i mplomontod by th e fo ll owing psoudocodo that gonoratos tho wr_en pu l se for 
10 th e output buffer. 

iri — (wradv -- 1) — then 

ani — (pixcl_count == — {inax_bloak, bill} ) — then 

pixol_GOunt = 0 

1 5 OlOQ 

pixQl_GOunt M- 

i-i — ( (pixGl_GOunt — t — 1 G a d i n_G 1 ip__num ) 

OR (pixGl_GOunt > ( {max_bloQk, bill] 

lGadout_Qlip_num) ) ) — thGn 

20 wr en ■ 0 

cloc 

wr_on = 1 

Wh e n a wr^en pulso is s e nt to th e output doub l e buffor, buff_QVQil[wr_J>uff] is sot, and wr^feuff is 
inverted. 

25 Tho output cfuJiGujavail oquals bu1f__Qvaif[rd_buffJ. When cfu_hcu_QVQH equa l s 1 , th i s indicates 
to th e HCU that data is avai l ab l e to b e r e ad from the CFU. Tho HCU responds by ass e rting 
hcujofujadvdot \o indicate that tho HCU has captured tho p i x el data on cfu_hcu_G[0 - 3]datQ l i nos 
and th e CFU can now p l ace tho n e xt p i x el on tho data l i n e s. 

Tho input pixels from tho CSC may bo sca le d a non int o gor number of t i m o s i n th e X direct i on to 
30 produce th e output pixels for tho HCU at th e pr i nthead resolution. Sca l ing i s imp l em e nt e d by p i xe l 
rep li cation. Th e a l gorithm for non integer sca li ng i s d e scribed in th e ps e udocode be l ow. Note, 
x_GCQlo_oount shou l d b e loaded with xjstartjoount after reset and at tho end of e ach li ne. This 
controls th e amount by which tho first pix el i s sca l ed by. hcujin e jength and hcu_cfujdotQdv 
contro l tho amount by wh i ch th e l ast pix e l in a lin e that i s sent to tho HCU i s sca l ed by. 

35 

3r€ — (hGu_Gfu_dotadv 1) — thon 

i-i — ( x_ocalQ_Gount — I — x_o ca 1 G__dGnom x_a c a 1 o__num — ^ — 94^ 

thon 
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x_o cal o^GOiint » x_OGalo_count 1 x_o c a 1 Q^dcnom 

x_o cal c_nuTn 
rd_cn ° 1 

ClOG 

5 x_ocalQ_count ° x_acalQ_GO\mt — i — x_o cal c_dGnom 

rd_Qn ° 0 

GlOG 

x_OGalc_count ° x_ocalc_Gount 

rd_Gn = 0 

10 Wh e n a rd_ e n pu l so i s roGGivod, buff_ovail[rd_buff] is cioarod, and rd_buff \s invertod. 

A 16 - bit counter, dot_adv_count, i s usod to k ee p o oount of the numbor of hcu_cfu_dotQdv pu l ses 
reco i vod from the HCU. If th e value of dot_Qdv_count equals hcujinojongth and a 
hGujsfujdotadv pulso is rec e ived, th e n a rdjon pulso is gonratod to pres e nt the next dot at th e 
output of tho CFU, dot_adv_count i s rosot to 0 and x_€CQio_count is l oaded w i th x_ctQrt_count. 

15 24 Loss l ess B i le v e l D e coder (LBD) 

2AA Overv i ew 

Th e Loss l ess B i lovo i D e cod e r (LBD) is r e sponsib le for decompress i ng a singl e p i ano of b i lev e l 
data. In SoPEC bi l ovol data is lim i ted to a singl e spot color (typ i ca l ly black for t e xt and lino 
graph i cs). 

20 Th e input to th e LBD is a singl e plane of bi - le ve l data, r e ad as a bitstroam from DRAM. Tho LBD 
i s programmed w i th tho start address of tho compr e ssed data, th e l e ngth of th e output 
(d e compress e d) l i no, and th e number of l in e s to d e compress. Although tho requ i rement for 
SoPEC is to be able to pr i nt t e xt at 10:1 compression, th e LBD can cope with any compr e ssion 
rat i o if tho requested DRAM acc e ss i s available. A pass through mode i s provided for 1 :1 

25 compression. Ton point p l a i n text compr e ss e s with a ratio of about 50:1 . Lossl e ss b i l evel 

compress i on across an average pag e is about 20:1 w i th 10:1 poss i blofor pages wh i ch compross 
poorly. 

The output of the LBD is a sing le piano of d e compross o d b i level data. Th e d e comprossod b i 
le v e l data is output to th e SFU (Spot F I FO Unit), and in turn booomos an i nput to th e HCU 
30 (Halftoner/Compos i tor unit) for th e n e xt stago i n tho printing pip e lin e . Tho LBD a l so outputs a 

IbdjRniGhodband control flag that i s us e d by the PCU and i s ava il abl e as an i ntonrupt to th e CPU. 
2472 Main features of LBD 

F i gure 1 AT shows a schomat i c outl i n e of the LBD and SFU. 

Tho LBD is required to support compressed i mages of up to 800 dpi. I f possible wo would like to 
35 support bi l ovo l i mages of up to 1600 dpi. Tho l ino buffers must th e r e for e be long enough to store 
a comp le te line at 1600 dp i . 

Tho PEC1 LBD is requ i red to output 2 dots/cycl e to th e HCU. This throughput capab ili ty i s 
reta i ned for SoPEC to minimiso changes to tho b l ock, although in SoPEC the HCU wiil only road 
1 dot/cycl e . Tho PEC1 LDB outputs 16 b i ts in parall e l to th e PEC1 spot buffer. Th i s i s also 
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r e ta i n e d for SoPEC. Th e r e for e th e LBD i n SoPEC can run much faster than is roqu i rod. Th i s \ o 
useful for a l low i ng s tal l s, e .g. due to band proc e ssing l atency, to bo absorbed. 
Tho LBD has a pass through mode to copo w i th loca l nogat i vo compr e ssion. Pass through mod e 
i s act i vat e d by a sp e cia l run -le ngth code. Pass through mode continues to ei th e r ond of lino or for 
a pro programmod number of bits, wh i chovor i s shorter. Tho specia l run l e ngth code i s a l ways 
executed as a run l ength cod e , follow e d by pass through. 

Tho LBD outputs d e comprossod bi lov e l data to th e N e xtLin e FIFO in tho Spot FIFO Un i t (SFU). 
Th i s stores the d o compr e ss e d l i nos in DRAM, w i th a typica l minimum of 2 l i nos stored i n DRAM, 
nominal l y 3 l in e s up to a programmabl e numb e r of lin es . Th e SFU's NoxtLinoFIFO can fi l l whilo 
the SFU wa i ts for writ e access to DRAM. Th e r e for e th e LBD must be ablo to support stal l ing at its 
output during a l in e . 

The LBD uses the prev i ous l in e in th e d e cod i ng proc e ss. This is prov i d e d by th e SFU via if s 
ProvLlnoFIFO. D e coding can sta l l i n th e LBD whi l o this F I FO waits to be filled from DRAM. 
A signa l 6fujclb_jdy I ndicates that both th e SFU's N e xtLin e FIFO and ProvLin e FIFO ar e avai l ab le 
for writ i ng and reading, r e sp e ctively. 

A configuration register In tho LBD controls whether th e f i rst lin e b ei ng docodod at the start of a 

band us e s th e pr e vious l i n e r e ad from tho SFU or usos an all O's lino instead. 

Tho li no l ength Is stored in DRAM must bo programmabl e to a va l u e groator than 128. An A 4 l i n e 

of 1382 4 dots r e qu i res 1.7Kbytos of storag e . An A3 line of 19 4 88 dots requ i res 2. 4 Kbyt e s of 

storage. 

Th e compr e ssed spot data can be road at a rate of 1 bit/cycle for pass through mod e 1 :1 
compr e ssion. 

The LBD finished band s i gnal is e xport e d to the PCU and Is additionally ava i lab le to th e GPU as 
an i nterrupt. 

2^.2.1 BI level Doood i ng In tho LBD 

Tho black b i-le v el l ay e r I s l ossloss l y compr e ss e d using Si l v e rbrook Modifi e d Group 4 (SMG4) 
comprossion wh i ch is a v e rsion of Group 4 Facsimil e compress i on [22] without Huffman and w i th 
simp l ifiod run l ength e ncodings. Tho oncod i ng ar e li st e d in Table 152 and Tab l e 153. 
Tabl e 152. Bi L e v e l group 4 facsimil e style compross i on e ncodings 





Encoding 


Description 


samo as Group 4 Facsimile 










Pass Command: aO < — b2, skip noxt two odgos 




^ 


Vertical(O): oO < — b1. color - Icolor 




440 


VerticaKI ): aO < b1 + 1 , color - icolor 




040 


\/ortical( 1): aO < — W — 1, color ~ Icolor 




110000 


Vertical(2): aO < b1 + 2, color - Icolor 






010000 






Vertical(-2): aO < b1 — 2, color - Icolor 


Unique te tWs 


100000 




implemontation 




\/ertical(3): aO < b1 + 3, color - Icolor 
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0 0 0000 



V e rt { cal( - 3): aO < b1 — 3, co l or - Icolor 



' . RL><RLr*10 



Q 



Horizonta l : aO < aO + <RL - "* + " ^RL^^ 



SMG 4 has a pass through mod e to cop e with l oca l negat i v e compr e ss i on. Pass through mod e i s 
activatod by a specia l run le ngth code. Pass through mod e cont i nu e s to ei ther ond of l i no or for a 
pre programmed number of bits, wh i chovor i s short e r. The spec i a l run l ength cod e i s a l ways 
ex e cut e d as a run l ength code, follow e d by pass through. Th e pass through escape cod e is a 
m e d i um l e ngth run - l e ngth w i th a run of l e ss than or e qual to 31 . 
Tab l e 153. Run length (RL) encodings 





Encoding 


Description 


Unique — te — this 


RRRRR1 




implementation 




Short Black Runlength (5 bits) 




RRRRR1 


Short White Runlongth (5 bits) 


RRRRRRRRRR10 






Medium Black Runlongth (10 bits) 


RRRRRRRR10 






Medium White Runlongth (8 bits) 


RRRRRRRRRR10 


Medium Black Runlongth with RRRRRRRRRR 
<>- 31 , Enter pass through 


RRRRRRRR10 






Modium White Runlongth with RRRRRRRR <- 
31 , Enter pass through 


RRRRRRRRRRRRR 


Long Black Runlongth (15 bits) 


RROO 




RRRRRRRRRRRRR 




RROO 


Long White Runlength (15 bits) 







S i nc e th e compress i on is a bitstroam, tho onood i ngo ar o road r i ght (least s i gnificant b i t) to l eft 
(most significant bit). The run le ngths g i v e n as RRRRR in Tab le 153 ar e r e ad in the sam e way 



10 (l e ast s i gn i f i cant b i t at tho r i ght to most significant bit at th e l eft). 

Th e r e i s an addit i ona l enhanc e ment to th e G 4 fax algor i thm, it re l at e s to pass through mode, it is 
poss i b l e for data to compress negative l y us i ng the G4 fax a l gorithm. On occas i ons li k e th i s it 
would b e e asier to pass th e data to th e LBD as un compr e ss e d data. Pass through mod e i s a n e w 
f e atur e that was not impl e m e nt e d i n th e PEC1 v e rsion of tho LBD. Whon tho LBD is in pass 

15 through mode the least sign i ficant bit of tho data str e am is an un compr e ssed b i t. This bit is used 
to construct th e current lino. 

To ontor pass through modo tho LBD takos advantage of th e way run le ngths can bo written. 
Usual l y if on e of tho runl e ngth pa i r is l oss than or e qua l to 31 it shou l d be encoded as a short 
runlongth. How e v e r und e r the coding schomo of Tab le it is sti l l lo ga l to writ e it as a mod i um or 
20 l ong runlongth. Tho LBD has b ee n design e d so that if a short runlength valu e is detected i n a 
mod i um runl e ngth then onoo the horizontal command conta i n i ng th i s run l ength is d e coded 
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Gomp i oto l y this w i l l t e ll th e LBD to onter pass through modo and tho bits fo l low i ng tho runlongth is 
un comprossod data. The number of b i ts to pass through is o i thor a programmod number of b i ts 
or tho ond of tho l ino which ovor comos first. Onc e th e pass through modo i s complotod tho 
current color I s th e same as tho co l or of tho last b i t of tho passed through data. 

5 2^.2.2 DRAM Access Roquiromonto 

The compressed page stor e for contono, b i l ovel and raw tag data is 2 Mbytes. Tho LBD w i ll 
acooss tho compr e ss e d pag e stor e i n single 256 bit DRAM roads. Th e LBD wil l need a 256 bit 
doubl e buff e r i n I ts i nt e rfac e to th e DIU. Th e LBD's D I U bandwidth r e qu i rem e nts ar e summar i zed 
i n Tabic 151 

10 Tabl e 15*1. DRAM bandw i dth r e quir e ments 



D i r e ct i on 



Max i mum number of 



cyc l es botwoon each 



P e ak Bandwidth 
(bits/cyc le ) 



256 - b i t DRAM access 



Av e rag e Bandwidth 
(bits/cycle) 



Read 



2561 (1:1 compression) 



1 (1:1 compression) 



0.1 (10:1 



compr e ss i on) 



15 



1 : At 1 :1 compression tho LBD requires 1 bit/cycl e or 256 b i ts every 256 cycles. 

24t3 Implementation 

2^.3.1 Definitions of l O 

Tabid 55. LBD Port L i st 



Port Nam e 



P i n* ? 

1 II 19 



D e scription 



Clocks and Resets 



Petk 



Ib SoPEC Funct i ona l clock. 



prst_n 



G l oba l res e t s i gnal. 



Bandstor e signals 



odu_ e ndofbandotoro[21 :5] 4^ 



*n 



Address of tho ond of th e current band of 



256 - bit word a l igned DRAM address. 



cdu_startofbandstore[21 :5] 



Address of tho start of th e current band 



of data. 



256 bit word a li gned DRAM address. 



Ibd finishodband 



Out 



LBD finished band signal to PCU and 
I nt e rrupt Contro lle r. 



D I U Int e rface signa l s 



l bd_d i u_rreq 



Out 



LBD — r e qu e sts — DRAM — r e ad. — A — read 
request must bo accompan i ed by a val i d 
read address. 
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Ibd diu radr[21:5] 




Out 


Read addroso to DIU 




17 bits wido (256- bit aligned word). 




diu_lbd_rack 


A- 


In 


Acknowledge from DIU that rond roGucnt 




has — been — acoeptod — and — new — read 


address can be placed on ihd diu rarir 




diu_data[63:0] 


64 


lf» 


Data from DIU to SoPEC Units. 




Fir'^t fi4 hit"* ir hifr c^-^ oce k;* x^tr^wM 


Sooond 64 -bits is bits 127:64 of 256 bit 


word 

Third 6^ bit** Ie bit-* 191 128 of 256 bit 


word. 

Fourth 6^ bits is bits 255:102 of 256 bit 


word. 


diujbd_rvand 


4. 


In 


Signal from DIU telling SoPEC Unit that 




valid road data is on tho diajdata bus 




PCU Intorface data and control signals 


pGu_addr[5:2] 


4 


In 






PCU address bus. Only A bits oro 


required to docode tho address space 
For this block. 


pcu_dataout[31 :0] 


32 


In 


Shared write data bus from tho PCU. 






lbd_pcu_datain[31 :0] 


32 


Qwt 


Read data bus from the LBD to tho PCU. 






pcu_rwn 


1- 


In 






Common road/not write signal from tho 
PGUt 


pcuJbd_sol 


4 


In 


Block soloct from the PCU. Whon 




pcuJbd_Gel is high both pcujaddr and 


pcujdQtaout are valid. 


lbd_pcu_rdy 


4 


Qtrt 


Roady — signal — te — the — PCU. — When 




Ibd jyoujrdy is high It indicates the last 


cycle of tho acooss. For a writo cyolo this 


means pcujdatQout has been rogistorod 


by the block and for a read cycio this 




moans the data on Ibd j>cujdQtain is 
y/alid. 


SFU IntorfacG data and control signals 






sfujbd_rdy 


1- 








Ready signal indicating SFU has 
previous line data 

available for reading and is also roady to 


be written 
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lbd_STU_advline 


A 

1- 




Advanoo lino signal to proviouo and noxt 




line bufforo 


lbd_sfu_pladvword 


4- 


Out 


Advanco word signal for previous lino 




buffer. 


sfujbd j3ldQta[15:0] 


4« 




Data from the previous lino buffer. 


lbd_sfu_wdQta[15:0] 


4€ 


Otrt 


Write data for next lino buffer. 


lbd_sfu_wdotavaiid 


4- 


Otrt 






Writo data valid signal for noxt lino buffer 

data. 



2 4 .3.2 Configuration R e g i sters 

Table 156. LBD Configuration R e gist e rs 



Address 
(LBD_base ^) 


Register 
Name 




Valuo 
^^^^^ 


Description 


Control registers 














4- 


0x4- 


A write to this register causes a reset of the 
This register can bo read to indlcato the rosot 


state~ 

0 - reset In progress 
1 — reset not in progress 


-0x04 


Qe 


1- 


0x0 


Writing 1 to this register starts the LBD. 




Writing 0 to this rogistor halts tho LBD. 




The Go register is reset to 0 by the LBD 


when it finishes processing a band. 

When Go Is deasserted the state machinos 


go to their idle states but all counters and 


configuration registers keep their values. 


When Go is assorted ail counters are reset, 


but configuration registers l^eep their values 


(i.e. they don't get reset). 

The LBD should only be started after tho 


SFU is started. 

This register can bo read to determine if tho 


LBD is running 

f1 — running, 0 stopped). 


Sotup registers (< 


Donstant for di 


uring pre 


)oessing 


the page) 


0x08 


LinoLongth 


46 


0x0000 


Width of expanded bi level line (in dote) 
(must bo sot greater than 128 bits). 





PEA23US 



370 



PassThrough 
Enable 



Writing 1 to this reg i ster onab l oG paoothrough 



Writing 0 to this r e gist e r disabl e s pass 
throug l i modo thoroby ma l t i ng the LBD 



compat i b le with PEC1 . 



modo. 



Th i s is the dot l ength — 1 for which pass 



DotLength 



through modo w i ll l ast. If tho end of the li no is 



r e ached — first th e n — pass through — wiW — be 
disab le d. Th e valu e written to this register 
must bo a non z e ro va l uo. 



Work regist e rs (nood to bo set up befor e proc e ss i ng a band) 



nyj/i 



rrR e adAdr[2 
(256 b i t 



align e d 
DRAM 



addr e ss) 



NoxtBandCu 



Q 



0x0000 



NoxtBandCurrRoadAdr is tho address of tho 



start of th e n e xt band of compr e ss e d b i l e vel 
data i n DRAM. 



Shadow r e gist e r wh i ch is copied to 



CurrR e adAdr when (N e xtBand Enabl e — 1 & 
Go — 0). 



0x0000 



Shadow r e gist e r which i s cop i ed to LinoG 



e sR e ma i n I ng 



Remaining wh e n (N e xtBandEnabfe — 1 & 
Go ~ 0). 



N e xtBandLin e sR e maining is th e numb e r of 
l i nos to bo decoded in th e next band of 



compress e d b i l e v el data. 



Ox4€ 



NextBandPro 



1- 



vLin e Sourco 



Shadow reg i ster which i s oopiod to Prov 
Lin e Sourc e whon (N e xtBandEnabl e — 1 & 



Go — 0). 

1 — us e th e pr e vious li n e r e ad from th e SFU 



for decoding the first li ne at th e start of tho 
next band. 



0 — ignor e th e pr e vious line road from th e 
SFU for d e cod i ng th e first l ino at the start of 



th e n e xt band (an al l O's li n e i s us e d i nst e ad). 



Qx20 



N e xtBandEn 



0x0 



I f (N e xtBandEnobio — 1 & Go — 0) th e n 



a bio 



"N e xtBandCurrR e adAdr ' m oopiod to 
CunrReadAdr, 



NoxtBandUnoeRomaining Is cop i ed 



to UneeR e moining, 

- N e xtBandPr e vLin e Sourc e i s oop i od 
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to ProvLineSource, 

Go is set, 

NextBandEnablo Is oloarod. 


To start LBD prooossing NextBandEnaUo 


should bo sot. 


Work registers (read only for oxtornal accoss) 










The current 256 bit aligned road address 






(256 bit 


wiinin tne compresseq di iovoi image ^ur\/\ivi 


aligned 
DRAM 




Qy28 




4€ 




Count of number of lines remaining to be 












PrevLineSou 


4- 




1 — uses the previous line road from tho SFU 


CCA 
1 


for decoding the first line at the start of the 


next band. 

0 — ignores the previous line read from the 


SFU for doGodIng the first line at the start of 




the next band (an all O's lino is used instead). 
Read only register. 


Qx3Q 




45 








The current dot position for writing to tho 
SFU. Read only roglstor. 


Qx3A 


FirstLineOfB 


4 




Indioatos whothor tho current lino is con 




sidered to be the first lino of the band. Road 


only register. 



2 4 .3.3 Start i ng the LBD b e tw ee n bands 

Tho LBD should bo started affor the SFU. Th e LBD is program e d w i th a start address for tho 
comprossod bi lovo l data, a docodo l ino length, tho source of the previous l ino and a count of how 
many li n e s to decod e . The LBD's NextBandEnablo b i t should th e n b e s e t (th i s w i ll sot LBD Go). 
5 Th e LBD d e cod e s a s i ng le band and th e n stops, clear i ng i t's Go b i t and issu i ng a pulso on 

IbdJiniGhodband. The LBD can th e n bo restarted for tho next band, while tho HCU cont i nues to 

proc e ss pr e viously decod e d bi leve l data from tho SFU. 

Thoro aro A mechan i sms for restarting th e LBD botwoon bands: 

a. Ibdjiniehedband causes an I nterrupt to tho CPU. Tho LBD wi l l have stopp e d and c le ar e d i t s 
10 Go b i t. Tho CPU roprograms tho LBD, typ i cally tho NextBandCunrR e adAdr, NoxtBandLinee 
Romaining and NoxtBandProvUnoSourco shadow reg i sters, and sets NoxtBandEnablo to 
restart tho LBD. 
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b. Th e CPU programs th e LBD's NoxtBandCurrRoadAdr, N e xtBandLineGRomaining, and Next - 
BandPr e vLinoSource shadow r e gist e rs and sots th e N e xtSandEnabi e flag boforo tho ond of 
tho curront band. At the e nd of th e band th e LBD cl e ars Go, N e xtBandEnablo i s alroady sot so 
the LBD restarts immediately. 
5 0. Tho PCU is programm e d so that lbd_finish e dband tr i ggers tho PCU to e x e cut e command s 
from DRAM to r e program th e LBD' s N e xtBandCurrRoadAdr, NoxtBandUnosRomaining, and 
N e xtBandPr e vLinoSource shadow r e gisters and sot NextBandEnablo to rostort the LBD. Th e 
a dv a nt a g e of th i s sch e m e is that tho CPU could process band h e ad e rs i n advanc e and store 
tho band commands in DRAM r e ady for e x e cution. 

10 4^ This is a combinat i on of b and c abov e . Th e PCU (rathor than th e CPU i n b) programs th e 

LBD's NoxtBandCurrRoadAdr, NoxtBandLin e eRemaining, and NoxtBandPrevUn e Sourc e shadow 
rog i stors and sets tho NoxtBandEnabfo flag befor e th e end of tho curr e nt band. At th e e nd of th e 
band th e LBD c le ars Go and pu l s e s ibdjRnieh e dband. N e xtBandEnablo is alr e ady set so the LBD 
r e starts i mm e diately. Simu l tan e ous l y, IbdJTinieh e dband tr i ggers tho PCU to fotch commands from 
15 DRAM. Tho LBD w i l l hav e r e start e d by tho t i me tho PCU has f e tch e d commands from DRAM. 
Th e PCU commands program th e LBD's shadow r e g i st e rs and s e ts N e xtBandEnabl o for th e n e xt 
band. 

2 4 .3. 4 Top le vo l D e scr i pt i on 

A block diagram of tho LBD is shown i n Figur e 148. 
20 The LBD Gontains tho following sub - b l ocks: 

Tab l e 157. Functional sub blocks in tho LBD 





Description 


Registers and Resets 


PCU interface and configuration registers. Also gonoratos the Go and 
the Reset signals for the rest of the LBD 




Stream Docodor 


Accesses the bi level description from tho DRAM through tho DIU inter 
Face. It docodos tho bit stream into a command with arguments, which it 




then passes to the command controller. 


Command Controllor 


Interprets the command from tho stream docodor ond provide the line fill 




unit with a limit address and color to fill the SFU Next Line Buffer. It also 


provides tho next odgo unit starting address to look for tho next odgo. 




Next Edge Unit 


Scans through the Previous Lino Buffer using its current address to find 


tho noxt odgo of a color provided by the command controllor. Tho next 


edge unit outputs this as the next current address back to tho command 


controller and sots a valid bit when this address is at the next edge. 


Lino Fill Unit 


Fills the SFU Noxt Lino Buffer with a color from its current address up to 
a limit address. Tho color and limit are provided by the command 


controllor. 
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In tho fol l owing doscript i on tho LBD docodos data for i ts ourront docode l ino but writos this data 
i nto th e SFU's noxt lino buffor. 

Naming of s i gnals and l og i ca l blocks arc tak e n from [22]. 

Th e LBD is abl e to sta ll m i d l in e should th e SFU b e unab l e to supp l y a proviouo l i no or rocoivo a 
5 curront li n e fram e due to band proc e ssing l atency. 

A l l output contro l s i gna l s from tho LBD must a l ways be va li d aftor rosot. For example, if tho LBD i o 
not curr e ntly d e coding, ibdjDfujadvlin e (to tho SFU) and IbdJTinleh e dbQnd W x W always b e 0. 

24.3.5 R e gisters and Rosoto sub block doscription 

Since tho CDU, LBD and TE a ll accoss th e page band stor o , th o y sh a r e two regist e rs that onab l o 
10 s e quential memory acc e sses to th e pag e band stor e s to bo circu l ar in nature. Tho CDU chapter 
lists th e s e two reg i st e rs. Th e register d e script i ons for th e LBD are l ist e d i n Table — r 
During in i t i a l isat i on of tho LBD, th e LinoLongth and the UnoeRomaining configurat i on va l u e s are 
writt e n to th e LBD. Tho 'Rogietore and RoGote" sub block suppli e s th e s e signals to tho other sub 
blocks in th e LBD. I n th e cas e of LineeRomaining, this numb e r Is d e oromontod for ovory li no that 
15 I s completed by the LBD. 

I f pass through is used dur i ng a band th e PaesThroughEnabl e register ne e ds to bo programmed 
and PQGGThroughDotL e ngth programmed with th e l ength of tho compressed bits in pass through 
mod e . 

Pr e vLineSource i s programmed dur i ng the in i t i a l isation of a band, if tho previous l in e suppli e d for 
20 tho f i rst l i n e is a va l id pr e vious lin o , a 1 is wr i tten to Pr e vUn e Sourco so that th e data is used. I f a 0 
is written the LBD i gnores the pr e vious line i nformat i on suppli e d and acts as if it is rece i ving ail 
z e ros for tho previous l in e regardless of what th e out of the SFU i s. 

Th e "RogiGtore and ffos e te' sub block a l so g e n e rat e s the resets used by th e rest of th e LBD and 
th e Go b i t wh i ch t el ls tho LBD that it can start requesting data from tho D I U and commence 
25 doooding of tho compr e ssed data stream. 

2 4 .3.6 Str e am Decod e r Sub b l ock Descr i ption 

Tho Stream D e coder roads th e compr e ss e d bi level imago from th e DRAM v i a tho D I U (sing l e 
accesses of 256 bits) i nto a double 256 bit F I FO. Tho barrel shift register uses the 64 - b i t word 
from tho FIFO to fill up tho empty spac e cr e at e d by th e barr el shift r e gist e r as it i s sh i fting it's 
30 cont e nts. The b i t stream is decoded into a command/argum e nts pair, wh i ch i n turn is passed to 
the command contro l ler. 

A dataflow block diagram of th e str e am d e cod e r is shown i n Figur e 1 19. 
24.3,6.1 D e codeC D e code Command 

Th e D e cod e C logic encod e s th e command from b i ts 6..0 of tho b i t str e am to output one of throo 
35 commands: SKIP, VERTICAL and RUNLENGTH. I t a l so prov i des an output to ind i cat e how many 
b i ts woro consum e d, wh i ch f ee ds back to th e barre l shift reg i ster. 

There i s a fourth command, PASS_THROUGH, which i s not encoded in b i ts 6..0, i nstead It is 
inferred in a spec i a l runlongth. I f the stream decoder detects a short runlongth valuo, i.o. a 
number loss than 31, oncoded as a medium runlength this tel l th e Str e am Decoder that once tho 
40 horizontal command conta i n i ng th i s run l ongth i s decoded comp le t el y tho LBD enters 
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PASS_THROUGH mod e . Fol l owing th e runlongth th e r e wil l bo a numb e r of bits that roprosont un 
compr e ss e d data. The LBD w i ll stay in PASS_THROUGH mode unt il all th e se b i ts havo boon 
d e cod e d succ e ssfully, this will occur onc e a programmed numb e r of bits is reach e d or tho lino 
e nds, wh i ch e v e r comes first. 
5 24.3.6.2 DocodeD D e code Dolta 

Tho DocodoD log i c docodos tho run l ength from bits 20..3 of tho bit str e am. I f DooodoC i s 
docod i ng a vortical command, it w i l l causo D e cod e D io put constants of 3 through 3 on Its output. 
Th e output d e lta is a 15 b i t number, wh i ch is generally cons i dorod to bo posit i ve, but since it 
noods to only addr e ss to 1 382^ dots for an pago and 19488 dots for an A3 pag e (of 32,768), a 
10 2's complement r e pr e s e ntation of 3, 2, - 1 wil l work correct l y for th e data pip eli ne that follows. Th i s 
un i t also outputs how many bits wore consum e d. 

In tho caso of PASS_THROUGH mod e , D e codeD pars e s th e b i ts that repres e nt th e un - 
comprossod data and this i s used by tho Lin e F ill Un i t to construct th e curr e nt l i n e frame. 
D e codoD pars e s th e b i ts at one b i t p e r c l ock cycle and pass e s th e b i t in tho loss s i gn i ficant b i t 
15 l ocation of dolta to th e li ne f i ll unit 

D e cod e D curr e ntly requir e s to know tho color of th e run length to decode it correctly as b l ack and 
white runs are encoded diff e r e nt l y. Tho str e am d e coder keeps track of th e n e xt color based on tho 
curr e nt color and th e current command. 
24. 3, 6, 3 Stat e machino 

20 This state machin o cont i nuous l y f e tch e s consecutiv e DRAM data when e ver th e r e i s e nough fr ee 
space in tho F I FO, ther e by keep i ng th e barrel shift r e gist e r ful l so it can continual l y d e code 
commands for tho command contro lle r. Not e in F i gur e 149 that e ach r e ad cyc le curr_r e ad_addr is 
compar e d to e ndjafjbandjstore. If th e two are equal, currjroodjaddr i s loaded with 
etart_of_band_Gtor e (circular m e mory addr e ssing). Oth e rwise currjroad_addr \ b s i mp l y 

25 incr e m e nt e d. etart_of_band_etor e and endjafJbandjGtoro need to bo programed so that tho 
distanc e b e tw e en them is a mult i p le of th e 256 b i t DRAM word size. 
Wh e n the stat e machino docodos a SKIP command, th e state machine prov i d e s two SKIP 
instruct i ons to tho command contro ll er. 

Th e RUNLENGTH command has two diff e r e nt run l e ngths. The two run l engths ar e pass e d to th e 
30 command contro l lor as separate RUNLENGTH instruct i ons. I n tho first i nstruction fetch, the first 
run length i s passed, and th e stat e machine selects tho DocodoD shift va l ue for the barrel sh i ft. In 
th e second i nstruction fetch from tho command control l or another RUNLENGTH instruct i on i s 
g e n e rated and th e resp e ctiv e shift va l u e i s decod e d. This i s achi e v e d by forc i ng DocodoC to 
output a second RUNLENGTH instruct i on and tho rospectivo shift va l u e i s decoded. 
35 For PASS_THROUGH mod e , the P/\SS_rH/?0(yGH command i s i ssu e d e very t i me the 

command contro ll or requests a n e w command. I t do e s this unt il all the un compr e ss e d b i ts hav e 
boon procoQSod. 

2 4 .3.7 Command Contro l ler Sub - block Descript i on 

Th e Command Contro l ler i nterpr e ts th e command from th e Str e am Decoder and provid e s th e li n e 
40 fill unit with a limit address and color to f il l the SFU N e xt L i n e Buffer, it provid e s th e n e xt e dg e un i t 
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w i th a start i ng address to l ook for th e n e xt e dg e and io rospons i bl e for dotoot i ng tho ond of l i no 
and g e n e rat i ng the oob_cc signa l that is passed to the lino fi ll unit. 

A dataflow b l ock d i agram of the command controller i s shown i n Figure 150. Noto that data 
nam e s such as oQ and bip ar e taken from [22], and thoy denote tho ref e renoo or starting 
5 changing o l omont on tho cod i ng l ino and tho first chang i ng ele m e nt on the roferenco l in e to the 
r i ght of aO and of the opposite color to a O r e sp e ct i ve l y. 

24.3,7.1 StQtomachino 

Th e fo l lowing i s an e xp l anation of a l l the stat e s that the stato mach i ne ut i l i zos. 

* ST.iRT 

10 Th i s Is the stat e that th e Command Contro l l e r ontors whon a hard or soft rosot occurs or whon Go 
has boon do - ass e rt e d. Th i s stato cannot b e l e ft unt il tho rosot has boon romovod, Go has boon 
assorted and th e NEU (N e xt Edgo Unit), the SB (Str e am Docodor) and tho SFU aro roady. 
« AW2iIT_BUFFER 

The NEU contains a buff e r memory for th e data i t r e co i vos from tho SFU. Whon tho command 
15 control l er e nt e r s this stat e th e NEU detects this and starts buff e r i ng data, the command controll e r 
i s abl e to le av e th i s stato wh e n th e stat e mach i ne in tho NEU has ontorod tho NEU_RUNNING 
stat e . Onc e this occurs tho command contro l l e r can procood to th e Py\/?SE stato. 

Hi PAUSE _CC 

During tho decode of a line i t i s possible for th e FIFO in tho stream docodor to got starved of data 
20 i f tho DRAM i s not ab le to supply r o plac o m e nt data fast enough. Additionally tho SFU can also 
stal l m i d l i no duo to band processing latency. I f oithor of those cases occurs th e LBD n ee ds to 
pause unt il tho stream docodor gets more of th e compressed data str e am from tho DRAM or th e 
SFU can r e c e iv e or deliver now fram e s. A l l of tho rema i ning states chock if edvalid go e s to zero 
(this denotes a starving of tho str e am decoder) or if 6fujbd_rdy go e s to zero and that th e LBD 
25 n ee ds to paus e . PAUSE_CC i s th e stat e that tho command contro l l e r enters to achi e v e th i s and It 
does not l eave this stato unti l cdvai/d and efujbdjrdy aro both ass e rted and tho LBD can 
recommenco docomprossing. 
w PARSE 

Onc e th e command contro l l e r e nters th o PARSE stato it usos tho i nformation that is supp l ied by 
30 • tho stroam docodor. Tho first clock cycle of tho stat e s ee s th e sdack s i gnal g e tt i ng ass e rt e d 
i nforming the stream d e cod e r that tho curr e nt register informat i on is b ei ng us e d so that i t can 
fetch tho next command. 

Wh e n i n th i s stat e th e command contro ll er can rocoivo one of four valid commands: 
a) Run l ongth or Hor i zonta l 
35 For this command tho va l ue given as d el ta is an int e ger that denotes the number of b i ts of th e 
cunrent co l or that must b e added to the current li no. 

Should tho curr e nt l ino position, oQ, bo oddod to th e delta and the resu l t bo groator than tho final 
position of the current frame being processed by th e L i no Fi ll Un i t (on l y 16 bits at a time), i t is 
n e c e ssary for th e command controller to wa i t for tho L i no Fil l Un i t (LFU) to process up to that 
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point Th e command contro l l e r changes into the WAIT_FOR_RUNLENGTH zioio whi l o th i s 

\J\J\J\JI ■ w« 

Whon tho current lino pos i tion, aO, and th e d el ta togothor e qual or e xoood the L I NE_LENGTH, 
which is programm e d during init i a l isation, thon this denotes that it i s tho ond of tho current l ino. 
5 Tho command contro lle r s i gna l s th i s to the rost of the LBD and then returns to the Sry\/?r stat e . 

b) V e rt i ca l 

When this command is rec ei ved, it to l ls th e command controll e r that, in th e previous li n e , it n ee ds 
to find a chang e from th e current color to opposit e of the current color, i .e. if tho current co l or is 
wh i te i t looks from th e current pos i tion i n tho previous l i ne for th e n e xt tim e where thoro is a 
10 change i n color from white to b l ack. It is important to note that i f a black to wh i te change occurs 
first it i s i gnor e d. 

Onc e th i s edge has boon detect e d, th e d e lta wi l l denot e wh i ch of th e v e rtica l commands to us e , 
refer to Tab l e . The dolto wi ll denot e where th e changing e l em e nt i n th e curr e nt l i no I s r e lativ e to 
th e changing e l e m e nt on tho pr e v i ous li n e , for a Vort i ca l (2) th e new changing olomont posit i on In 
15 tho current l ine will corr e spond to tho two bits e xtra from chang i ng e l e m e nt posit i on I n tho 
pr e v i ous l in e . 

Shou l d tho n e xt e dg e not be det e ct e d i n th e curr e nt frame und e r r e vi e w in th e NEU, then tho 
command controll e r enters th e WAIT_FOR_NE state and waits th e r e until tho noxt edge i s found. 

c) Skip 

20 A skip follow th e same functiona l ity as to V e rtic a l(0) commands but th e color i n the current li n e i s 
not changed as it is boon fil l ed out. The str e am decod e r suppli e s what l ooks l ik e two separate 
skip commands that tho command contro lle r tr e ats the sam e a two V e rticQi{0) commands and has 
b ee n cod e d not to chang e the curr e nt color i n this cas e . 

d) Pass Through 

25 Wh e n in pass through mode the str e am decoder supp l ies one b i t por c l ock cycle that i s uses to 
construct th e current fram e . Onc e pass through mode is completed, wh i ch i s contro lle d in the 
stream decoder, th e LBD can recommence norma l decompr e ss i on aga i n. The current color after 
pass through modo i s tho samo co l or as th e last bit in un comprossod data stream. Pass through 
mod e do e s not need an extra stat e I n tho command controi l er as each pass through command 

30 r e c ei ved from th e stream decod e r can a l ways b e proc e ss e d i n on e clock cycle. 
V W.iIT_FOR_RUNLENGTH 

As some RUNLENGTH'e can carry ov e r more than one 16 bit framo. th i s moans that tho Lino F i l l 
Un i t n ee ds longer than on e c l ock cycle to wr i t e out all the bits repr e s e nt e d by th e RUNLENGTH. 
Aft e r th e first c l ock cycio tho command contro ll er enters into tho WAIT_FOR_RUNLENGTH stat e 
35 unt il a ll th e RUNLENGTH data has be e n consumed. Onc e fin i shed and prov i d e d i t i s not th e e nd 
of tho l ino tho command contro l ler wil l return to the PARSE stato. 
W W.iITJFOR_NE 

S i milar to the RUNLENGTH commands th e vertica l commands can sometim e s not find an edg e in 
tho current 16 bit frame. After th e f i rst clock cyc l e th e command contro l ler enters tho 
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WAIT_FOR_NE stat e and romains horo unt il tho odgo i s dotootod. Prov i ded i t i s not tho ond of th e 
l ino tho command controllor will return to tho PARSE state. 
v« FINISHJLINE 

At tho ond of a l ino the command control l er needs to ho l d i ts data for th e SFU before go i ng book 
5 to th e START state. Command contro l l e r r e ma i ns in tho FiNiSH^LiNE elat e for one c l ock cycle to 
ach i eve this. 

2 4 .3.8 N e xt Edge Unit Sub block Dosoription 

Tho Noxt Edg e Unit (NEU) is responsibl e for d e t e ct i ng color changes, or edges, in tho prev i ous 
l i n e bas e d on tho curr e nt addr e ss and co l or suppli e d by tho Command Control l or. Tho NEU i s the 

10 intorfaco to th o SFU and i t buffers the provious li n e for d e t e ct i ng an e dgo. For an e dgo detect 

operation th e Command Contro l ler supplies tho current addr e ss, this typica l ly was th e l ocation of 
tho l ast edge, but it cou l d also b e the ond of a run l ength. With th e curr e nt address a color i s a l so 
suppli e d and us i ng th e s e two va l u e s th e NEU wi ll search th e pr e vious l ine for the next e dg e . I f an 
e dge is found th e NEU r e turns this locat i on to the Command Contro ll er as th e n e xt addr e ss in th e 

15 current li n e and i t sets a valid b i t to t ell the Command Contro ll er that th e e dg e has boon detected. 
Th e L i n e Fi l l Unit uses th i s resu l t to constaict the current line. Th e NEU operates on 16 - b i t words 
and it i s possibl e that ther e is no e dg e in tho curr e nt 16 b i ts in tho NEU. In th i s case tho NEU wil l 
r e quest moro words from tho SFU and wi ll koop search i ng for an edgo. It wil l cont i nue do i ng this 
unti l it finds an odgo or roaches tho o nd of tho pr e vious lin e , which is basod on tho 

20 LINE_LENGTH. A dataflow block diagram of th e N e xt Edg e un i t is shown in F i gur e 152. 
2^.3.8.1 NEU Buffer 

Th e algor i thm b ei ng e mployed for decompress i on i s bas e d on the who l e previous li n e and i s not 
del i neated dur i ng tho l ino. Howev e r th e N e xt Edgo Unit, NEU, can on l y r e c e iv e 16 b i ts at a time 
from tho SFU. This presents a prob l em for vertica l commands if th e e dg e occurs i n th e succ e ss i ve 
25 frame, but r e f e rs to a changing e l ement i n th e current frame. 

To accommodat e this the NEU works on two frames at the same time, the current frame and the 
f i rst 3 b i ts from tho succ e ssiv e frame. Th i s a l lows for the informat i on that is needed from the 
pr e vious l ino to construct tho current frame of the curr e nt lino. 

In addition to this buffering thoro is also buff e ring right after tho data i s rece i ved from th e SFU as 
30 th e SFU output is not r e g i ster e d. The curr e nt i mp le m e ntation of th e SFU takes two c l ock cyc le s 
from wh e n a request for a current li ne i s received unt i l it is returned and registered. How e v e r 
wh e n NEU r e quests a n e w frame i t noodo it en the next clock cyc l e to maintain a d e cod e d rat e of 
2 b i ts per c l ock cyc l e. A mor e d e ta il ed diagram of tho buff e r in the NEU i s s hown in F i gur e 1 53. 
Tho output of th e buffer ar e two 16 b i t vectors, use _jyrovJino_Q and u€0 jDr e vJin e Jb, that are 
35 us e d to d e tect an edge that i s re l evant to the current l in e being put tog e th e r i n the L i ne Fi ll Un i t. 
2^.3.8.2 NEU Edgo DotOGt 

Tho NEU Edg e D e t e ct block tak e s tho two 16 bit vectors suppl i ed by the buffer and based on the 
current li no posit i on in the current lino, aO, and th e current color, ed^coior, i t wi ll detect if thoro i s 
an odgo rel e vant to tho current frame. I f tho edgo i s found i t suppl ie s th e current l ine pos i tion, bip, 
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to tho command control l or and tho l in e fill un i t. The conf i gurat i on of th e odgo dotoct is shown in 
Figure 15 4 . 

Th e two v e ctors from th e buffer, ueo j>r©vjln e _a and ubo _prov_lin e _b, pass into two sub - b l ocks, 
5 tr a n6itfon_wtob and traneitionjjtow, traneition^wtob dotocts if any wh i to to black trans i tions occur 
i n th e 19 bit v e ctor suppl ie d and outputs a 10 b i t vector disp l aying th e trans i tions. trQn€ition_wtob 
i s functiona l ly th e sam e as traneitionjytow, but i t detects whito to black trans i tions. 
Th e two 19 - b i t v e ctors produced e nt e r into a mu l t i plex e r and the output of the mult i plexer is 
contro l led by colorjnou. color_nou is tho curr e nt edge transition color that th e e dge dotoct is 
10 search i ng for. 

The output of tho mu l tiplexor is masked aga i nst a 19 b i t vector, th e mask is comprised of thr ee 
parts concatenat e d together: docodo_b_o)ct, docodo_b and FIRSTJFLU_WRITE. 
Th e output of traneition_wtob (and it compl e ment trQnsition_btow) are a ll tho trans i t i ons i n th e 16 
b i t word that i s und e r review. Tho d e cod e __b is a mask g e n e rated from aO. In bit wiso torms a l l tho 
15 bits abovo and including oQ are 1 's and al l bits below aO ar e O's. Wh e n th e y are gat e d tog e th e r i t 
means that all tho transitions below aO ar e i gnor e d and tho first transition after aO is picked out as 
tho next odgo. 

Tho docodo_b block d e cod e s tho A Isb of th e current address (aO) into 16 b i t mask bits that 
contro l which of th e data b i ts aro examin e d. Table 158 shows th e truth table for this block. 
20 Table 158. Docodo b truth table 





output 


QQQQ 


1111111111111111 




0004- 


1111111111111110 






1111111111111100 




0044 


1111111111111000 






Q^QQ 


1111111111110000 




0404 


1111111111100000 








1111111111000000 




0444- 


1111111110000000 






±QQQ 


1111111100000000 






1111111000000000 








1111110000000000 








1111100000000000 








1111000000000000 








1110000000000000 








1100000000000000 








1000000000000000 
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For oaooQ when thoro is a nogat i vo v e rtica l command from tho stream d e cod e r i t i s poss i blo that 
the e dge is in the throo lowor significant bits of the next frame. Th e d e oodojbjoxt block supplies 
th e mask so that the necessary bits can be used by tho NEU to detect an odgo if present, Tab l o 
159 shows th e truth tab l e for th i s b l ock. 
5 Tab l e 159. D e codo b oxt truth tab l o 





output 


VerticaK 3) 




VerticaK 2) 


W4 


VorticoK 1) 




OTHERS 


004- 



FIRSTJFLU_WRITE i s only used in tho first framo of tho current l ino. 2.2.5 a) i n [22] rotors to 
"Process i ng th e fir s t p i cture e l e m e nt", in wh i ch it states that "Th e first starting p i ctur e ele m e nt, aO, 

10 on e ach coding lino is i maginar l ly s e t at a pos i t i on just befor e th e f i rst p i cture el e m e nt, and is 

r e gard e d as a white pictur e ele m e nt", traneition^wtob and trancition^btow oro sot up produc e th i s 
case for e very s i ng l e fram e . How e v e r i t is on l y us e d by tho NEU if it is not mask e d out. This 
occurs wh e n FIRST_FLU_WRITE is 'r which is only assorted at th e b e ginning of a l i n e . 
2.2.5 b) in [22] cov e rs tho case of "Procosc i ng the l ast picture ele m e nt", this cas e stat e s that "Tho 

15 cod i ng of tho coding l i no continu e s unti l tho posit i on of the imaginary chang i ng olomont situat e d 
aft e r th e last actua l e l e m e nt is cod e d". Th i s m e ans that no matter what the current color is th e 
NEU n oo ds to a l ways f i nd an e dg e at th e end of a l i no. This feature is used w i th negat i v e v e rtical 
commands. 

Tho vector, ondjframo, Is a "on e- hot" v e ctor that i s ass e rted during th e l ast fram e . I t a s sorts a bit 
20 i n the end of l in e position, as d e t e rmin e d by LinoLongth, and this simulates an edge i n this 

locat i on which is OR e d w i th th e trans i tion's v e ctor. The output of this, mask e d^data, is s e nt i nto 
th e oncodoB_on e _hot b l ock 
24,3.8.3 Encod e _b_ono_hot 

Th e oncodoJb_onoJiot block is the first stag e of a two stag e process that encodes tho data to 
25 d e t e rmin e the address of th e 0 to 1 transit i on. Tab le 160 l i sts th e truth tabl e outlin i ng th e 
functiona l ly requ i red by th i s b l ock. 

Tab l o 160. Encode b one hot Truth Tab l o 



Input 


output 




0000000000000000001 






XXXXXXXXXXXXXXXXX1 0 


000000000000000001 0 






XXXXXXXXXXXXXXXX1 00 


00000000000000001 00 






XXXXXXXXXXXXXXX1 000 


0000000000000001 000 






XXXXXXXXXXXXXX1 0000 


000000000000001 0000 
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XXXXXXXXXXXXX1 00000 



00000000000001 OOQQO 



XXXXXXXXXXXX1 000000 



0000000000001000000 



XXXXXXXXXXX1 0000000 



0000000000010000000 



XXXXXXXXXX1 00000000 



00000000001 00000000 



X>XXXXXXXX1 000000000 



0000000001000000000 



XXXXXXXX1 0000000000 



000000001 0000000000 



XXXXXXX1 00000000000 



0000000100000000000 



XXXXXX1 OOOOOOOQOOOO 



0000001 000000000000 



XXXXX1 0000000000000 



0000010000000000000 



XXXX1 00000000000000 



0000100000000000000 



XXX1 000000000000000 



0001 000000000000000 



XXI 0000000000000000 



001 0000000000000000 



XI 00000000000000000 



01 00000000000000000 



000000000000000000 



1 000000000000000000 



0000000000000000000 



0000000000000000000 



Tho output of oncod e _b_ono__hot Is a "on e hot" vector that w i l l d e note wher e that e dge trans i tion 
is l ocatod. I n cases of multip l e edgos, only th e first ono wil l b e picked. 
24.3.8.4 EnGod e _b_^bit 

Encodo_b_4bit is tho second stag e of th e two stage process that encodes tho data te d e t e rm i ne 
th e addr e ss of the 0 to 1 trans i tion. 

Encod e _b_4bit rece i v e s th e "on e hot" v e ctor from e ncod e _b_ono_hot and d e termines tho bit 
location that is assorted. I f there is non e pr e sent th i s means that th e re was no e dg e pr e sent in this 
frame. I f there is a b i t ass e rt e d th e b i t location i n th e vector Is conv e rt e d to a number, for e xampl e 
if b i t 0 Is ass e rt e d th e n th e number ts on e , if bit on e is assert e d then the number is ono, otc. Tho 
dolta suppl ie d to tho NEU dotorm i nos what vort i ca l command Is be i ng proc e ssed. Th e formu l a 
that Is impl e mented to r e turn b1p to the command controller is: 



for V(n) — blp a X i — n moduluol 6 

whcro K ±a the number that wao cKtractcd from tho "'ono hot 
voctor and n io the vertical command. 



24.3.8.5 Stat e machino 

Tho fo ll owing is an explanat i on of a ll tho states that the NEU state machine ut i l i z e s. 

i NEU^START 

This I s th e state that NEU enters whon a hard or soft r o s e t occurs or whon Go has b ee n do 
assert e d. This stat e can not l eft unti l th e r e set has boon removed, Go has b e en ass e rt e d and it 
detects that th e command controll e r has e nt e red it's AWAIT_BUFF sXsi B . When th i s occurs the 
NEU e nt e rs th e NEUJFILLJ3UFF state. 
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U NEU_FILL_BUFF 

B e for e any compr e ssed data can bo dooodod tho NEU noodG to fi ll up ito buffer with now data 
from th e SFU. Th e rest of th e LBD waits whi le th e NEU retrieves the first four frames from tho 
prev i ous l i n e . Onc e comp l eted I t enters tho NEUJHOLD state. 

5 m NEUJJOLD 

Tho NEU wa i ts i n this stato for ono clock cyc l e wh i le data requ e sted from tho SFU on the l ast 

accoss returns. 

W NEUJtUNNING 

NEU_RUNNING controls th e requ e sting of data from the SFU for th e romaindor of th e li n e by 
10 pu l Glng lbd_Gfu jjladvword when tho LBD n ee ds a now fram e from tho SFU. Whon th e NEU has 
received a ll tho word i t needs for tho current lino, as denoted by tho LinoLongth, tho NEU ent e rs 
tho NEU_EMPTYoicAQ. 
V NEU_EMPTY 

NEU waits i n th i s stato whil e tho rest of tho LBD f i nishes outputting th e complotod lin e to th e SFU. 
15 The NEU l e aves this state when Go g e ts doassort e d. This occurs when tho ondjofjino s i gna l is 
d e t e cted from tho LBD. 
2^.3.9 Lin e Fi l l Unit sub b l ock dosoription 

Th e Line Fil l Unit, LFU, i s rosponstblo for fi l ling tho noxt lin e buff e r i n tho SFU. The SFU roceivos 

th e data i n b l ocks of sixtoon bits. Tho LFU uses tho color and aO prov i d e d by tho Command 
20 Controllor and wh e n it has put tog e ther a comp i ote 16 bit frame, i t is written out to th e SFU. Tho 

LBD signals to th e SFU that tho data is valid by strobing the ibd_Gfu_wdQtovQlid signa l . 

Whon tho LFU is at tho e nd of th e lino for th e current l i no data i t strobes IbdjGfujotdvHno to 

indicat e to tho SFU that the end of the li ne has occurred. 

A dataflow b l ock diagram of tho l i no fil l unit is shown in FIguro 15 4 . 
25 The dataflow abov e has tho fo l lowing blocks: 

24.3.9,1 Stato Machin e 

Th e fol l owing is an exp l anat i on of a ll tho states that th e LFU stat e mach i ne util i zes. 

* LFUjST.iRT 

Th i s is tho stato that the LFU ontors whon a hard or soft r e s e t occurs or wh e n Go has boon do 
30 ass e rted. This stat e can not le ft unt il tho rosot has been r e moved, Go has b ee n asserted and i t 
d e t e cts that aO i s no longer z e ro, this only occurs once tho command contro l lor start process i ng 
data from tho N e xt Edg e Unit, NEU. 
« LFUJfEWJtEG 

LFU_NEW_REG is only entered at th e b e ginning of a now framo. I t can rema i n i n this state on 
35 subsequent cyc l es i f a whol e fram e i s comp l otod i n ono c l ock cyc l e. If th e frame is comp l otod tho 
LFU will output th e data to th e SFU w i th tho wr i te enab l e signa l . How e v e r i f a framo i s not 
complotod in on e c l ock cycl e the stat e machin e w i ll chang e to tho LFUjCOMPLETEJREG state 
to comp l ete tho r e mainder of tho frame, LFU_NEW_REG hand l es a ll tho ibd_Gfu_wdatQ wr i t e s 
and assorts ibd_Gfu_wdotQvaiid as necessary. 
40 Hi — LFU_COMPLETE_REG 
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LFUJCOMPLETEJREG fi l ls out al l th e r e main i ng parts of the framo that wero not oompiotod in 
the first clock cyo l e. The oommand controller supp l ies the aO valu e and tho color and tho otato 
machin e usos these to der i ve tho limit and oolor_Gel__16bitJfvA\ \ oh the linoJIIjdotQ block noeds 
to construct a framo. Limit is tho four lowor s i gn i ficant b i ts of aO and color_e e i_16bit_lf \fj a 16 bit 
wid e mask of edjoolor. Th e stat e machin e also maintains a ch e ck on tho upper e l ovon b i ts of oO. 
I f th e s e incr e m e nt from on e c l ock cyc l e to th e noxt that m e ans that a fram e is comp le ted and th e 
data can bo written to tho SFU. In th e ooso of tho LinoLongth b e ing r e ached tho Lino Fi l l Unit fil l s 
out th e r e ma i ning part of th e framo with the color of the l ast bit i n th e line that was d e cod e d. 
21.3.0.2 linoJilljdQtQ 

l in e _fiH_data tak e s th e limit value and th e cofor_s e l_1 6bitjf yoluQS and constructs tho current 
fram e that tho command contro l l e r and tho noxt edge un i t aro doood i ng. Tho fol l owing pseudo 
code ill ustrat e th e l ogic fo ll ow e d by tho line_fil l _data. work^efu^wdata i s export e d by th e LBD to 
the SFU as lbd_€fu_wdQtQ. 

ar€ (lfu_otatc «- LFU_START) OH (lfu_otatc 

LFU_:^n3W_RBG) then 

wor3c_afu_wdata = color_acl_16bit_lf 

ClOG 

work_ofu_wdata [ (15 limit ) — downto limit] — * 

Golor_Dcl_lGbit_lf [ (15 limit) — downto limit] 

2S Spot F I FO Un i t (SFU) 

2§7l Overv i ew 

The Spot F I FO Un i t (SFU) provides tho m e ans by wh i ch data i s transf e rr e d b e tw e en tho LBD and 
th e HCU. By abstracting tho buffer i ng m e chanism and controls from both units, the Interface i s 
cl e an between tho data user and the data gonorator. Tho amount of buffer i ng con also bo 
incr e as e d or d e creas e d without aff e cting ei th e r th e LBD or HCU. Scaling of data is performed i n 
th e horizontal and vortical d i roctions by th e SFU so that th e output to th e HCU matchos th e print e r 
r e so l ut i on. Non integ e r scaling i s supported i n both tho hor i zontal and vortica l d i r e ct i ons. 
Typ i cal l y, tho sca l e factor w il l b e the same in both d i rections but may be programm e d to b e 
diff e r e nt. 

2§t3 Main fcatures or the SFU 

The SFU r e places th e Spot L i no Buff e r I nt e rface (SLB I ) i n PEC1 . Tho spot l ino store is now 
located in DRAM. 

The SFU outputs tho prov l ouo li n e to th e LBD, stores the noxt li n e produc e d by th e LBD and 
outputs th e HCU road l i no. Each interface to DRAM Is via a feeder FIFO. Tho LBD interfaces to 
th e SFU w i th a data w i dth of 16 bits. Tho SFU i nt e rfac e s to th e HCU w i th a data w i dth of 1 b i t. 
Since tho DRAM word width i s 256 bits but th e LBD lin e l ength i s a mu l t i p le of 16 b i ts, a capab ili ty 
to flush th e l ast mult i ples of 16 b i ts at th e e nd of a tin e into a 256 b i t DRAM word s i z e is requ i r e d. 
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Thoroforo, SFU reads of DRAM words at tho ond of a l in e , which do not fill tho DRAM word, w i ll 
Q l roady bo paddod. 

A s i gnal efujbdjrdy to th e LBD Indicat e s that the SFU i s ava i lab l o for writing and roading. For tho 
first LBD l ine after SFU Go has b e en ass e rt e d, previous l i no data Is not suppl i ed unt il aft e r the first 
5 lbdjBfu_Gdvline strob e from the LBD (z e ro data i s supp l ied instead), and efujbdjrdy \o th e LBD 
i nd l oatos that th e SFU i s avai l abl e for writ i ng. lbd_Bfu_advlino tel l s th e SFU to advanc e to th e n e xt 
l i ne. Ibdjofu jyladvword t e lls tho SFU to supply tho noxt 16 bits of pr e vious lino data. Unti l tho 
numb e r of Ibdjsfu _pladvword strob e s r e c e ived is equ i va le nt to tho LBD l ine l ength, efujbdjrdy 
i nd i cat e s that the SFU i s availab l e for both road i ng and writing. Thoroaft e r it i nd i cat e s th e SFU i s 
10 availab le for wr i ting. Tho LBD should not gonorat e lbd_efu _plQdvword or Ibdjefujadvlin e strobes 
unti l efujbdjrdy i s assort e d. 

A signal efu_hcu_avail i nd i cates that tho SFU has data to supp l y to tho HCU. Another s i gnal 
hcu_efu_Qdvdot, from tho HCU, tol l s th e SFU to supp l y tho noxt dot. Th e HCU shou l d not 
g e nerate tho houjQfujadvdot signal until efu_hcu_avQif is tru e . Th e HCU can thoroforo sta l l 

15 wa i ting for th e efaJhcujavQil signa l . 

X and Y non int e ger sca li ng of tho b i l e v e l dot data is performed in tho SFU. 
At 1600 dpi the SFU requires 1 dot p e r cycl e for all DRAM channels, 3 dots per cycle in total (r e ad 
+ rood + wr i t e ). Th e r e for e tho SFU r e quires two 256 bit road DRAM acc e ss por 256 cyc le s. 1 
write accoss ev e ry 256 cyclos. A single D I U road i nterfac e wi l l b e shared for r e ad i ng th e curr e nt 

20 and previous l i nos from DRAM. 

2^ Bl LEVEL DRAM MEMORY BUfFCR B ETWEEN LBD, SFU AND HCU 

F i gur e 158 shows a b i l e v e l buffer store i n DRAM. Figure 158 (a) shows the LBD prev i ous l i no 

addr e ss read i ng aft e r th e HCU road l i ne address in DRAM. F i gur e 158 (b) shows the LBD 

previous l in e address roading before tho HCU road l i n e address in DRAM. 
25 Although tho LBD ond HCU road and write comp l et e l inos of data, th e b i le v e l DRAM buffer i s not 

li ri e bas e d. The buffering botwoon tho LBD, SFU and HCU is a F I FO of programmabl e s i ze. The 

on l y li n e bas e d concopt is that the l i no tho HCU is curr e nt l y roading cannot b e over wr i tt e n 

b e caus e it may need to b e r e r e ad for scal i ng purpos e s. 

Th e SFU i nt e rfaces to DRAM v i a thr ee FIFOs: 
30 a. Tho HCUR e adLinoFIFO wh i ch supplies dot data to tho HCU. 

b. Tho LBDNoxtLinoFIFO which wr i tes decompressed b i le vel data from the LBD. 

0. Tho LBDProvUnoFiFO wh i ch reads previous d e compressed b i lev e l data for th e LBD. 

There are four addr e ss pointers us e d to manage tho bi l eve l DRAM buffer: 

a. hGujroQdlmojrd_adr[21:6] i s tho read address i n DRAM for th e HCURoadLmoFIFO. 

35 hcu_etartr e adh'ne_Qdr[21:5] i s tho start address i n DRAM for tho current li no being road by 

tho HCURoadLinoFIFO, 
lbd_noxtfino_wr_Qdr[21:5] i s tho write address i n DRAM for tho LBDNextL'm e FIFO. 

d^ lbd_pr e viin e _rd_adr[21 :5] i s tho r e ad address i n DRAM for tho LBDProvUnoFiFO. 

Th e addr e ss point e rs must obey certa i n rul e s wh i ch indicate whether they are val i d: 
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a. hcujreQdlin e jrd_Qdr is on l y val i d if it i s road i ng oor li or i n th e li no than lbd_noxtlin e _wr_adr is 
wr i ting i.o. tho fifo is not ompty 

b. Th e SFU {lbd_n e xtlin e _wr_adr) cannot ov e rwr i te the ourront li n e that tho HCU is r e ad i ng from 
(hcujstartr e adlin e jadr) i. e . tho fifo Is not full, whon oomparod w i th tho HCU r e ad lin e point e r 

5 c. Th e LBDNextLineFlFO {ibd_n e xtUn e _wr_adr) must be wr i ting earl ie r i n th e l in e than LBD 
Pr e vLin e FIFO (Ibd jpr e vUn e jrdjoidr) Is r e ad i ng and must not overwr i te tho current l i no that tho 
HCU is r e ad i ng from i. e . th e fifo is not full wh e n compar e d to th e Pr e vUnoFifo road po i nt e r 
d. Tho LBDPr e vLin e F/FO (Ibd j>rovlino_rd_adr) can r e ad right up to th e addr e ss that LBDN e xt 
Lin e FIFO {lbd_n e xtUn e _wr odr) is wr i t i ng i. e th e fifo is not empty. 
10 e. At startup i.o. whon ofu_go i s assorted, tho po i nters aro rosot to Gtart_cfu_Qdr[21:5}, 
f. Tho address pointers can wrap around tho SFU bi lovol store area in DRAM. 
As a guidol i no, tho typ i ca l F I FO size shou l d b e a minimum of 2 l i nos stored i n DRAM, nominally 3 
l i n e s, up to a programmabl e numb e r of li nos. A larger buff e r a l lows l i nos to bo decompressed In 
advanc e . This can bo us e fu l for absorb i ng l ocal compl e x i ties In comprossod b i lovo l i mages. 

15 2^ DRAM ACCESS REQUIREMENTS 

Th e SFU has 1 r e ad i nt e rface to th e D I U and 1 writ e Interface. Th e read interface is shar e d 
betw e en th e pr e vious and current l ine r e ad FIFOs. 

Th e spot l in e stor e r e quir e s 5.1 Kbyt e s of DRAM to storo 3 A 4 lin e s. Th e SFU wil l r e ad and write 
th e spot lin e stor e in singl e 256 b i t DRAM acc e ss e s. Tho SFU will n ee d 256 bit double buff e rs for 
20 each of i ts pr e v i ous, current and next l i no interfaces. 

Th e SFU's D I U bandw i dth r e quirements aro summar i zed in Tablo 161. 
Tabl e 161. DRAM bandw i dth r e qu i r e m e nts 




1 : Two soparato roads of 1 b i t/cycle. 
25 2: Wr i t e at 1 b i t/cycl e . 

SCAUNC 

Scal i ng of b i lev e l data i s perform e d i n both the horizontal and vortica l direct i ons by tho SFU so 
that tho output to tho HCU match e s tho printer resolut i on. The SFU supports non integer scaling 
w i th th e sca l e factor reprosontod by a num e rator and a d e nominator. On l y sca l ing up of tho b i 
30 l ovol data is a ll owed, i .o. tho numerator shou l d b e gr e at e r than or equal to the d e nominator. 

Scaling i s i mpl e m e nt e d using a counter as described i n tho ps e udocod e b e low. An advance pulse 
i s generat e d to mov e to tho next dot (x scal i ng) or l i no (y scaling). 



35 



— ( count — I — denominator numerator) — then 
count « — ( count — i — denominator) numerator 
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advance = 1 

else 

Gomit a count — i — denominator 

advance ° 0 

5 — 

X sca l ing controls whether tho SFU suppli e s th e n e xt dot or a copy of the current dot when the 
HCU asserts hGU_6fujotdvdot. The SFU counts the number of hcu_sfu_advdot s i gna l s from the 
HCU. Wh e n the SFU has supp li ed an e ntire HCU l i n e of data, th e SFU w i ll e ither r e road tho 
current line from DRAM or advance to tho next li n e of HCU road data depend i ng on the 
10 programm e d Y scal e factor. 

An e xamp le of sca l ing for numerator ~ 7 and donominator - 3 i s g i von i n Tablo 162. Tho s i gnal 
advQr)co i f assert e d caus e s th e n e xt input dot to bo output on the next cycl e , otherw i se tho same 
input dot i s output 

Tab le 162. Non i nteger sca l ing examp l e for scaleNum - 7, scal e D e nom - 3 

15 



count 


advance 


dot 






Q 




A- 


3 


Q 


4- 


@ 


+ 


1- 


2 


Q 


2 


g 


4- 


2 


4- 


0 


3 


4 


4- 


3 


Q 


0 


4 


3 


9 


4 


§ 


4- 


4 


2 


0 


3 



25t6 Lead i n and lead out clipp i ng 

To account for the cas e where th e r e may b e two SoPEC dev i c e s, e ach generating its own port i on 
of a dot - l in e , tho first dot in a l ino may net bo rep li cated th e tota l scalo factor number of times by 
an i nd i vidual SoPEC. Th e dot w i ll u l timate l y b e sca le d up correct l y w i th both dev i ces doing part of 
20 the scaling, on e on its l e ad out and the other on its lead in. Sca l ed up dots on the l ead out. i.e. 
wh i ch go b e yond th e HCU l i n ele ngth, w ill be i gnored. Scaling on the lead in. i . e . of tho first va l id 
dot in the l i ne, is contro l led by s e tting th o XstartCount r e gister. 

At tho start of each l ino count i n th e psoudo code above is set to XetartCount. I f th e r e i s no le ad - 
in, XGtartCount is sot to 0 i .e. tho first value of count in Table . If there is l oad in then XotartCourit 
25 neods to be s e t to the appropr i ate va l uo of count In tho s e quence abovo. 

2§77 Interfaces between LDB, SFU and HCU 

LDB SFU Interfaces 
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Tho LBD has two interfac e s to th e SFU. Th e LBD writ e s th e n e xt l in e to th e SFU and r e ads th e 

pr e v i ous l ine from tho SFU. 

25.7.1.1 LBDNoxtUnoFlFO intorfaco 

Tho LBDNoxtLinoFiFO i ntorfaoo from tho LBD to tho SFU comprisos tho fol l owing signals: 

5 /bd_Gfu__wdatQ, 1 6 - bit wr i te data, 

^- IMjGfu_wdatQVQlid, wr i te data valid. 

^ IbdjBfujadvline, signa l indicating LDB has advanced to tho n e xt li n e . 

Tho LBD should not wr i te to the SFU unti l efujbdjrdy i s true. The LBD can th e r e for e stal l wa i ting 
for th e Qfujbdjrdy signal. 
10 25. 7.1.2 LBDProvLinoFIFO Intorfaco 

Th e LBDPr e vLinoFiFO i nt e rfac e from tho SFU to tho LBD compr i ses the fol l owing s i gnals: 
^ sfujbd _pidata, 16 b i t data. 

Th e pr e vious li n e read buffer i nt e rfac e from tho LBD to th e SDU compr i sos tho fol l ow i ng signals: 

^ Ibdjsfu _pladvword, signa l I nd i cating to the SFU to supp l y th e n e xt 16 b i t word. 

15 ^ lbdjsfu_Qdvllno, signa l ind i cat i ng LDB has advanc e d to tho n e xt lin e . 

Pr e v i ou s li ne data is not s uppli e d unti l aftor tho first Ibdjafujotdvlme strobo from tho LBD (zoro 
data i s supp l i e d i nstead). Tho LBD should not ass e rt Ibdjsfu jf>ladvword unless efujbdjrdy Is 
osGortod. 

25. 7. 1.3 Common Control Signals 
20 Gfu_lbd_rdy indicates to th e LBD that tho SFU is ovai l ablo for writing. Aftor tho first 

lbd_sfu_odvline and b e fore the numbor of Ibdjsfu __plad\/word strobos roco i ved is equ i valent to the 
LBD lino length, €fu_lbd_rdy indicat e s that tho SFU is avai l able for both reading and wr i t i ng. 
Th e r e after it i ndicates th e SFU is ava i labl e for writ i ng. 

Th e LBD shou l d not generate Ibdjsfu _pladvword or lbd_efu_Qdvlin e strobes until efujbdjrdy is 
25 assorted. 

25^7^2 SFU HCU Current L i no F I FO Intorfaco 

Th e int e rface from tho SFU to the HCU compris e s th e fo ll owing s i gna l s: 
^ efu_hcu_Gdata, 1 b i t data. 

sfuJhcujavQil, data va li d s i gna l i nd i cat i ng that th e r e is data avai l able I n tho SFU 

30 HCURoadUnoFIFO. 

Tho i ntorfaco from HCU to SFU compr i sos tho following signa l s: 
^ hcu_efuj}dvdot, ind i cating to th e SFU to supply the n e xt dot. 

Tho HCU should not gonorato tho hcu_€fu_advdot signa l unt i l efujioujavail is true. Tho HCU can 
thoroforo sta l l waiting for th e sfujhcujavail s i gnal. 

35 2§tS Implementat i on 

25.8.1 D e finit i ons of lO 

Tab l e 163. SFU Port List 



Port Namo 


Dine 


I/O 


Desoription 
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C l ocks and Resots 



SoPEC Funct i onal c l ock. 



prst_n 



In 



G l oba l res e t s i gna l . 



DIU R e ad Intorfaco signa l s 



sfu_diu_rreq 



Out 



SFU requests DRAM road. A rood roquost must 
be aocompanied by a val i d road addross. 



ifu_diu_radr[21 :5] 



Out 



R e ad addr e ss to D I U 



7 bits wide (256 bit a li gn e d word). 



diu sfu rack 



Acknowlodgo from D I U that road roquost has 



boon accoptod and now road addross can bo 



p l ac e d on 6fu_diu_radr. 



diu_data[63:0] 



64 



Data from D I U to SoPEC Un i ts. 



F i rst 6 4 bits aro b i ts 63:0 of 256 bit word. 



Second 6 4 bits oro bits 127:6^ of 256 b i t word. 



Third 64 bits are b i ts 191:128 of 256 b i t word. 



Fourth 6 4 b i ts aro b i ts 255:192 of 256 b i t word. 



diu sfu rva li d 



S i gna l from D I U t e ll i ng SoPEC Unit that val i d 
r e ad data is on the diu data bus. 



DIU Write Intorface s i gnals 



s fu_diu_wreq 



Out 



SFU requests DRAM wr i te. A writ e r e qu e st 
must be accompan i ed by a va li d write addross 



tog e ther w i th val i d writ e data and a write valid. 



sfu_d i u_wadr[21 :5] 



Out 



Writ e addross to D I U 



17 bits w i d e (256 b i t al i gn e d word). 



d i u sfu wack 



Acknowlodge from D I U that wr i t e r e quest has 



boon aoc e ptod and now wr i t e addr e ss can bo 
placed on efu_diu_wQdr. 



sfu_d i u_data[63:03 



§4 



Out 



Data from SFU to DIU. 



F i rst 6 4 bits ar e b i ts 63:0 of 256 bit word. 



Second 64 - b i ts ar e bits 127:6 4 of 256 b i t word. 



Third 64 bits aro b i ts 1 01 :1 28 of 256 bit word. 



Fourth 6 4 b i ts ar e b i ts 255:192 of 256 b i t word. 



sfu diu wvalid 



Out 



S i gnal from PEP Un i t indicating that data on 



sfu diu data i s valid. 



PCU I ntorfaco data and contro l signa l s 



pcu_adr[5:2] 



d e cod e th e addr o ss spac e for th i s block 



PCU address bus. Only 4 bits aro required to 



pcu_dataout[31 :0] 



32 



Shared write data bus from the PCU 



sfu _pcu_data i n[31 :0] 



32 



Out 



R e ad data bus from the SFU to the PCU 
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4- 




Common read/not write signal from the PCU 


pcu_rwn 




pou_sfu_sel 


4- 




Block select from the PCU Whon nrij f*fii f^fil 
ir« Jninh botl^-QCfj sdr find nnj Hfif'^nnf ^rf^ \f'ri\\fi 




sfu_pGu_rdy 


1- 


Out 


Ready signal to the PCU. Whon efu jf)cujrdy io 
high It indlcatos tho last oyclo of tho ocogss. For 


a write cvole this moans dgu dataout has boon 




registered by the block and for a road oyole this 
moans tho data on efu _pcu_datQin Is valid. 




LBD interfaoo Data and Con 


rol Signa 






sfujDa_ray 


4- 


Out 


Signal indication that SFU has previous lino 
data available and is ready to be written to. 




iPQ__STu__aQViino 


+ 


In 


Line advance signal for both next and previous 


lbd_sfu_pladvwQrd 


4- 


l« 


Advance word signal for previous lino buffer. 


Gfujbd ^idata[15:0] 


4€ 


Out 


Data from tho previous lino buffer. 


lbd_sfu_wdata[15:0] 


4€ 




Write data for noxt line buffer. 


lbd_sfu_wdatavaiid 


1- 




Write data valid signal for next lino buffer data. 


HCU Interface Data and Control Signalo 


hcu_sfu_advdot 


4- 




Signal indicating to the SFU that the HCU is 




ready to accept tho next dot of data from SFU. 




sfu_hcu_sdata 


4- 


Out 


Bi level dot data. 


sfu_hcu_avail 


4- 


Qtrt 








Signal indicating valid bi-level dot data on 
GAi_hcu_6datQ. 



25.8.2 Configurat i on R e g i st e rs 

Tabl e 164. SFU Configuration R e g i sters 



Address 






value on reset 




(SFU base*) 


register name 






dosoriptlon 


Control registers 


QxQO 




4- 


0x4- 


A writo to this register causes a reset 


of tho SFU. 

This register can be read to indicate 


the reset state: 

0 — reset In progress 

1 — reset not In progress 


QxQ4 


6e 


4- 




Writing 1 to this register starts the 




SFU. Writing 0 to this register halts 
tho SFU. 

When Go is deasserted tho state 
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IllctOI III ICO yu IXJ IMpil -iUltJ blqitJo Out cHt 


koep their values. 


reset, but configuration registers koop 




their values (i.o. tlioy don't got rosot). 
The SFU must be started boforo tho 


LBD is started. 

This register can be road to dotermino 


if the SFU is running 

(A — running, 0 — stopped). 


Setup registers (constant for during procossing tho pogo) 




QxOS 


HCUNumDot 


4€ 


QxOOOO 


Width of HCU lino (in dots). 


s 






0x0 C 


HCUDRAMW 


8 




Number of 256-bit DRAM words in a 








LBDDRAMW 


8 


QyQQ 






iNumper or ^oo oii woros in a lpu line 


^LPLi line iongin must oe ai leasi id.o 
bite). 


0x44 


StartSfuAdr[2 


4? 


0x0000 0 




(256 bit 
att§ne€> 
DRAM 
address) 




First SFU location in memory. 




(256 bit 
alignod 
DRAM 

address) 


4? 


9x0600^ 


Last SFU location in memory. 


0x4G 


XotartCount 


8 


Q^QQ 


Value to be loaded at the start of 








every line into tho counter used for 
scaling in the X diroction. Used to 


control the scaling of the first dot in a 




This value will typically equal zero, 

except in the caso where a number of 
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dots are ciippod on tine lead in to a 
lino. XstartCount must bo 
programmed to be loss than the 


XscaloNum value. 




XsoaieNum 


8 


9x04- 






Numerator of spot data soolo factor in 
X direction. 


Qx24 




3 


QyQ^ 


Denominator of spot data scale factor 
in X direction. 


rwoQ 


YscaloNum 


8 




Numerator of spot data scale factor in 




Y direction. 






8 


QyQ*! 


Denominator of spot data scale factor 




in Y direction. 






Work registers (PCU has read-only access) 




HCURoadLin 






Current address pointer in DRAM to 


eAdr[21 :5] 


HCU read data R^ad only rcni'^tcr 


(256 bit 
aligned 
DRAM 
address) 






dLinoAdr[21:5 






Start address in DRAM of lino boing 




} 

(256 bit 
aligned 
DRAM 
address) 


read by HCU buffer in DRAM. Read 


9x38 


LBDNoxtUno 


4^ 




Cunront address pointer in DRAM to 


Adr[21:5] 




(256 bit 
aligned 
DRAM 

address) 


kh^ii^ iVIIlW ViUlU. 1 \UUU Wf II 1 ^UlUiU^I 




LBDPrevLino 


47 




Current address pointer In DRAM to 


Adr[21:5] 




(266 bit 
aligned 
DRAM 
address) 


LBD road data. Read only register 



25.8.3 SFU sub - block part i tion 
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Th e SFU contains a numb e r of sub blocks: 





oesoripiion 


PCU Intorfaco 


PCU interface, configuration and status registers. Also generates the Go 




LBQ — Previous 


Contains FIFO which is read by tho LBD previous lino intorfaco. 


Lino FIFO 




LBD Noxt Lino 

PIPQ 


Contains FIFO which is written by tho LBD next line interface 


HCU Road Lino 
RFO 


Contains FIFO which is read by the HCU intorfaco. 


DWJ Intorfaco 

and Address 


Contains DIU road intorfaco and DIU write interface. Manages tho 
address pointers for tho bi lovol DRAM buffer. Contains X and Y scaling 


Generator 


logic. 



Th e various F I FO sub blocks hav e no knowlodgo of whoro in DRAM their road or wr i to data i s 
5 stored. I n this sonso th e F I FO sub b l ocks are comp le t e ly de coupled from the bi -le v e l DRAM 
buff e r. A ll DRAM address manag e ment Is c e ntra li s e d I n th e D I U I nterface and Address 
Generation sub block. DRAM acc e ss is pre ompt i vo i . e . aft e r a FIFO un i t has mad e an acc e ss 
then as soon as tho FIFO has space to road or data to write a DIU access will b e r e qu e sted 
i mm e d i at e ly. Th i s e nsures there are no unnecessary sta l ls introduced o.g. at tho end of an LBD or 
10 HCU l i no. 

Th e ro now fo ll ows a dosor i pt i on of th e SFU sub blocks. 
2&S^ PCU I ntorfaco Sub b l ock 

Th e PCU i nt e rfac e sub block provides for tho CPU to access SFU specific registers by reading or 
writing to the SFU addr e ss space. 

15 LBDProvL i noF I FO sub b l ock 

Tab l e 165. LBDPr e vL i neFiFO Add i tiona l l O Def i n i t i ons 



Port Name 


Pins 


m 


Description 


Internal Output 


plf_rdy 


4- 




Signal indicating LBDProvLineFIFO is ready to be read from. Until 




the first Ibdjsfujadvlino for a band has boon rocoivod and aftor tho 


number of reads from DRAM for a line is received is equal to 




LBDDRAMWordGy plf_jdy is always asserted. During the second 


and subsequent lines pifjrdy is deasserted whenever tho 
LBDProvLineFIFO has one word left in the FIFO.. 




DIU and Address Generation sub block Signals 


plf_diurroq 


1- 


Out 






Signal indicating the LBDPrevLineFiFO has 256 bits of data free. 
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p l f_d i urack 1- \b Acknowledgo that r e ad request has boon acooptod and plf_dturroq 

shou l d bo do assorted. 
pif_d i urdata 1- \b Data from tho D I U to LBDProvLinoFIFO. 

First 6 4- bits ore bits 63:0 of 256 b i t word. 

Second 64 bits aro bits 127:6 4 of 256 b i t word. 

Th i rd 64 - bits ar e bits 191:128 of 256 bit word. 

Fourth 6 4- bits is aro 255:192 of 256 bit word. 
p l f_d i urrva l id 1- \b Signa l ind i cating data on plfjdiurdata I s va ii5^ 

plf_diu i dle 1- Out S i gnal i nd i cating DIU state machin e is i n th e I DLE sta tei^ 



25. 3. 5. 1 Genoral Doscription 

Tho LBDPrQvUnoFIFO sub block compr i sos a double 256 bit buffer botwoon the LBD and tho 
DIU Intorfaoo and Address Generator sub - b l ock. Tho FIFO is i mp i omont e d as 8 timos 64 bit 
5 words. The F I FO is wr i tten by the D I U I nt e rfac e and Address G e nerator sub - b l ock and road by the 

I on 

Whenever 4 locations i n th e FIFO are fr e e the FIFO w i ll request 256 bits of data from tho D I U 
I nt e rfac e and Address Gen e rat i on sub b l ock by assort i ng plfjdiurreq, A signa l plfjeHuraok 
indicates that th e request has b ee n acceptod and plfjdiurroq shou l d bo do - ass e rted. 
10 Th e data is written to th e F I FO as 64 bits on pif_diurdatQ[63:0] over A clock cycl e s. Th e signa l 

plt_diurvQlid i ndicates that tho data returned on plfjdiurdQto[63:0] is valid, plfjdiurvalid is used to 
g e n e rate tho FIFO wr i te onab lo , writ e _ e n, and to incr e m e nt th e FIFO write address, 
writo_Qdr[2:0]. If tho LBDProvLinoFIFO st i l l has 256 bits froe then plf_diurr e q should bo assorted 
aga i n. 

15 Th e D I U Interface and Address Gonorotion sub block hand l es a l l address po i nter managem e nt 
and D I U int e rfac i ng and d e c i d e s whether to acknowl e dg e a requ e st for data from tho FIFO. 
Th e stat e d i agram of tho LBDProvLinoFIFO D I U I nt e rfac e i s shown in Figur e 163. I f sfujgo is 
d e assert e d th e n tho stat e- machin e returns to i ts idio state. 

Tho LBD roads 16 bit wid e data from th e LBDProvLinoFIFO on sfujbd _pldata[16:0]. 

20 IbdjBfu _jylQdvword from tho LBD t e l l s the LBDProvLin o FIFO to supply th e next 16 b i t word. The 
F I FO contro l l og i c generat e s a s i gnal word_s e loct wh i ch selects tho next 16 - bits of tho 6 4 b i t 
FIFO word to output on sfujbd jjldota[15:0]. Whon tho entire curr e nt 6 4 -bit F I FO word has boon 
r e ad by th e LBD Ibdjsfu jpladvword will cause tho n e xt word to bo popp e d from the F I FO. 
Pr e vious li n e data is not supp lie d unti l after the first ibdjsfujadvlino strob e from the LBD after 

25 efu_go is ass e rted (zero data is supp l ied i nstead). Unt il tho f i rst Ibdjsfujo t dvlino strobo after 
Gfujgo IbdjGfu _pladvword strobes aro i gnored. 

Th e LBDPr o vLin o FIFO control log i c uses a counter, pl_count[7:0l to counts th e numb e r of DRAM 
r e ad access e s for th e li n e . When tho pljsount counter i s equa l to the LBDDRAMWorde, a 
compl e t e li n e of data has b e en road by tho LBD the pifjrdy is sot h i gh, and tho counter is r e s e t. I t 
30 r e mains h i gh unt il tho next IbdjGfuj^dvlino strobe from th e LBD. On receipt of tho Ibdjsfujo t dvlino 
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strobe tho remain i ng data in th e 256 b i t word in the F I FO i s i gnor e d, and th e FIFO roadjadr i o 
round e d up i f r e qu i r e d. 

Th e LBDPr e vLin e FIFO g e n e rat e s a signa l pIfjrdyXo indicato that i t has data avai l ab le . Unt i l the 
fir s t ibd_efu_advlin B for a band has b ee n r e ceived and after tho numbor of DRAM roads for a li no 
5 I s e qua l to LBDDRAMWorde, pffjdy is always assert e d. During th e second and subs e quent li nos 
plfjrdy is d e ass e rt e d whonovor tho LBDProvLinoFIFO has ono word le ft. 
Tho last 256 - bit word for a lino road from DRA I VI can contain e xtra padding which shou l d not bo 
output to th e LBD. Th i s i s b e caus e th e numb e r of 16 bit words p o r line may not fit exactly i nto a 
256 - bit DRAM word. When the count of tho numbor of DRAM reads for a lin e i s e qual to 

10 lbd_drQm_wordG the LBDProvLinoFIFO must adjust th e F I FO writ e addr e ss to po i nt to tho noxt 
256 b i t word boundary i n th e F I FO for tho n e xt lin e of data. At tho ond of a l i n e th e r e ad address 
must round up th e n e arest 256 bit word boundary and ignor e th e r e ma i n i ng 16 b i t words. Th i s can 
bo achiovod by cons i dering tho F I FO road addr e ss, r e Qd_jadr[2:0l wi ll require 3 bits to address 8 
l ocations of 6 4 bits. The noxt 256 - b i t a li gned address i s ca l culat e d by inv e rting th e MSB of tho 

15 foaoLadr and sott i ng a ll other bits to 0. 



— (rQad_adr [1 ; 0] — / « bOO AND Ibd ofu advlino 



1) then 



read adrEltO] 



road adr[2] 



- road adr[23 



20 2&r&S LBDNoxtLinoFIFO sub block 

Tab le 166. LBDNoxtLineF I FO Add i tional I O D e finit i on 



Port Nam e Pins UO D e scr i pt i on 



LBDN e xtL i n e FIFO Interfaco S i gnals 



n l f_rdy 



Out S i gna l ind i cat i ng LBDN e xtLin e FIFO i s r e ady to b e wr i tten to i . e . th e r e 



is space in th e F I FO. 



DIU and Address G o n o ration sub - b l ock S i gna l s 



n l f_d i uwroq 



Out Signa l i nd i cat i ng tho LBDNoxtLinoFIFO has 256 b i ts of data for wr i t i ng 



to tho D I U. 



n i f diuwack 



Acknowlodgo from D I U that wr i te roquost has b ee n accoptod and 
wr i t e data can bo output on nifjdiuwdato together w i th nIfjdiuwvQiid. 



nIf d i uwdata 



Out 



Data from LBDNoxtLin e FIFO io D I U I nterfaco. 



F i rst 6 4 b i ts i s b i ts 63:0 of 256 b i t word 



S e cond 6 4 bits is b i ts 127:6 4 of 256 bit word 



Third 61 b i ts is bits 101:128 of 256 bit word 



Fourth 64 b i ts is bits 255:192 of 256 bit word 



n I f d i uwvalid 



S i gnal i nd i cat i ng that data on wlf_diuwdatQ i s val i d. 



25. 8. 6. 1 Gonoral Doeoription 
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Th e LBDN e xtLineFIFO sub block compris e s a double 256 - b i t buffer betw e en tho LBD and th e 
D I U i nterface and Addr e ss Generator sub b l ock. Tho FIFO i s i mp le mentod as 8 times 6 4 b i t 
words. Th e FIFO is wr i tten by tho LBD and r e ad by th e D I U I ntorfaco and Address G e n e rator. 
Wh e n e ver 4 locations in tho F I FO ar e ful l th e F I FO wil l request 256 bits of data to be wr i tt e n to tho 
5 DIU Interfac e and Addr e ss G e nerator by assort i ng nlfjdiuwroq. A s i gna l nIfjdiuwQck ind i cates 
that th e r e qu e st has boon accept e d and nff_diuwroq should bo d e- ass e rted. On receipt of 
nifjdiiuwack, th e data i s s e nt to tho D I U Interfac e as 64 bits on nlf_diuwdata[63:0] over 4 clock 
cycl e s. Th e signa l nlfjdiuwvalid ind i cates that tho data on nff_diuwdQta[63:0] is va li d. 
nlfjdiuwvQlid should be assorted w i th tho smal l est latonoy aft e r nifjdiuwack. I f tho 
10 LBDNoxtUnoFIFO stil l has 256 bits mor e to transfer then nlfjd'iuwroq should bo assorted aga i n. 
Th e stat e d i agram of th e LBDNoxtUn e FIFO D I U Interfac e is shown in F i gure 166. If Gfu_go i s 
d e ass e rt e d then tho stat e- mach i no returns to i ts /of/ e s tat e . 

Tho signa l nlfjrdy i ndicates that th e LBDNoxtUn e FIFO has space for writ i ng by th e LBD. Tho LBD 
writ e s 16 bit w i do data supp l i e d on fbd_Gfu_wdQta[15:0], Ibdjsfu^wvalid i ndicates that tho data is 

sJ VdllU. 

The LBDNoxtUn e FIFO control l og i c counts th e number of lbd_efu_wvQh'd s i gnals and is usod to 
corr e ct l y address into th e n e xt l in e F I FO. The lbd_sfu_wvGlld counter is rounded up to th e nearest 
256 - b i t word wh e n a lbd_Gfu_advlino strobe is rocoivod from th e LBD. Any data r e ma i ning i n tho 
FIFO is flush e d to DRAM with padding be i ng added to fill a complete 256 bit word. 

20 25.8.7 sfu Jbd_rdy G e n e rat i on 

Th e s i gna l sfujbdjrdy i s gonorated by AND i ng pifjrdyfvom tho LBDProvLin e FIFO and nlfjrdy 
from th e LBDN o xtUn e FIFO. 

Bfujbdjrdy i ndicat e s to the LBD that th e SFU i s avai l ab l e for writing i. e . thoro is space avai l abl e 
i n th e LBDNoxtUnoFIFO. After tho first lbdjGfuj3dvline and before tho number of 
25 lt)d_Bfu _pladvword strob e s rec ei v e d is e quivalent to th e lino le ngth, efujbdjrdy ind i cat e s that the 
SFU Is available for both reading, i.o. thoro is data in tho LBDProvLin e FIFO, and writ i ng. 
Thereafter it i nd i cat e s tho SFU is ava i lable for wr i ting. 
25.8.8 LBD SFU I nterfaces Tim i ng Wav e form D e scr i pt i on 

In F i gur e 167 and F i gur e 168, shows th e t i m i ng of th e data valid and ready signa l s between tho 
30 SFU and LBD. A diagram and ps e udocode i s g i v e n for both road and write i nterfaces botwoon tho 
SFU and LBD. 

25. 8. 8. 1 LBD-SFU write intorfaco timing 
Th e main po i nts to not e from Figur e 1 67 ar e : 

I n c l ock cyc le 1 efujbd_rdy detects that i t has only space to r e c e iv e 2 more 16 bit words 

35 from the LBD aft e r th e current clock cycle. 

^ Th e data on IbdjBfu^wdatQ is va l id and this is i ndicat e d by lbd_6fu_wdatavalid b e ing 

ass e rt e d. 

^ In clock cycl e 2 sfujbd_rdy is deassortod however the LBD can not react to th i s signa l unti l , 

c l ock cycle 3. So in clock cycle 3 ther e is also valid data from tho LBD wh i ch consum e s th e 
40 l ast avai l able location ava i lable i n tho F I FO i n tho SFU (FIFO froo l evel i s z e ro). 
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^ in clock cyc l e A and 5 the FIFO is road and 2 words b e come froo i n tho F I FO. 

I n cycl e 4 the SFU d e t e rm i nes that th e F I FO has mor e room and aosorts tho ready signal 

on th e n e xt oyc l o. 

Tho LBD has ontorod a paus e mod e and wa i ts for 6fu_lbd_rdy io be assort e d aga i n, in 

oyclo 5 tho LBD seos th e ass e rt e d r e ady s i gnal and responds by wr i ting one un i t i nto tho 
FIFO, in cycl e 6. 

Tho SFU detects it has 2 spaces loft in tho FIFO and tho current cycl e is an act i ve write 

(sam e as in cyc le 1 ), and d e ass e rts tho roady on tho next oyc l o. 
In cycle 7 tho LBD did not have data to wr i t e i nto th e F I FO, and so tho F I FO r e mains with 

on e space loft 

^ Tho SFU togg le s tho ready signal e very second cyc l e, this allows tho LBD to write one unit 

at a t i mo to th e F I FO. 

I n cycl e 9 tho LBD rcoponds to the singl e ready pulse by writing into the FIFO and 

consuming th e l ast r e main i ng un i t fre e . 
The writo i nt e rface psoudocode for generat i ng th e r e ady is. 

// ready generation pocudoGodo 
■i^ — (f if o_f rcQ_lcvQl > 2 ) then 
nlf_rdy = 1 

oloif — (f if o_f roo^lcvcl 2) — then 

— (lbd_ofu_wdatavalid == l)thcn 

nlf_rdy = 0 

clac 

nlf_rdy = 1 

Gloif — (f ifo_f rec^lcvcl 1) — then 

ari — ( Ibd^o f u_wda t aval id 1 ) then 

nlf_rdy = 0 

Gloc 

nlf_rdy >^ NOT (of u_lbd_rdy) 

Gloc 

nl f _rdy =— 0^ 

ofu_lbd_rdy = (nlf_rdy AI > JD plf_rdy) 
25. 8. 8. 2 SFU LBD road int e rfoco 

Tho read interface i s s i mi l ar to the writo i nt e rfac e e xc e pt that road data (efajbd ^pldata) tak e s an 

extra cycle to respond to the data advance s i gnal {lbd_Bfu jjladvword s i gnal). 

I t is not possib l e to read the FIFO total l y e mpty during tho process i ng of a li n e , on e word must 

always r e main i n th e FIFO. At th e e nd of a li ne th e fifo can bo road to tota l ly empty. Th i s 

funct i ona l ity i s controlled by the SFU with the g e n e ration of tho plf_rdy signa l . 

There i s an apparent corner case on the road s i de wh i ch shou l d bo high li ghted. On examination 

this turns out to not be an issue. 

Scenario 1: 
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Gfujbd_rdy wil l go low wh e n thor e i s stil l i s st i ll 2 p i eces of data i n tho F I FO. I f th e r e i s a 
Ibdjsfu _pladvword pulso In tho noxt cycle tho data w ill appear on efujbd _pldatQ[1 5:0]. 
Sc e nario 2: 

cfujbd__rdy wi ll go l ow when there i s st il l 2 pi e c e s of data In tho F I FO. If thoro Is no 
5 Ibdjsfu j}iQdvword puls e in th e next cycl e and i t is not tho ond of the page then th e SFU 
w il l r e ad th e data for the next li no from DRAM and tho road F I FO w ill fi l l more, 
cfujbdjrdy \n\\ \ assort again, and so th e data wi ll app e ar on efujbd _pldatQ{15:0]. I f It 
happ e ns that th e noxt li no of data i s not availab le y e t th e efujbd jyldata bus wil l go 
inval i d unt i l th e n e xt l inos dat a is availabl e . Th e LBD do o s not sample tho 
10 efujbd _pldata bus at this time ( i .e. after th e e nd of a l i no) and i t is saf e to hav e i nva l id 
data on th e bus. 
Scenario 3: 

efuJbdjrdywW go l ow when thoro i s otill 2 piocos of data I n tho FIFO. I f there I s no 
Ibdjefu jylodvword pu l se in tho noxt cycle and it is th e e nd of th e pag e th e n th e SFU w il l 
15 do no mor e r e ads from DRAM, efuJbdjrdyvAW r e main d e ass e rted, and th e data wil l not 

b e road out from th e F I FO. Howovor l ost li n e of data on th e page is not noodod for 
decod i ng i n tho LBD and wil l not be r e ad by tho LBD. So sc e nario 3 will never app l y. 
Th e ps e udocode for the road FIFO roady gen e rat i on 
// roady goncration poGudoGodc 
20 i-i — (pl_count == lbd_draTn__wordo ) — then 
— plf_rdy =i 1 

cloif (f ifo_fill_lQvcl > 3) then 
— plf_rdy ° 1 

Gloif (f ifo_fill_lGVGl == 3) then 

25 — (lbd_ofu_pladvword =° Dthcn 

plf_rdy « 0 

Gloc 

plf_rdy ^ 1 

cloif (f ifo_f ill_lGVGl 2) then 

30 — (lbd_afujladvword == l)thon 

plf_rdy a 0 

OlOG 

plf_rdy « NOT(ofu_lbd_rdy) 

oloo 

35 — plf_rdy 0- 

afu_lbd_rdy ^ — (plf_rdy AND nlf_rdy) 

25.8.9 HCURoadLinoFIFQ sub b l ock 

Tab le 167. HCUR e adL i noF I FO Add i t i ona l lO Definition 

40 
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Port Name 






Description 


DIU and Address Generation sub-block Signals 


hff xadvancQ 


4- 


fn 








hrf__hou_ondofline 


1- 


Out 






1 V^CIVJ III 1^. 


hrf_diurroq 


4- 


Out 






oiynai inaiouHng ine rfs^%jT\oQuL.in&r'§r'\j nas spaoo 
lor ^Do-Diis OT ulu oaia. 




4- 


In 




nrT_^oiuru6K 


ACKnowieoge tnat roao request has been aoooptod 


aim fff / Ult/f/pC/ olUJUiU Uc Ug USSpiTcQ. 


hrf_diurdata 


4- 


In 


Data from HCURoadLineFIFO to DIU, 




First 64 bits aro bits 63:0 of 256 bit word. 


Second 64 bits oro bits 127:64 of 256 bit word. 


Third 64 bits are bits 191 :128 of 256 bit word. 


Fourth 64 bits are bits 255:192 of 256 bit word. 




hrf_diurvalid 


+ 








Signal indicating data on hrfjUurdata is valid. 


hrf_diuidlo 


4- 




Signal indicating DIU state machine is In the IDLE 




state. 



25. 8, 9. 1 G e neral D e ecription 

Th e HCUReadLincFIFO sub block compris e s a doubl e 256 b i t buff e r betwoon tho HCU and tho 
D I U I ntorfac e and Address Gonorator sub b l ock. Th e FIFO is i mplem e nt e d as 8 tim e s 64 b i t 
words. The F I FO i s wr i tt e n by tho D I U Intorfaco and Address Gonorator sub block and read by the 



5 HGUr 

Th e D I U Interfac e and Address G e nerat i on (DAG) sub block interface of tho HCURoadUnoFIFO 
Is id e nt i ca l to tho LBDPr e vLinoFIFO D I U i ntorfaco. 

Whonovor 4 locat i ons in tho F I FO aro froo tho FIFO will r e quest 256 bits of data from tho DAG 
sub - b l ock by assorting hrfjdiurroq. A signal hrfjdiurack ind i cates that th e r e qu e st has be e n 

10 acc e pt e d and hrfjdiurreq should bo do aocortod. 

The data is writt e n to th e F I FO as 64 bits on hrf__diurdata[63:0] over 4 clock cyc l es. The s i gna l 
hrfjdiun/Qlid i ndicates that the data returned on hrf_diurdata[63:0] i s valid, hrf^diurvalid i s us e d to 
gen e rate tho FIFO write enable, writo_on, and to increm e nt the FIFO wr i te address, 
writo_Qdr[2:0]. I f th e HCUR e adLin e FIFO still has 256 bits free then hrfjdiurroq should bo assorted 

15 again. 

Th e HCUR e adLm e FIFO g e nerates a signal Gfu_hcu_avail to ind i cate that it has data availab l e for 
the HCU. The HCU roads single b i t data supp li ed on Gfu_hcu_sdQtQ. Tho FIFO contro l l ogic 
g e n e rat e s a signa l bit_coi e ct wh i ch so l octo tho next b i t of th e 64 bit FIFO word to output on 
Gfu_hcu_Bdata. Th e signa l houjsfujadvdot t el ls th e HCUR e adLineFIFO to supply th e n e xt dot 
20 {hrf_xadvanc e - 1 ) or th e current dot {hrf__xadvance ~ 0) on efu_hcu_edata according to tho 
hrCxadvanco s i gna l from the scal i ng contro l unit i n th e DAG sub - b l ock. Tho HCU shou l d not 
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g e nerate the hcu_Gfu_advdot s i gnal unti l 6fu_hGu_avail is true. Tho HCU can thoroforo sta ll 
wa i ting for th e efaJhoujavoH s i gnal. 

When the ent i re current 64 bit FIFO word has been road by tho HCU hcujsfu_Qdvdot^ \\ \ cause 
tho next word to bo popp e d from tho FIFO. 
5 Tho last 256 bit word for a l ino read from DRAM and writt e n i nto the HCUR e adLin e FIFO can 
contain dots or extra padding which should not b e output to tho HCU. A count e r in tho 
HCURoodLineFIFO, hcuQdvdot_count[15:0l counts th e number of houjGfujadvdot strobos 
r e c ei ved from th e HCU. Wh e n th e count e qua l s hcu_numjdots[1 5:0] tho HCURoadUnoFIFO 
must adjust th e FIFO read address to point to tho next 256 bit word boundary in tho F I FO. This 
10 can bo achiovod by considor i ng tho F I FO r e ad address, r e ad j3dr [2:0], w i ll r e qu i r e 3 b i ts to 
addr e ss 8 locat i ons of 64 bits. Th e n e xt 256 b i t aligned address is ca l cu l at e d by inverting tho 
MSB of tho road_adr and s e tting a ll oth e r bits to 0. 

^ — (hauadvdot_count » » hcu_num_doto) — then 

15 rGad_adr [1 : 0] ° bOO 

rQad_adr [2] — = — - rcad^adr [2] 

Th e D I U int e rfac e and Address G e nerator sub block scaling unit also noods to know when 
hGuadvdot_Gount e quo\z hcu_num_dot6. Th i s cond i t i on is export e d from tho HCURoadUnoFIFO 
20 as th e signa l hrf_hcu_ondofline. Wh e n tho hrf__hcu_ e ndoflino i s assorted tho ocaling unit wi l l 

docido based on vortica l sca l ing wh e ther to go back to tho start of th e current lino or go onto tho 
n e xt l i n e . 

25,8.9.2 DRAM AccocG Limitation 

Th e SFU must output 1 bit/cycle to th e HCU. S i nc e HCUNumDotG may not bo a mu l tip l e of 256 
25 bits th e last 256 b i t DRAM word on the l i no can conta i n oxtra z e ros. In this case, th e SFU may not 
b e abl e to provid e 1 b i t/cycle to tho HCU. Th i s cou l d l ead to a Gta l l by th e SFU. This sta ll cou l d 
then propagate if tho marg i ns be i ng used by tho HCU aro not sufficient to hid e it. The maximum 
stal l can bo estimated by tho calcu l ation: DRAM serv i c e period X sca l e factor * dots used from 
last DRAM road for HCU li no. 
30 25.8.10 — D I U I nt e rfac e and Address G e nerator Sub block 

Tab le 168. DIU I nt e rfac e and Address Generator Add i tional lO D e scr i ption 



Port name 



Pms I/O Doscript i on 



I nterna l LBDProvL i neF I FO I nputs 



plf_d i urroq 



Signal i nd i cat i ng tho LBDProvLin e FIFO has 256 



b i ts of data free. 



plf_d i urack 



Out 



Acknowledge that road request has boon 
accepted and plf_diurr e q shou l d bo do ass e rt e d. 



plf_d i urdata 



Oi it 



Data from th e DIU to LBDProvLin e FIFO. 



F i rst 6 4- b i ts aro bits 63:0 of 256 b i t word 



PEA23US 



399 









Second 64-bits are bits 127:61 of 256 bit word 


Third 64 bits are bits 101:128 of 256 bit word 


Fourth 64 bits aro bits 255:192 of 256 bit word 




plf_diurrvalid 




Out 


Signal indicating data on plfjdiurdatQ is valid. 






pif^diuidlo 


1- 


In 


Signal indicating DIU state-machine is in the IDLE 






Internal LBDNextLineFIFO Inputs 






nlf_diuwrGq 


1- 


In 






Signal indicating the LBDNoxtLineFIFO has 256 
bits of data for writing to the DIU. 




nlf_diuwack 


1- 


Out 






Acknowledge from DIU that write roquost has 
boon accepted and write data can bo output on 


nlf_diuwdatQ togothor with nlf_diuwvalid. 




nlf__diuwdata 


1- 


In 


Data from LBDNoxtLinoFIFO to DIU Intorfaco. 




First 6*1 bits aro bits 63:0 of 256 bit word 


Sooond 64 bits are bits 127:64 of 256 bit word 


Third 64-bits are bits 101 :128 of 256 bit word 


Fourth 64 bits are bits 255:102 of 256 bit word 




nlf_diuwvalid 


1- 


In 






Signal indicating that data on w/fjdiuwdota is 

valid. 


Internal HCURoadLineFIFO Inputs 






hrf_hGu_ondoflino 


4- 


In 






Signal lasting 1 cycle indicating then end of tho 
HCU road lino. 


hrf_xadvanco 


1- 








Signal from horizontal scaling unit 
A — supply the next dot 
A — supply tho current dot 


hrf_dlurroq 






Signal indicating the HCUReadLinoFIFO has 




space for 256 bits of DIU data. 


hrf_diurack 


4- 


Oi it 






Acknowledge that read request has boon 
accepted and hrf_diurreq should bo do assorted. 




hrf_diurdata 


4- 




Data from HCURoadLlnoFIFO to DIU. 




First 64 bits are bits 63:0 of 256 bit word 


Second 64 bits are bits 127:64 of 256 bit word 


Third 64 bits are bits 191 :1 28 of 256 bit word 


Fourth 64 bits aro bits 255:192 of 256 bit word 




hrf_diurvalid 


4- 


Otrt 






Signal indicating data on plfjdiurdota is valid. 


hrf_diuidio 


4- 


In 






Signal indicating DIU state-machine is in tho IDLE 
state. 



25,8, 10.1 Gonorai DeGcription 



PEA23US 400 



Tho DiU Intorface and Addr e ss Goneratbr (DAG) sub - b l ook manages th e b i lovol buffer in DRAM. 
i t hqs a D I U Writo I nterfac e for th e LBDNextUnoFiFO and o D I U Road I ntorfaco shared betwoon 
tho HCURoadUnoFfFO and LBDProvUnoFIFO. 

A ll DRAM address manag e mont i s c e ntra l is e d i n th e DAG, DRAM acc e ss i s pro ompt i vo i .o. aftor 
5 a FIFO unit has made an acooss then as soon as tho F I FO has spac e to road or data to writo a 
D I U acc e ss wi l l bo requ e sted imm e diat e ly. Th i s e nsures ther e are no unnecessary stalls 
i ntroduc e d e.g. at tho end of an LBD or HCU li n e . 

Th e cbntrol l ogic for hor i zonta l and v e rt i ca l non intogor sca li ng l ogic is comp l oto l y conta i ned in the 
DAG sub bloc l <. Tho scaling control un i t exports th e hlf xodvanco signal to tho 
10 HCUR e adLineFIFO which ind i cates wheth e r to replicat e the current dot or supply th e n e xt dot for 
hor i zontal scal i ng. 
25.8. 10.2 DIU Writo Intorfaco 

Th e LBDNoxtLh e FIFO generates all tho D I U wr i te intorfaco s i gnals d i rectly except for 
6fu_diu_wQdr[21:6] yNh l ch i s generated by th e Address G e nerat i on l ogic 
15 The D I U request from th e LBDN e xtUnoFiFO w il l bo negated i f its respectiv e address pointer in 

DRAM i s invalid i .e. nlfjadrvalid ~ 0. Tho implementation must e nsure that no erroneous r e quests 
occur on 6fu_diu_wreq. 
25.8.10.3 DIU Road Intorfaco 

Both HCUR e adLin e FIFO and LBDPrevLineFIFO shar e tho r o ad i nterface. If both sources 
20 r e quest simultan e ously, thon th o arb i trat i on log i c implomonts a round - robin sharing of read 
acc e sses b e tw ee n th e HCUReadLin e FIFO and LBDPr o vUnoFIFO. 
Th e D I U r e ad request arb i tration l ogic g e n e rates a signal, eeloctjhrfplf, which indicates whether 
tho D I U access is from the HCURoadLin e FIFO or LBDPr e vLlnoFIFO (O'HCURoadLin e FIFO, 1 - 
LBDPr e vLin e FIFO). F i gur e 171 shows s e / e cL^rfp/f mu l tipl e x i ng tho returned D I U acknowledge 
25 and r e ad data to either tho HCURoadLineFIFO or LBDPr e vLineFIFO. 

Th e DIU road r e qu e st arbitrat i on logic i s shown in F i gur e 172. Tho arbitration log i c wi ll select a 
D I U read requ e st on hrfjdiurr e q or plf_diurr e q and assert cfujdiujrroq which goes to tho DIU. 
Th e accompany i ng DIU r e ad addr e ss is g e nerated by tho Address Gonorat i on Logic. Th e select 
s i gna l Goloct_hrfplf \n \\ \ bo sot according to th e arbitration winner (Q-HCUR e adLinoFIFO, 
30 ^-LBDProvLineFIFO). €fu_diu_rroq is cl e ared when tho D I U acknowledg e s tho r e quest on 

diu_cfu_racl<. Arb i tration cannot take place again unt i l th e DIU state - mach i n e of tho arbitration 
winner i s i n the id l e stat e , ind i cated by diujdio. Th i s is n e c e ssary to e nsure that tho D I U read 
data i s mult i plex e d back to tho FIFO that requested it. 

Tho D I U road requests from tho HCUR e adLin e FIFO and LBDPrevLineFIFO W\ \\ b e negated i f 
35 th e ir resp e ct i v e addr e sses i n DRAM ar e inva li d, hrf_adrvalid ^ 0 or plfjadrvalid - 0. Tho 
i mp l ementation must ensure that no erroneous requ e sts occur on €fu_diu_rreq. 
I f tho HCURoadLin e FIFO and LBDProvUnoFIFO roquoot simu l taneously, thon if tho request i s not 
fo ll ow i ng i mmediate l y another D I U road port acc e ss, the arbitration logic wil l choose the 
HCUR e adLin e FIFO by defau l t. If there are back to back requests to tho DIU r e ad port th e n th e 
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arbitrat i on l ogic i mp le m e nts a round rob ' m sharing of road aoooss e s b e twoon tho 
HCURoadLinoFIFO and LBDProvLinoFiFO. 

A ps e udo oodo dosoription of th e D I U r e ad arbitration is g i von b el ow. 



10 



/t^ hiotory ie ei type (nono, hrf , plf } , ie 

HCURQadLincFIFO, plf io LBDPrcvLincFIFO 

// initialiaation on rcoct 

aGlQGt_hrfplf = 0 // default chooac hrf 

hiotory = none // no DIU road acccoo imtncdiatcly preceding 



^ — otate machine — ars — buay between — aoocrting — afu_d± u_rrcq 

and diu_idlc g i 

^ — ir€ — DIU read requeater — otate machine — m — ift — idle — otate 

then de aooert buoy 

15 if (diu_idlc 1) then 

buoy a 0 

//if — aclmowlcdgc — received — from — BiB — then — de aooert — ©iU 

requeot 

20 i-i — (diu ofu rack ■» 1) — then 

//de aooert requeot in reoponoe to ac]cnowledgc 

ofu_diu_rreq « o 

// if not buoy then arbitrate between incoming requeoto 

25 // if requeot detected then aooert buoy 

— (buoy == 0) — then 

//if there io no requeot 

i€ — (hrf_diurreq 0) 7\ND — (plf_diurreq 0) — then 

ofu_diu_rreq ° 0 

30 hiotory ■ none 

// eloe there io a requeot 

eloe { 

// aooert buoy and requeot DIU read acceoo 

buoy = 1 



35 ofu diu rreq = 1 

/t^ arbitrate ift — round robin faohion — between — the 

requeotoro 

/t^ ^ only HCUReadLineFIFO rocjueoting choooe 

HCUReadLineFIFO 

40 if (hrf_diurreq 1) AND — (plf diurreq =° 0) — then 

hiotory ■ hrf 
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OGloct_hrfplf 



H- ^ only LBDPrcvLincFIFO rccpicoting choooc 

LBBPrcvLincFIFO 

— (hrf_diurrGq °° 0) AND — (plf^diurroq ■« 1) — then 

hiBtor^^ a plf 



OQloGt_hrfplf = 1 

fHt^ both HCURcadLincFIFO aad LBDPrcvLinGFIFO 

rGquGOting 

irf — (hrf_diurrcq 1) — AN© — (plf^diurrcq == 1) — then 

10 H- -He immGdiatGly proGGding roquoat choooG 

HCURGadLiriGFIFO 

i€ — (hiotory nono) — thon 

hiotory = hrf 



oolGGt^hrfplf = 0 

1 5 // if proviouo winnor wao HCURGadLincFIFO ohoooo 

LBDPrGvLincFIFO 

Gloif — (hiotory == hrf) — thon 

hiotory « plf 



OQlGGt_hrfplf = 1 

20 // if proviouo winnor wao LBDPrGvLincFIFO ohoooo 

HCURQadLinoFIFO 

oloif — (hiotory plf) — thon 

hiotory « hrf 



aolcGt^hrfplf = 0 



25 // ond thoro io a roquoot 

\ 

25.8.10. 4 Addr e ss G e n e ration Logic 

Th e DiU i nt e rfaco gonoratos tho DRAM addrossos of data r e ad and writton by tho SFU's F I FOs. 
A writ e r e qu e st from tho LBDNoxtLin e FIFO on nlf_diuwreq causes a write r e qu e st from tho DiU 
30 Write I ntorfaco. Tho Addroos Generator supp l ies tho DRAM write addr e ss on efujdlu_wQdr[21:5]. 
A winning r e ad request from tho DiU r e ad requ e st arb i trat i on l og i c caus e s a r e ad r e qu e st from th e 
D I U R e ad Int e rface. Th e Addross G e n e rator suppli e s th e DRAM r e ad addr e ss on 
GfujdiujrQdr{21:6]. 

Tho addr e ss g e norator i s configur e d w i th th e number of DRAM words to r e ad i n a HCU l ino, 
35 hcu_dram_wordG, th e first DRAM addr o ss of the SFU ar e a, Gtartjsfujadr[21:5h and tho l ast 
DRAM addr e ss of tho SFU ar e a, ond_efujadr[21:5], 

Noto hcu_dram_words configuration rogistor spocifios th e th e numb e r of DRAM words consumed 
por l in e i n th e HCU, wh ile lbd_drQm_wordG spec i fios the number of DRAM words gen e rat e d p e r 
lin e by th e LBD. Those values ore not roqu i rod to bo tho samo. 
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For e xample the LBD may storo 10 DRAM words per l ino {lbd_dram_word6 10). but tho HCU 
may oonsumo 5 DRAM words per li n e . I n such case tho hcajdram^worde would bo sot to 5 and 
tho HCU Road Lin e F I FO would trigg e r a n e w li n e after it had consum e d 5 DRAM words (via 
hrfJhGujondoflino), 
5 Address G e n e ration 

Th e re are four addr e ss po i nt e r s us e d to manag e the b l le vel DRAM buff e r: 

a. hcu_roQdUn e _jd_Qdr is th e r e ad addr e ss in DRAM for tho HCURoadLinoFfFO. 

b-. — hcu_6tQrtroQdlmo_adr is th e start address in DRAM for the current l ino bo i ng r e ad by th e 
HCURoodUnoF/FO. 

10 — lbd_n e xtHn e _wrjadr is tho wr i t e addr e ss i n DRAM for tho LBDNoxtLin e FIFO. 
d. Ibd jx e vlin e j'djadr i s the road address in DRAM for th e LBDPr e vUn e FIFO. 
Th e curr e nt value of th e s e addr e ss point e rs are readab le by th e CPU. 

Four corr e sponding address valid flags are requ i red to ind i cate whether the address point e rs are 
valid, based on whether th e FIFOs ar e fu ll or empty. 
15 a. hlfjadrvalid, der i v e d from hrf_nif_fifo_omp 

b. hlfjstartjoidrvQlid, d e r i v e d from BtQrt_hrf_nlfjrrfo_qmp 

— nlf_adrvQlid. derived from nIf_plf_fifojFuH and nlf_hrfJifo_fuH 
d. pli_Qdrvalid. d e r i v e d from plf_nlf_fifo_omp 

DRAM r e qu e sts from the FIFOs w il l not b e issu e d to th e DIU until th e appropriat e addr e ss flag i s 
20 veMr 

Once a requ e st has boon acknow le dg e d, tho address generation logic can caioulato tho addross 
of the n e xt 256 bit word in DRAM, ready for the next request. 
Ru le s for addr e ss point e rs 

The addross po i nters must obey certain ru l es which I nd i cate whether thoy are va li d: 
25 a. hcu_roQdlino_rd_adr is on l y valid i f i t is r e ading earlier in th e l i n e than fbd_n e xtlino_wr_Qdr i s 
writ i ng i.e. the fife i s not e mpty 

b. Th e SFU (lbd_n e xtlin e _wr_Qdr) cannot ov e rwrite th e current l ine that th e HCU i s r e ading from 
{hcu_Gtartr e adlin e _adr) i.e. tho fife i s not ful l , wh e n compar e d with tho HCU road l ino po i nter 

c. Tho LBDN e xtLin o FIFO {lbd_nextlino_wr_adr) must be writ i ng earl ie r in th e li n e than LBD 
30 PrevLineFIFO {Ibd jprovlino_rd_adr) is r e ading and must not overwr i t e th e current l i no that th e 

HCU i s r e ading from i. e . th e fifo is not ful l wh e n compar e d to th e Pr e vUn e Fifo r e ad po i nt e r 

d. Th e LBDProvLlnoFIFO (Ibd _pr e vlino_rd_adr) can r e ad right up to the address that LBDNext 
LlnoFIFO {Ibdjn e xtlino^wrjadr) is writ i ng i .e tho fife i s net empty. 

e . At startup i.e. when efu jgo is ass e rt e d, th e po i nters ar e r e s e t to 6tart_sfu_adr[21 :5l 
35 f. The address pointers can wrap around th e SFU b i l e v e l store area i n DRAM. 

Addross generator pseudo code: 
I nitialization: 

— (ofu_go rioing edge) — thon 

/ / initialioQ — addrcoo — pointcro — fee — a tart — &€ — SFU — addrcoa 

40 opacQ 
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15 



20 



25 



30 



35 



40 



IbdjrQvl inc_rd_adr ■ 


a otart^ 


_ofu_ 


_adr [21 




lbd_ncxt 1 inQ_wr_adr 


o otart_^ 


ofu_ 


_adr [21 




— hcu^rcadl inG_rd_adr 

— hou o tart rcadlinc adr 


1 otart_ 

p otart 


ofu_ 
of u 


_adr [21 
adr [21 





lbd_ncxt 1 inc_wr_wrap 
lbd_j>rcvl inc_rd_vyrap 



hcu_atartrcadlinc__wrap 



hcu_r cadi inc__rd_wrap 

4 



D e t e rmin e FIFO fill and ompty status: 

// calGulatc which FIFOo arc full and empty 

plf_nlf_f ifo_cmp = ( lbd_prcvlinc_rd_adr 

lbd_nG3ct 1 inc_wr_adr ) — AND 

( lbd_j)rcvlinc_rd_wrap 



(Ibd next line wr adr 



lbd_nGxt 1 inG_wr_wrap ) 

nlf_plf_fifo_full 

lbd_prGvl inG_rd_adr ) — AN© 

( lbd_j > rGvlinG_rd_wrap 



lbd_nGxt 1 inG_wr_wrap ) 
nlf hrf fifo full = 



(Ibd next line wr adr 



hcu_otartrGadlinc_adr ) — AND 

( hGu_o tart r cadi inc^wrap 



lbd_nG3ct 1 inc_wr__wrap ) 
-/-/■ — Istevt — otart — addrcoo 



can — j ump addr c o a c o — aad — se — nccdo 



comparitor 

— (hGu_atartrGadlinc_wrap 



lbd_ncxt linG_wr_wrap ) — then 



o tar t_hr f _nl f _f i f o_Gmp 



(hcu otartrcadlinc adr 



> ° Ibd^ncxt 1 inG_wr_adr ) 
Gloc 



— otart_hr f _nl f _f i f o_Gmp 
> = lbd_nGxt 1 inG_wr_adr ) 
// — hett — read — addrcoo 



NOT (hcu otartrcadlinc adr 



can — jump — addrcoo co — aad — se — nccdo 



comparitor 

■arf — ( hGu_rGadl inG_rd_wrap 



hr f _nl f _f i f o_Gmp 



Ibd^ncx 1 1 i nG_wr_wr ap ) — then 
(hcu rcadlinc rd adr 



> = lbd_nG3ct 1 inG_wr_adr ) 
cloc 

hr f _nl f _f i f o_cmp 

» ° Ibd^ncxt 1 inc_wr_adr ) 

Addr e ss po i nter updat i ng: 



NOT (hcu rcadlinc rd adr 



PEA23US 



405 



// LBD Next line FIFO 

// if DIU write aG]cnowlcdgc and LDDNcxtLinGFIFO io not full 
with reference to PLF and HRF 

if ( diu_o f u_waGk — ~ ^ — AND — nl f _p 1 f _f i f o_f ul 1 i-m 3b — MJB 

nlf_hrf__f ifo_full 1 - 1 ) then 

ar€ ( lbd_nextline_wr_adr Gnd_o f u_adr ) then 

// if end of SFU addrcao range 

lbd_nQxtlinc__wr_adr = — otart_of u_adr // 

go to otart of SFU addrcoa range 

lbd_next 1 ine_wr_wrap = NOT — ( lbd_ncxt 1 inc_wr_wrap ) /-/- 

invert the wrap bit 
— elae 

lbd_nextline_wr_adr I i // 

increment addreoo pointer 

// LBD PrevLinc FIFO 

//if DIU read acknowledge and LBDrrcvLincFIFO ia not empty 

4^ (diu_ofu_rac]c 1 ^«}B oelect_hrf plf «=« 1 AND 

p 1 f _nl f _f i f o_cmp 1=1) — then 

ir§ — (lbd_prevline_rd_adr == end_afu_adr) — then 

lbdjprevline_rd_adr = otart_afu_adr // 

go to otart of f SFU addreoo range 

lbd_prevl inG_rd_wrap» — NOT — ( lbd_jprevline_rd_wrap ) // 

invert the wrap bit 
— eloe 

lbd_prcvlinc_rd_adr t i // 

increment addreoo pointer 

// HCU Readliinc FIFO 

■A/ — if DIU read aclmowlcdge and HCUReadLineFIFO — fife — io not 
eiikpty 

( diu_o f u_rac]c ~ 1 AND oolect_hrfplf — 0 AND 

hrf_nlf_f if o_emp — 1 = 1) — then 

// going to update hcu read line addreoo 

^ — (hrf_hcu_cndof lino == 1) — AND — (hrf_yadvance 1) — then { 

// read the next line from DRAM 

// advance to otart of next IICU line in DRAM 

hGu_o t art read 1 i ne_adr m hcu_o tart r cadi inc^adr h 

lbd_dram_wordo 

offset = hcu_otartreadline_adr end_ofu_adr i 

// allow for addreoo wraparound 
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— (offoct > g 0) — then 

hcu_otartrGadlinc__adr ■ otart_afu_adr i offoct 

hGU_o tart rcadl i nonwrap = 



NOT (hcu_otartroadlinc_wrap) 

5 hGu_rQadlinQ_rd_adr « hcu_o tart rcadl inc_adr 

h.Gu_rcadlinc_rd_wrap a hGU_o tart rcadl ino_wrap 

¥ 

cloif — ( hr f _hQu_cndo f 1 inc — ~ — i-) — j^NB — ( hr f ^yadvance — ~ — 

then 

10 hGu_rGadlinQ_rd_adr = hGu_otartrQadlinG_adr 7^ 

root art and rc uoc the oamc line 

hGU_rGadlinc_rd_wrap n hGU_o tart rcadl inG_wrap 

cloif ( hGu_rcadl inc_rd_adr ~ cnd_o f u_adr ) then 

// chcclc if the FIFO needo to wrap opacc 

15 hQu_rcQdlinc__rd_adr = otart_ofu_adr 

go to otart of SFU addrcoo apace 

hcu_rcadlinc_rd_wrap =» NOT — ( hGu_r cadi ine_rd_wrap ) 

ClOG 

hGu_rGadline_rd_adr — m // 

20 increment addrcoo pointer 



25.8.10.^.1 X scaling of data for HCURoadLinoF I FO 

Th e s i gna l hcu_€fu_advdot ioWo th e HCURoadLinoFfFO to supply tho next dot or the curr e nt dot 
on sfu_hcu_edotQ according to th e hrf__xadvQnco signal from th e soal i ng oontro l unit. When 
25 hrf_xQdvanco is 1 tho HCURoadLineFIFO should supply tho next dot. When hrf_xadvanc e i s 0 tho 

HCURoadLinoFIFO should supply tho current dot. 

Th e a l gor i thm for non -i nt e ger scal i ng is described in the psoudocodo b el ow. Not e , x_Gcal e _count 
should bo l oad e d w i th x_etart_count after rosot and at tho end of each l ine. The e nd of the lino is 
I ndicated by hrf_hcu_ondofline from tho HCURoadLinoFfFO. 

30 

ir€ — (hGu_ofu_advdot " 1) — then 

— ( x_ocalc_count — 1 — x_ocalc_denom x_oGalc__num — — 94- 

then 

3c_oGalc_GOunt = x_OGalG_GO\int 1 x_OGalc__dGnom 

35 X ocalG num 

hrf^xadvancc = 1 

ClOQ 

x_oGalc_Gount ° x_ocalo_Gount — 1 — x_OGalG_dGnom 

hrf^xadvancc 0 

40 — eiee 

x^ocalc count ° x ocalc coimt 
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hrf_3cadvanGQ = 0 

25.8.10.^.2 Y soal i ng of data for HCURoadLinoFIFO 

The HCUR e adUnoFIFO counts tho numbor of houjsfujotdvdot strob e s r e oeivod from tho HCU. 
Wh e n th e count oqua l s hcu_num_dotG th e HCURoadLinoFIFO wil l ass e rt hrfJhcu_ e ndoflin e for a 

Th e a l gor i thm for non int e g e r scal i ng Is d e scr i bed i n the pseudocod e b e low. Noto, y_GCQio_count 
shou l d bo l oaded w i th zoro after rosot. 

ir€ — (hrf_hcu_cndof line == — 1^ — then 

10 3ri — (y_OGQlc_Gount — I — y_a c a 1 c_dcnom y_o cal c_num — >« — 94- 

then 

y_ocalQ_count = y_ocalc_GOunt 1 y_o ca 1 Q_dcnom 

y_o cal G_num 

hrf_yadvanGO ° 1 

1 5 GlOG 

y_0GalQ_GOunt: ° y_aGalG_GOunt — i — y_o oa 1 c_donom 

hrf_yadvanGG o 0 

cloc 

y_aGQlQ_QQunt = y_aQalQ_Gount 

20 hrf_yadvanGG = 0 

When the hrfJhcuj B ndoflin o i s ass e rt e d the Y scal i ng un i t wi l l d e c i d e wh e th e r to go back to th e 
start of tho current l ino, by sott i ng hrf_yQdvQnco ~ 0, or go onto the next li n e , by sett i ng 
hrf_yadvanc e ~ 1 . 

25 F i gure 176 shows an overview of X and Y scaling for HCU data. 

26 Tog Encoder (TE) 

2§7^l Overv i ew 

Th e Tag Encod e r (TE) prov i d e s funct i ona l ity for Notpago onablod applicat i ons, and typ i ca ll y 
r e qu i r e s the pr e s e nc e of I R i nk (although K ink can b e us o d for tags in li m i t e d circumstances). 
30 The TE e ncod e s fixed data for tho pag e b ei ng print e d, tog e th e r with sp e c i f i c tag data va l u e s i nto 
an e rror correctab l e oncodod tag wh i ch is subs e quent l y pr i nt e d in i nfrar e d or black ink on th e 
pag e . The TE p l aces tags on a tr i angu l ar gr i d, and can b e programm e d for both l andscap e and 
portra i t orientations. 

Bas i c tag structur e s ar e normal l y rend e r e d at 1600 dp i , wh ile tag data Is e ncoded i nto an arb i trary 
35 number of pr i nted dots. Tho TE supports integer scal i ng i n tho Y direct i on wh il e tho TFU supports 
integ e r sca l ing in tho X diroction. Thus, tho TE can r e nd e r tags at r e solut i ons l e ss than 1600 dp i 
wh i ch can bo subsequ e nt l y scal e d up to 1600 dp i . 

Th e output from tho TE is buffered i n tho Tag FIFO Unit (TFU) which is in turn us e d as input by 
th e HCU. I n addit i on, a t e _fini€hodbond signal is output to tho end of band un i t onco tho i nput tag 
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data has boon l oadod from DRAM. Th e h i gh le v e l data path i s shown by tho b l ock d i agram in 
F i gur e 1 77. 

Aftor pass i ng through tho HCU, tho tag piano i s subsoquont l y print e d with an i nfrarod absorptiv e 
i nk that can be road by a Notpago sens i ng d e v i oo. S i noo black i nk can bo I R absorptive, lim i t e d 
5 functionality can bo prov i ded on offoot printed pages us i ng black I nk on otherw i se blank ar e as of 
the pag e - for e xamp l e to encode buttons. A l ternative l y an i nv i sib le i nfrarod ink can b e used to 
pr i nt th e posit i on tags over tho top of a r e gular pag e . How e v e r, i f inv i sib le IR i nk is us e d, car e 
must bo tak e n to e nsure that any other pr i nted informat i on on th e page is printed in infrared 
traneparont CMY ink, as black ink w il l obscuro tho infrarod tags. The monochromat i c sch e mo was 
10 chos e n to max i miz e dynam i c rang e in blurry r e ad i ng env i ronments. 

Wh e n mu l t i pio SoPEC chips are used for print i ng the same sid e of a pag e , i t is possible that a 
sing le tag will bo produced by two SoPEC ch i ps. This i mpl i os that th e TE must bo able to print 
partial tags. 

Th e throughput r e qu i r e ment for tho SoPEC TE i s to produce tags at half tho rate of tho PEC1 TE. 

15 Since the TE is r e used from PEC1 , tho SoPEC TE over produces by a factor of 2. 

I n PEC1 , i n order to ke e p up with th e HCU wh i ch process e s 2 dots p e r cyc le , th e tag data 
int e rfac e has boon designed to b e capabl e of e ncoding a tag in 63 cycles. This is actually 
accompl i shod i n approximat e ly 52 oyci e s within PEC1. If tho SoPEC TE w e re to be mod i fied from 
two dots product i on por cyc i o to a nom i nal ono dot p e r cyc le i t shou l d not los e the 63/52 cyc le 

20 p e rformance e dgo atta i n e d in th e PEC1 TE. 
26t3 What ARE TAGS? 

Tho first barcod e was d e scrib e d in th e lat e 1940's by Woodland and Silver, and fina ll y patent e d in 
1952 (US Patent 2,612,99 4 ) wh e n el e ctronic parts wor e scarc e and very e xp e ns i v e . Now 
how e v e r, with tho advont of cheap and roadily availab l e computer technology, neariy every item 

25 purchas e d from a shop conta i ns a barcode of some description on th e packag i ng. From books to 
CDs, to groc e ry i tems, tho barcod e prov i d e s a conven i ent way of i d e nt i fy i ng an obj e ct by a 
product number. The oxact i nterpretat i on of the product number depends on th e type of barcode. 
Warehouse inventory track i ng syst e ms l e t us e rs d e fin e th ei r own product number ranges, wh il e 
inventory in shops must bo mor e universally e ncod e d so that products from on e company don't 

30 ov e riap w i th products from anoth e r company. Un i v e rsa l Product Cod e s (UPC) w e re introduc e d in 
the mid 1070's at tho requ e st of th e Nat i ona l Assoc i ation of Food Cha i ns for this v e ry r e ason. 
Barcod e s th e ms e lves havo boon spec i fied in a largo number of formats. Tho o l der barcode 
fonmats contain characters that are disp l ayed i n th e form of li n e s. Th e combination of black and 
white li nos descr i be tho informat i on tho barcod e s conta i ns. Oft e n th e re are two typ e s of lines to 

35 form the complet e barcode: the characters (th e information itse l f) and linos to separate blocks for 
b e tt e r opt i ca l r e cogn i t i on. Wh il o tho informat i on may change from baroodo to barcode, tho linos to 
s e parat e b l ocks stays constant. Tho li noo to separate b l ocks can th e r e for e b e thought of as part 
of tho constant structura l compononts of tho barcod e . 

Barcodes are r e ad w i th sp e cialized reading d e vic e s that th e n pass the extract e d data onto tho 
40 computer for further process i ng. For examp l e, a point - of - sal e scanning d e v i ce allows tho sales 
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ass i stant to add the scann e d i tem to tho curront sa l o, places tho nam e of the i tem and tho prioo 
on a d i sp l ay dovioo for ver i fiGat l on oto. L i ght pens, gun readers, scann e rs, slot r e adors, and 
cam e ras aro among tho many dovioos used to road tho barcodos. 

To he l p e nsure that tho data oxtractod was road correctly, chocksums w e re i ntroduced as a crud e 
5 form of e rror dotoction. Mor e rocont barcod e formats, such as tho Azt e c 2D barcode dev el op e d by 
Andy Longacro in 1905 (US patent number US5591956), but now ro l oasod to the publ i c doma i n, 
uso redundancy oncoding sch e mes such as R ee d - So l omon. Rood Solomon oncod i ng i s 
adoquato l y d i scussed i n [28], [30] and [3A]. Tho roador is advlsod to ref e r to thos e sources for 
background i nform a t i on. V e ry oft e n th e degre e of r e dundancy oncod i ng i s us e r s ele ctable. 

10 More rocontly thoro has also boon a move from th e simpl e on e d i mensional barcodos ( li no based) 
to two dimens i ona l barcod e s. I nstead of storing the i nformation as a s e r i es of lin e s, wh e r e th e 
data can bo oxtractod from a single dimension, th e i nformat i on i s e ncoded In two d i mons i ons. Just 
as w i th tho origina l barcodos, tho 2D barcode contains both i nformation and structural 
components for bettor optical recogn i tion. Figur e 178 shows an example of a QR Code (Qu i ck 

15 Response Code), dovolopod by D e nse of Japan (US pat e nt numb e r US5726 4 35). Note tho 
barcode cell is compr i s e d of two ar e as: a data area (d e p e nds on tho data being stor e d i n tho 
barcod e ), and a constant position dotoct i on pattern. Tho constant position d e t e ct i on pattern i s 
us e d by tho r e ader to h e lp l ocate th e c ell i ts e lf, then to locat e tho cell boundar i es, to a ll ow tho 
r e ad e r to det e rmin e th e origina l orientation of tho cell (ori e ntat i on can bo d e termined by the fact 

20 that thoro is no ^th corn e r pattern). 

Th e number of barcod e e ncod i ng sch e m e s grows dai l y. Yot very often the hardwar e for produc i ng 
th e s e barcodes i s specific to tho part i cu l ar barcode format. As pr i nters becom e more and more 
embedded, thoro is an i ncreas i ng dosiro for r e al t i me printing of theso barcod e s. I n part i cu l ar, 
N e tpag e e nabled appl i cat i ons requ i re tho pr i nt i ng of 2D barcod e s (or tags) over tho pago, 

25 pr e f e rab l y i n infra rod ink. Th e tag encoder i n SoPEC usos a gonor i c barcod e format e ncoding 
scheme wh i ch is particularly su i t e d to real t i me printing. Sinc e th e barcode encod i ng format is 
generic, th e sam e rendering hardwar e e ngine can b e used to produce a wide var i ety of barcode 
formats. 

Unfortunate l y tho t e rm "barcod e " i s int e rpr e t e d in d i ff e r e nt ways by diff e r e nt peop l e. Somet i m e s i t 
30 r e f e rs only to the d a ta ar e a compon e nt, and does not i nclude tho constant pos i tion det e ct i on 
patt e rn. I n oth e r cases i t r e f e rs to both data and constant position det e ct i on pattern. 
. W e therefore uso the t e rm tag to refer to th e combinat i on of data and any oth e r compon e nts (such 
as pos i tion detect i on patt e rn, blank space otc. surround) that must bo r e nd e r e d to help hold or 
locate/read the data. A tag therefore conta i ns th e fo ll owing compon e nts: 

35 data ar e a(s). Th e data area is th e who le reason that tho tag exists. Tho tag data aroa(s) 

contains the encoded data (opt i ona ll y r e dundancy- e ncoded, p e rhaps s i mply 
checksummed) where tho bits of tho data aro p l aced within the data ar e a at locat i ons 
specified by th e tag oncoding scheme. 

constant background patterns, which typica l ly inc l udes a constant position d e tection 

40 pattern. Thes e h el p tho tag reader to locat e th e tag. They i nc l ud e components that are easy 
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to locat e and may contain ori e ntation and perspootivo information i n th e oaso of 2D tags. 
Constant background patt e rns may a l so i nc l ud e such patt e rns as a blank aroa surrounding 
the data area or pos i t i on d e t e ction patt e rn. These b l ank patt e rns can aid i n tho decoding of 
th e data by e nsuring that ther e is no Intorforonco botwoon tags or data areas. 
5 I n most tag encoding sch e mes thoro i s at least som e constant background patt e rn, but It is not 
nec e ssar i ly required by a ll . For examp l e, i f tho tag data area i s e nclosed by a phys i ca l space and 
tho r e ading moans us e s a non opt i ca l locat i on m e chanism (e.g. phys i ca l a li gnm e nt of surface to 
data reader) then a pos i t i on d e tect i on patt e rn is not r e quir e d. 

Diff e rent tag encoding sch e mes havo different sized tags, and hav e diff e r e nt allocation of physica l 
10 tag aroa to constant position dotoct i on patt e rn and data ar e a. For e xamp le , the QR code has 3 

fix e d b l ocks at th e e dg e s of th e tag for position detect i on patt e rn (s ee Figur e 1 78) and a data ar e a 
i n th e r e ma i nd e r. By contrast, tho Netpago tag structuro (see F i gur e s 179 and 180) contains a 
c i rcular l ocator component, an or i ontat i on f e atur e , and several data ar e as. Figur e 179(a) shows 
th e N e tpag e tag constant background patt e rn in a rosolution ind e p e nd e nt form. F i gur e 179(b) is 
15 tho same as F i gure 1 79(a), but w i th tho add i tion of the data ar e as to the N e tpag e tag. Figur e 180 
is an e xamp le of dot p l ac e ment and rendering to 1600 dp i for a Netpage tag. Noto that in F i gure 
180 a s i ng le bit of data i s represent e d by many physical output dots to form a block w i th i n tho 
data aroa. 

26.2.1 Contents of tho data aroa 

20 Tho data area conta i ns th e data for tho tag. 

Depending on the tag's encod i ng format, a s i ngle b i t of data may be r e pr e s e nt e d by a numb e r of 
physica l printed dots. Th e e xact number of dots w ill d e p e nd on the output resolution and tho 
targ e t r e ading/scanning r e solut i on. For examp le , in th e QR cod e (see Figure 178), a s i ngle b i t is 
r e pr e s e nt e d by a dark modul e or a li ght modu le , wh e r e th e e xact number of dots In th e dark 

25 modu l e or l i ght modu le depends on tho render i ng roso l ut i on and target read i ng/scann i ng 

r e so l ut i on. For examp l e, a dark modu l e may bo repres e nt e d by a squar e block of pr i nt e d dots (al l 
on for binary 1 , or a l l off for binary 0), as shown i n F i gure 181 . 

The point to noto horo is that a sing l e b i t of data may bo roprosontod in the pr i nted tag by an 
arbitrary pr i nted shape. Tho sma l l e st shapo i s a single pr i nt e d dot, wh i le the l arg e st shap e i s 
30 th e oret i ca l ly tho whole tag i tsolf, for example a giant macrodot compris e d of many print e d dots i n 
both dim e nsions. 

An id e a l g e n e r i c tag defin i tion structuro a ll ows tho generat i on of an arb i trary printed shape from 
e ach b i t of data. 

26.2.2 What do tho bits represent? 

35 G i v e n on or i g i nal numb e r of bits of data, and the d e sir e to p l ace those bits I nto a printed tag for 
Gubsoquont retrieval v i a a read i ng/scann i ng m e chanism, tho or i g i nal numb e r of bits can o i thor b e 
p l aced dir e ctly i nto the tag, or they can be r e dundancy encod e d i n som e way. Th e e xact form of 
redundancy encoding w i ll d e p e nd on tho tag format. 

Th e placomont of data b i ts w i thin the data ar e a of th e tag is dir e ct l y r e lat e d to the redundancy 
40 mechan i sm emp l oyed i n the encoding scheme. Th e i dea i s general l y to place data bits together i n 
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2D so that burst errors ar e averag e d out ov e r th e tag data, thus typically being corroctab l o^ For 
e xampio, all th e b i ts of Re e d - Solomon codeword wou l d bo spread out over the entire tag data 
ar e a so to m i nim i z e b ei ng aff e ct e d by a burst e rror. 

Since the data encod i ng sch e m e and shape and s i zo of the tag data area are c l os e ly li nked, it is 
5 desirab l e to hav e a g e n e ric tag format structure. Th i s a l lows the same data structur e and 

render i ng e mbod i ment to bo used to rend e r a varioty of tog formats. 

26.2.2.1 Fix e d and varioblo data componontc 

In many cases, the tag data can be r e asonably d i vid e d i nto f i x e d and var i ab l e components. For 
e xamp i o, i f a tag holds N bits of data, some of these bits may b e fix e d for al l tags whi l e some 
10 may vary from tag to tag. 

For examp l e, tho Univ e rsal product code a ll ows a country code and a company cod e . S i nc e th e se 
b i ts don't chang e from tag to tag, th e se b i ts can bo defined as fixed, and don't n ee d to b e 
provid e d to the tag encod e r e ach t i mo, ther e by r e ducing th e bandw i dth wh e n producing many 

15 Anoth e r e xampio i s N e tpag e tags. A singl e print e d page conta i ns a numb e r of Notpage tags. Tho 
page i d w i ll b e constant across a l l the tags, oven though tho remainder of th e data within each tag 
may be d i ffer e nt for e ach tag. By r e ducing th e amount of variabl e data b e ing pass e d to SoPEC's 
tag encoder for each tag, tho overa ll bandwidth can bo roducod. 

D e pend i ng on th e e mbodiment of tho tag encoder, those parameters w i ll bo eith e r i mp l icit or 
20 e xpl i cit, and may l imit tho sizo of tags rendor a b lo by th e syst e m. For example, a software tag 

e ncoder may be comp le t el y var i abl e , while a hardwar e tag encoder such as SoPEC's tag oncodor 

may hav e a maximum number of tag data b i ts. 

26.2.2.2 Rodundancy e ncod e the tag data within tho tag e ncodor 

Instead of acc e pt i ng th e comploto numb e r of TagDota b i ts oncodod by on external encod e r, the 
25 tag encoder accepts tho bas i c non r e dundancy encoded data bits and oncodos th e m as requ i red 
for e ach tag. This le ads to sign i ficant sav i ngs of bandw i dth and on chip storage. 
I n SoPEC's cas e for Netpag e tags, only 120 bits of orig i nal data ar e prov i d e d p e r tag, and the tag 
e ncoder encodoG those 120 b i ts i nto 360 bits. By hav i ng the redundancy encoder on board th e 
tag e ncoder tho offoctive bandw i dth and internal storage required is reduced to on l y 33% of what 
30 wou l d be r e quired if th e e ncoded data was r e ad direct l y. 
2§73 Placement of tags on a pace 

Th e TE p l aces tags on the page i n a tr i angular gr i d arrang e ment as shown i n F i gure 182. 
Th e triangular mesh of tags comb i ned w i th th e restr i ct i on of no ov e rlap of columns or rows of tags 
means that th e proc e ss of tag plac e ment i s greatly s i mplif i od. For a given l i no of dots, al l the togs 
35 on that lino correspond to tho sam e part of th e gen e ral tag structur e . Th e triangular placement 

can b e cons i dered as a l t e rnative lines of tags, wh e r e on e li no of tags I s i nset by ono amount i n tho 
dot dimension, and th e other lin e of dots is ins e t by a d i ff e rent amount. The dot intor tag gap i s the 
sam e i n both l i nes of tag, and is different from tho line i nt e r tag gap. 
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Not e also that as l ong as th e tags thomso l v e s can b e rotated, portrait and landscap e print i ng aro 
e ss e nt i ally the samo the placomont param e t e rs of lin e and dot are swapped, but tho placomont 
moohanism is tho oamo. 

Th e g e n e ra l case for p l ac e mont of tags therefore re li es on a number of paramotors, as shown in 
5 F i gure 183. 

The paramotors aro mor e formal l y d e scr i b e d in Table 169. Note that those are placomont 
parameters and not r o g i stors. 

Table 160. Tag placem e nt parameters 



oaranieter 


Hocririntion 




Tag height 


The number of dot lines in a tag's bounding box 


minimum 1 


Tag width 


The number of dots in a single lino of the tag's bounding 
box. Tho number of dots in tho tag itsolf may vary 


minimum 1 




depending on the shape of tho tag, but the number of dots 


in the bounding box will bo constant (by definition). 


Dot inter tag gap 


The number of dots from the edge of one tag's bounding 
box to tho start of tho next tag's bounding box, in the dot 


minimum ~ 0 


direction. 


Lino inter tag 

gap 


The number of dot lines from the edgo of one tag's 
bounding box to the start of the next tag's bounding box, in 


minimum ~ 0 


the line direction. 


start Position 


Defines the status of the top left dot on the page — is-afi 




offset in dot & row within tho tag or the intor tag gap. 


AltTagLinePositi 
en 


Dofinos tho status for tho start of the alternate row of tags. 
Is an offset in dot within tho tag or within tho dot intor tag 






gap (the row position is always 0). 



Q&tA Bas i c tag encod i ng paramctcrs 

SoPEC's tag e ncoder imposes rang e r e str i ct i ons on tag e ncoding param e t e rs as a d i r e ct resu l t of 
on - chip buffer s i zes. Table 170 lists tho bas i c encoding paramotors as wo ll as rang e r e strict i ons 
where appropriate. Although th e restr i ctions wore chosen to take the most li kely encod i ng 
sc e nar i os i nto account, it is a s i mp l e matter to adjust tho buffer sizes and corresponding 
addressing to al l ow arbitrary e ncod i ng paramotors in future i mp l ementat i ons. 
Tab le 1 70. Encoding parameters 



10 



15 



name 



d e f i nit i on 



dotpairs or 20.^8 inch e s at 1600 dpi 



max i mum va l ue imposed by TE 



W 



pag e w i dth 



tag size 



typ i cal tag size is 2mm x 2mm 



max i mum tag size i s 38^ dots x 38^ dots boforo 



sca l ing i.e. 6 mm x 6 mm at 1600 dp i 
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N 


number of dots in each dimension of 
the tag 


38^ dots before scaling 




redundancy encoding for tag data 


Keeo-ooiomon vjr(^ ) at o.io or 7:8 


Of 


size of fixod data (unonoodod) 


or 56 bits 


«F 


size — of — redundancy oncodod — fixed 


120 bits 


Ov 


sizo of variable data (unencodod) 


120 or 112 bits 


Rv 


size of redundancy oncodod variable 


360 or 2A0 bits 


T 


tags per page width 


255 



The fixod data for th e tags on a pago neod on l y bo supp lie d to the TE onc e . I t can bo supplied as 
4 0 or 56 b i ts of un o ncod e d data and e ncod e d w i th i n the TE as d e scribed in Section 26.4.1 . 
A l t e rnat i v el y it can bo supp li ed as 120 bits of pr e- e ncoded data ( e ncoded arbitrari l y). 
The var i ab l e data for th e tags on a page are those 1 12 or 120 data bits that are variab l e for each 
5 tag. Variabl e tag data is supplied as part of th e band data, and i s a l ways encoded by the TE as 
describod I n Soct i on 26.4.1, but may its e lf be arbitrarily pr e encoded. 
26. 4 .1 R e dundancy e ncoding 

The mapp i ng of data b i ts (both f i xod and var i ab l e) to r e dundancy encoded bits r e li e s h e avily on 
th e m e thod of r e dundancy encoding employed. Rood So l omon encod i ng was chos e n for i ts ab il ity 
10 to deal with burst errors and eff e ctiv e ly d e tect and correct e rrors using a m i nimum of r e dundancy. 
Rood So l omon e ncoding is ad e quately discussed i n [28], [30] and [34]. The read e r is advised to 
refer to those sources for background i nformat i on. 

I n this i mp l ementat i on of th e TE w e us e R ee d So l omon e ncod i ng over the Galois F i eld GF(2 '*>7 
Symbo l s i ze is 4 bits. Each codeword conta i ns 15 4 b i t symbo l s for a cod e word le ngth of 60 b i ts. 
15 The prim i tive po l ynom i a l is p(x) - + x + 1, and the gonorator polynomial i s g(x) - 
(x^'a)(x*a^)...(x*a^), where t " tho number of symbo l s that can be oorroctod. 
Of th e 15 symbols, ther e are two possib i l i t ie s for encod i ng: 

RS(15, 5): 5 symbols orig i nal data (20 b i ts), and 10 redundancy symbols (40 bits). Tho 10 

r e dundancy symbo l s moan that wo can corroct up to 5 symbols i n e rror. Th e gen e rator 
20 polynomial i s therefor e g(x) - (x*a)(x*a^)...(x*a' *^>7 

RS(15, 7): 7 symbo l s or i g i nal data (28 b i ts), and 8 redundancy symbo l s (32 b i ts). Tho 8 

r e dundancy symbo l s moan that w e can corr e ct up to 4 symbols i n e rror. Tho gen e rator 
po l ynomia l is g(x) ~ {x'^a){x+a ^ )..,{x+a% 
I n the f i rst case, w i th 5 symbo l s of origina l data, tho total amount of orig i nal data per tag is 160 
25 b i ts ( 4 0 fixed, 120 variable). This i s redundancy encod e d to g i v e a tota l amount of 480 bits (120 
f i xed, 360 variable) as fo ll ows: 

Each tag conta i ns up to AO bits of f i xed origina l data. Th e refore 2 codewords are required 

for tho f i xod data, g i ving a tota l encod e d data siz e of 1 20 bits. Note that this fixod data on l y 
ne e ds to be oncodod once per pago. 
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^ Each tag contains up to 120 b i ts of variabl e or i ginal data. Th e roforo 6 codowords aro 

requir e d for the variab l e data, g i ving a tota l encodod data s i zo of 360 b i ts. 
I n th e second cas e , w i th 7 symbols of or i g i na l data, tho tota l amount of orig i na l data por tag i o 168 
bits (56 fixed, 112 variab le ). Th i s i s r e dundancy e ncoded to g i ve a total amount of 360 bits (1 20 
5 f i xed, 2 4 0 var i ab l e) as follows: 

Each tag contains up to 56 b i ts of fix e d original data. Thorofor e 2 codowords ar e r e quired 

for the fix e d data, giving a tota l e ncod e d data s i ze of 120 bits. Note that this fixed data only 
nocds to bo encod e d onco por pago. 

Each tag conta i ns up to 112 b i ts of variab l e original data. Theroforo 1 codowords aro 

10 required for th e var i abl e data, giving a total oncodod data s i zo of 240 bits. 

The cho i c e of data to r e dundancy ratio d e p e nds on tho appl i cat i on. 

2§75 Data structures used b y tag encoder 

26.5.1 Tag Format Structure 

The Tag Format Structur e (TFS) is tho template used to r e nd e r tags, opt i mized so that th e tag can 
15 be r e nd e r e d in r e al t i m e . Th e TFS contains an entry for e ach dot pos i tion within tho tag's 

bounding box. Each entry specifies wh e th e r tho dot i s part of th e constant background pattern or 
part of th e tag's data component (both fix e d and var i able). 

The TFS is v e ry s i mi l ar to a bitmap in that i t contains on e e ntry for each dot posit i on of tho tag's 
bounding box. Th e TFS th e roforo has TagH e ight x T a gWidth e ntri e s, whore TogHoight matches 
20 th e h ei ght of the bounding box for th e tag In tho l ino dim e nsion, and TagWidth matches tho width 
of th o bound i ng box for th e tag in th e dot dimens i on. A s i ngl e l in e of TFS entr ie s for a tag is 
known as a tag lin e etructuro. 

Tho TFS cons i st s of TagH e ight number of tag line ctructuroG, on e for e ach 1600 dp i li n e in th e 
tag's bounding box. Each tag l ine structur e conta i ns thr ee contiguous tables, known as tab l es A, 

25 B, and C. Tabl e A contains 38 4 2 - b i t e ntr ie s, on e entry for oach of the maximum number of dots in 
a s i ngle line of a tag (see Tab l e ). Tho actual number of e ntri e s us e d shou l d match th e s i z e of 
th e bounding box for th e tag i n the dot d i m e nsion, but al l 38 4 e ntr i es must be present. Tab l e B 
conta i ns 32 9 bit data addresses that r e fer to (in order of app e aranc e ) th e data dots present I n tho 
particular l i ne. A ll 32 entri e s must be present, even if fewer ar e us e d. Tab le C conta i ns two 5 b i t 

30 po i nt e rs Into table B, and th e refore comprises 10 b i ts. Padding of 21 4 bits is added. Tho total 
l e ngth of e ach tag l i n e structure is th e r e for e 5 x 256 bit DRAM words. Thus a TFS conta i n i ng 
TagH e ight tag l i no structur e s r e quires a TagH e ight * 160 byt e s. Th e structur e of a TFS is shown 
in Figure 18 4 . 

A full d e scription of tho interpretation and usag e of Tabl e s A, B and C i s given in section 26.8.3 on 
35 pag e 1 . 

26.5,1.1 Scaling a tag 

I f th e s i ze of the pr i nted dots i s too sma l l, then th e tag can b e scal e d i n one of sev e ra l ways. 
Either the tag itself can b e sca l ed by N dots in e ach d i m e nsion, which increases tho number of 
entries i n th e TFS. As an alternative, the output from th e TE can be scaled up by p i xe l rep li cation 
40 via a sca l e factor greater than 1 in tho both tho TE and TFU. 
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For oxampl e , if th e or i gina l TFS was 21 x 21 ontrios, and tho scal i ng were a simp l o 2x2 dots for 
each of th e orig i na l dots, we oou l d i ncreas e tho TPS to bo 4 2 x 4 2. To gonorato tho now TPS from 
th e o l d, w e would rop e at e ach entry acros s each line of tho TPS, and then wo would repeat each 
l i no of tho TPS. Tho not number of ontr i os i n tho TPS would bo Incr e ased fourfo l d (2 )( 2). 
5 Th e TPS allows tho cr e ation of macrodots i nstead of simp l o scal i ng. Look i ng at PIguro 185 for a 
simpl e e xample of a 3 >< 3 dot tag, w e may want to produce a physica ll y l argo pr i nted form of tho 
tag, whoro oach of the original dots was repr e s e nt e d by 7 x 7 printed dots. I f wo simp l y p e rformed 
r e plicat i on by 7 i n oach dim e ns i on of th e orig i nal TPS, o i thor by i ncroas i ng tho s i ze of th e TPS by 
7 in each d i mension or putting a scal e- up on the output of th e tag generator output, thon wo wou l d 
10 hav e 9 s e ts of 7 x 7 squar e b l ocks. I nst e ad, w e can replace oach of the or i g i na l dots I n th e TPS 
by a 7 X 7 dot defin i tion of a roundod dot. Figure 186 shows tho results. 

Cons e qu e ntly, th e h i gh e r the rooo l ut i on of th e TPS tho more pr i nt e d dots can bo printed for oach 
macrodot, wher e a macrodot repr e sents a s i ng l e data bit of th e tag. Th e moro dots that ar e 
ava i lab l e to produc e a macrodot, the moro comp l ox tho pattern of the macrodot can be. As on 
15 e xampl e , Figure n pag e4 61 on page Error! Bookmark not dofinod, shows th e Netpage tag 
structur e r e nd e r e d such that tho data bits are represented by an av e rage of 8 dots x 8 dots (at 
1600 dpi), but th e actual shape structur e of a dot is not square. This allows tho print e d Netpage 
tag to b e subsequent l y r e ad at any oriontat i on. 
26.5.2 Raw tag data 

20 Th e TE r e quires a band of un e ncoded var i ab le tag data if variab le data i s to be i nc l ud e d i n tho tog 
bit plane. A band of un e ncoded var i able tag data is a s e t of cont i guous unoncodod tag data 
records, in ord e r of encounter top loft of printed band from top loft to lower right. 
An un e ncoded tag data record is 1 28 b i ts arranged as fo ll ows: bits 0 111 orO 119 are the bits of 
raw tag data, b i t 120 i s a flag us e d by tho TE (TaglsPrint e d), and th e remaining 7 b i ts are 

25 r e s e rv e d (and shou l d be 0). Hav i ng a r e cord siz e of 128 b i ts simp li fies the tag data acc e ss since 
the data of two tags f i ts into a 256 - b i t DRAM word. I t a l so m e ans that tho flags can bo stored 
apart from th e tag data, thus keeping tho raw tag data compl e t el y unrestr i cted. I f there is an odd 
numb e r of tags in li no thon tho last DRAM road w i l l contain a tag in tho first 128 b i ts and padding 
i n the fina l 128 b i ts. 

30 Th e TaglsPrint e d f l ag allows th e effective sp e cification of a tag r e so l ut i on mask over tho page. 

For each tag posit i on tho TaglePrintod flag determines whether any of tho tag i s pr i nt e d or not. 

Th i s a ll ows arb i trary plac e ment of tags on tho page. For example, togs may on l y bo pr i nted over 

part i cu l ar active areas of a page. Tho TagfcPrint e d flog a l lows on l y those tags to bo pr i nted. 

TagiePrintod i s a 1 b i t flag with values as shown in Table 171. 
35 Table 171. TaglsPrinted values 



Voluc 


description 


9 


Don't print the tag in this tag position. 

Output 0 for oach dot within the tag bounding box. 
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Print tho tag as spoc i fi e d by tho var i ouo tag otructuroo. 



26.5.3 DRAM storag e r e qu i romonts 

Th e tota l DRAM otorago roquirod by a s i ngle band of raw tag data dopends on tho number of tags 
pr e s e nt in that band. Each tag requ i res 128 bits. Cons e qu e ntly i f th e r e aro A/tags i n th e band, the 
s i z e in DRAM i s 16N byt e s. 

The maximum size of a li no of tags is 163 x 128 b i ts. When maximally paokod, a row of tags 
contains 163 tags (soo Tab l e ) and ext e nds ov e r a minimum of 126 print l inos. Th i s equates to 
282 KBytos ovor a L e tt e r page. 

Th e tota l DRAM storage r e quir e d by a singl e TFS is TagHoight/T KByt e s (includ i ng padd i ng). 
S i nc e the li kely maximum va l uo for TagHoight i s 38 4 (g i von that SoPEC restricts TagWidth to 
384). th e maximum sizo i n DRAM for a TFS is 55 KBytos. 

26.5.4 DRAM access requ i r e m e nts 

Tho TE has two separate r e ad i nt e rfac e s to DRAM for raw tag data, TD, and tag format structur e , 

TFSr 

Th e memory usage requ i rements are shown i n Tab le 1 72. Raw tag data i s stored i n tho 
compr e ss e d pago store 

Table 1 72. M e mory usage requirements 



Description 



Compr e ssed 



pag e 2048 Kbytes 



Compress e d data page store for B i 
l e v el , contono and 



raw tag data. 



Tag Format Structure 



55 Kbyte (384 dot lino[55 kB i n PEC1 for 38^ dot l i no tags (tho 
tags @ 1600 dp i ) 



b e nchmark) at 1600 dpi 
2.5 mm tags (1/10th inch) @ 1600 dp i 



r e qu i r e 160 dot l i nos - 160/38 4 x55 or 



23-kB 



2.5 mm tags @ 800 dp i r e qu i r e 80/38 4 



x55-12kB 



Th e TD i nterface w ill road 256 bits from DRAM at a time. Each 256 bit road returns 2 timos 128 
b i t tags. The TD IntorfQco to tho DIU will b e a 256 b i t doub l e buffer. I f th e re i s an odd numb e r of 
tags i n l in e th e n th e l ast DRAM road w ill contain a tag in th e first 128 bits and padding i n the final 
128 b i ts. 

Th e TFS int e rface wi ll a l so read 256 - b i ts from DRAM at a time. Tho TFS r e qu i r e d for a li ne i s 136 
byt e s. A tota l of 5 times 256 b i t DRAM roads i s requ i red to road th e TFS for a l i n e with 102 
unus e d bits in th e fifth 256 bit word. A 136 byt e doub le lin e buffer wi ll b e imp le m e nted to stor e th e 
TFS data. 

Tho TE's D I U bandw i dth r e quirements are summariz e d i n Table 173. 
Tab l e 1 73. DRAM bandw i dth requiromonts 
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Singl e 256 bit readal . 



4^ 



4.02 



Rcdd 



Singl e 256 bit roads2, TFS is 1360.003 
byt e s. This moana there is unusod 



data in th e fifth 256 bit read. A 



total of 5 r e ads is r e quir e d. 



0t993 



1 : Each 2mm tag l asts 126 dot cyclos and roquiroQ 128 b i ts. Th i s is a rat e of 256 bits e very 252 
cycl e s. 

2: 17 X 6 4 bit roads p e r lin e i n PEC1 Is 5 x 256 bit roads p e r l ino i n SoPEC w i th unusod bits in the 
l ast 256 b i t rood. 

26.5.5 TD and TFS Bondotoro wrapp i ng 

Tabl e 17 4 . Bandstoro I nputs from CDU 



Port Name 



D e script i on 



cdu_endofbandstoro[21 : 
5} 



\b Addr e ss of th e e nd of th e current bond of data. 



256 bit word a li gn e d DRAM addros 



cdu_startofbandstoro[21 : 



If) 



Addr e ss of th e start of th e curr e nt band of data. 



5} 



256 - bit word al i gnod DRAM addross 



Both TD and TFS storag e in DRAM can wrap around tho bandstoro ar e a. Th e bounds of tho band 
stor e ar e d e scr i bed by i nputs from tho CDU shown i n Table 17 4 . Tho TD and TFS DRAM 
i ntorfacos thoroforo support bandstor e wrapp i ng. I f tho TD or TFS DRAM int e rface Incromonts an 
address i t is chock e d to soo if it match e s th e e nd of bandstor e address. I f so, th e n the address is 
mapp e d to the start of tho bandstore. 
26.5.6 Tag s i zes 

SoPEC al l ows for tags to bo botwoon 0 to 38^ dots. A typ i cal 2 mm tag requ i r e s 126 dots. Short 
tags do not change tho i nterna l bandw i dth or throughput behaviours at all. Tag h ei ght is specified 
so as to a ll ow tho DRAM storage for raw tag data to bo spocifiod. M i nimum tag w i dth i s a 
condition imposed by throughput li mitat i ons, so i f tho w i dth is too sma ll TE cannot cons i stent l y 
produoo 2 dots por cyc i o across sovoral tags (a l so there are raw tag data bandwidth impl i cations). 
Th i nn e r tags sti l l work, they just take l onger and/or need scaling. 

I mplementation 

26.6.1 Tag Encod e r Archit e ctur e 

A b l ock diagram of the TE can bo soon b e low. 



The TE wr i t e s linos of b i lovo l tag piano data to the TFU for later r e ading by tho HCU. Tho TE i s 
respons i b l e for merg i ng th e encod e d tag data w i th th e tag structur e (int e rpr e ted from tho TFS). Y 
int e g e r sca li ng of tags i s performed i n the TE w i th X integer scal i ng of tho tags performed in tho 
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TFU. Th e e ncodod tag lay o r is g e n e rat e d 2 b i ts at a timo and output to tho TFU at thio rote. The 
HCU howovor only consum e s 1 b i t per cycl e from the TFU. Th e TE must prov i de support for 
126dot Togs (2mm densely pack e d) with 108 Tags por lino with 128bits p e r tag. 
Th e tag encoder consists of a TPS int e rface that l oads and decodes TPS ontr i os, a tag data 
interface that loads tag raw data, encodes it, and provides bit va l ues on request, and a state 
machin e to g e nerate appropr i at e addr e ssing and contro l s i gnals. Tho TE has two ooparato road 
i ntorfacos to DRAM for raw tag data. TD, and tog format struoturo, TPS. 

It is poss i b le that tho raw tag data i nt e rface, tho TD, to the D I U could bo roplac e d by a hardwar e 
stat e machin e at a lat e r stag e . Th i s would a l low floxibility i n th e g e n e rat i on of tags. Support for Y 
scal i ng neods to bo add e d to tho PEC1 TE. Th e PEC1 TE a l ready allows stalling at i ts output 
dur i ng a l i n e when tfu_to_oktowrit e i s d e assortod. 
26.6.2 Y Scal i ng output li n e s 

I n ord e r to support scaling i n th e Y d i rect i on tho fol l owing modif i cat i ons to tho PEC1 TE are 
suggested to tho Tag Data I nt e rface, Tag Format Structur e I nt e rfaco and TE Top Lovol: 

for Tag Data Interfac e : program th e configurat i on regist e rs of Tabio , fIretTogUnoHolght 

and tagMaxLino with truo value i.e. not multiplied up by tho scale factor YScaie. Within the 
Tag Data Int e rfac e th e r e aro two counters, countx and county that havo a direct bearing on 
th e rawTagDataAddr gonoration. countx decrem e nts as tags ar e r e ad from DRAM. I t Is 
r e sot to NumTagelRtdTagS e ne e ] at start of e ach li ne of tags, county is d e crem e nt e d as 
each l ine of tags is comp le t e ly road from DPiAM l .o. countx ~ 0. Sca l ing may bo porformod 
by count i ng tho number of timos countx roaches zero and only docromont i ng county ^hon 
this number roach e s YScai e . Th i s wil l causo th e TagData I nterface to road each l ino of tag 
data NumTagGfRtdTagSonco] * YScaie timos. 

^ for Tag Format Structur e Interface: Tho i mpl i cation of Y scaling for the TPS is that each 

Tag L i no Structur e is usod YScaio t i mes. Th i s may b e accomp li sh e d in ei ther of two ways: 

■* For bach Tag Lino Structure road i t once from DRAM and rous e YScai e t i m e s. This 

i nvo l ves gating tho control of TFS buffer fl i pp i ng with YScaio, Because of tho way in wh i ch 
th i s QdvTfcLln e and advTogUne re l ated funct i ona li ty is cod e d i n th e PEC1 TPS this so l ut i on 
is judged to bo error prono. 

F e tch each TagLinoStructuro YScaio timos. This so l ution involves controll i ng th e act i vity of 

currTfoAddr \N \ ih YScai e . 

In SoPEC tho TFS must supp l y five addresses to th e DIU to read e ach i ndividua l Tag Lin e 
Structure. Tho D I U returns ^*6 4 b i t words for each of th e 5 acc e ss e s. Th i s i s d i ff e r e nt from 
tho behav i our in PEC1, wh e ro on e address i s g i v e n and 1 7 data - words were r e turned by 
tho DIU. 

Since th e b e haviour of th e currTfcAddr must bo changed to m ee t th e requirements of tho 
SoPEC DIU i t makes sonso to i nclude tho Y Sca li ng i nto th i s change i.e. a count of tho 
numb e r of comp le t e d sots of 5 access e s to th e D I U i s compared to YSca ie . Only when th i s 
count e quals YScaie can currTfoAddr bo loaded with tho bas e addr e ss of the noxt l i nos Tog 



PEA23US 



419 



Lino Struoturo in DRAM, othorw i so i t i s r e load e d w i th the baso addroQS of tho curr e nt l in e s 
Tag Lino Structure In DRAM. 

-* For Top Lev e l: Th e Top Lov e ) of tho TE has a count e r, LinoPoe, wh i ch I s u se d to 

count the number of comp l et e d output li n e s when i n a tag gap or in a li no of tags. At tho start (i.o. 
5 top l oft hand dot pair) of a gap or tag UnoPoe i s loaded with e ith e r TagGapLine or TagMaxLino. 
Th e valu e of LinePoe is decromontod at l ast dot pa i r i n lin e . Y - Sca l ing may bo accomp l iohod by 
gating th e d e cr e m e nt of UnoPoe bas e d on YScai e valu e 

26.6.3 TE Phys i cal H ie rarchy 

F i gure 188 above ill ustrat e s the structura l hierarchy of tho TE. Tho top l ovol conta i ns the Tog 
10 Data int e rfac e (TD I ), Tag Format Structure (TFS), and an FSM to contro l tho g e n e ration of dot 

pa i rs along w i th a clocked proc e ss to carry out tho PCU road/writ e d e coding. There is also some 
additional logic for muxing tho output data and g e nerating oth e r control signals. 
At tho h i ghest le v e l, th e TE state machin e proc e ss e s th e output lines of a page on e line at a tim e , 
w i th th e starting pos i tion e ith e r i n on intor tag gap or i n a tag (a SoPEC may bo only pr i nt i ng part 
15 of a tag du e to multipl e SoPECs print i ng a singl e l in e ). 

If th e curr e nt position i s w i thin an Int e r tag gap, an output of 0 i s g e n e rat e d. If tho current position 
is w i th i n a tag, tho tag format structure i s us e d to determin e th e va l u e of th e output dot, us i ng tho 
appropriate encoded data bit from th e f i xed or varlabio data buff e rs as n e c e ssary. Tho TE then 
advances along th e l in e of dots, mov i ng through tags and intor tag gaps according to tho tag 
20 plac e ment paramet e rs. 

26.6. 4 l O D e finitions 

Tab l e 1 75. TE Port List 



Port Nam e 



Pins I/O D e scr i ption 



Clocks and R e s e ts 



Pelk 



In SoPEC Functiona l clock. 



prst_n 



G l oba l r e s e t s i gna l . 



Bandstor e S i gnals 



cdu_ e ndofbandstore[21 :5] 4^ Addr e ss of tho ond of tho current band of data. 



256 bit word a l igned DRAM addr e ss. 



odu_startofbandstoro[21 :5] 



4^ 



Addr e ss of tho start of th e current band of data. 



256 - b i t word a l igned DRAM addres 



TE finished band signal to PCU and I CU. 



te finishedband 



PCU Intorfoco data and contro l s i gnals 



pcu_addr[8:2] 



In 



PCU address bus. 7 b i ts are required to d e code 



tho address space for th i s block. 



pcu_dataout[31:0] 



32 



Shar e d writ e data bus from th e PCU. 



to_pcu_data i n[31 :0] 



32 



Out 



Road data bus from th e TE to th e PCU. 



- pcu_rwn 



Common road/not wr i to signa l from tho PCU. 
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pcu_to_sol 



In 



B l ock s el ootfrom th e PCU. Wh e n pGu_t e __s e l i s 
h i gh both pcu_Qddr and poajdatoout aro valid. 



t e _pGu_rdy 



Out 



R e ady signal to th e PCU. When to _poujrdy is 
high it ind i cat e s tho l ast oyolo of the aoooss. For a 



writo cyoio this moans pcujdatQout has boon 



r e g i st e r e d by th e b l ock and for a road cyc le th i s 
m e ans th e data on t e ^pcujdatQin i s valid. 



TD (raw Tag Data) D I U Read I nterface signa l s 



td_diu_rreq 



Out 



TP requests DRAM r e ad. A road requ e st must be 



accompani e d by a valid road address. 



td,diu,radr[21 :6] 



4^ 



Out 



TD r e ad address to DIU. 



17 b i ts wide (256 bit al i gned word). 



d i u td rack 



In 



Acknow le dg e from D I U that TD read r e qu e st has 
be e n accepted and new road addross can bo 



placed on t e jdiujradr. 



diu_data[63:0] 



64 



In 



Data from D I U to TE. 



F i rst 6 4 bits aro bits 63:0 of 256 bit word; 



Second 6 4 b i ts are b i ts 127:6 4 of 256 b i t word; 



Th i rd 6^ b i ts aro bits 101:128 of 256 bit word; 



Fourth 64 bits aro bits 255:102 of 266 bit word. 



diu td rva li d 



lA 



S i gnal from DIU to l ling TD that va li d r e ad data is 
on th e diu data bus. 



TFS (Tag Format Structur e ) DIU Road I ntorfaco signak 



tfs_diu_rroq 



Out TFS requ e sts DRAM r e ad. A r e ad r e qu e st must 



b o a ccompanied by a valid r e ad addr e s 



tfs,diu,radr[21 :5] 



4^ 



Out TFS Road addross to DIU 



17 bits wid e (256 - bit alignod word). 



d i u tfs rack 



Ift Acknowl e dge from D I U that TFS r e ad request has 



been aocoptod and now road addross can b e 
p l aced on tfGjdiu^radr, 



diu_data[63:0] 



64 



In 



Data from D I U to TE. 



F i rst 64 bits aro bits 63:0 of 256 b i t word; 



Second 64 bits aro bits 127:6 4 of 256 bit word; 



Th i rd 6 4 bits aro bits 191:128 of 256 bit word; 



Fourth 6 4- b i ts ar e b i ts 255:192 of 256 b i t word. 



d i u tfs rva l id 



l« S i gna l from DIU telling TFS that va l id r e ad data i s 



on th e diu data bus. 



TFU I nt e rfac e data and control signa l s 



tfu to oktowrite 



In 



R e ady signal i ndicating TFU has spac e ava i lab l e 
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and is roady to bo written to. Aloo assortod from 


the point that tho TFU has rooiovod its oxpootod 


number of bytes for a line until the noxt 


t&_tfu^wfodvlino 


to_tfu_wdata[7:0] 


8 


r\. .f 


Write data for TFU. 


te_tfu_wdatavalid 


4- 


r\i 


Write data valid signal. This signal romains high 
whenever there is valid output data on 


te_tfu_wdQtQ 


te_tfu_wradvline 


4- 


r\t »* 


Advanco lino signal strobed when the last byto in 


a line is placed on te_tfu_wdQtQ 



26.6.5 Configuration Rogistors 

The configuration r e gist e rs i n tho TE aro programm e d v i a tho PCU int e rfaco.Rofor to s e ction 
21 .8.2 on page 1 for tho descript i on of tho protoco l and timing diagrams for read i ng and wr i ting 
regist e rs in th e TE.Not e that sinc e addresses In SoPEC aro byt e aligned and th e PCU only 



5 s upports 32 bit register roads and wr i tes tho l ower 2 bits of the PCU addr e ss bus aro not r e quir e d 
to d e cod e th e address spac e for th e TE.Table 1 76 l i sts th e configuration registers in the TE. 
Registers which address DRAM ar e 64 b i t DRAM word aligned as this is tho cas e for the PEC1 
TE. SoPEC assumes a 256 b i t DRAM word size. I f th e TE can b e e asi l y mod i fiod then th e DRAM 
word addr e ssing shou l d b e mod i fiod to 256 bit word aligned addressing. Oth e rwise, software 
10 should program thoso tho 6 4 b i t word al l gnod addresses on a 256 b i t DRAM word boundary.. 
Table 1 76. TE Configuration Rogistors 



Address 



reg i ster name 



TE baso+ 



/fb i ts value on rosot descript i on 



Control regist e rs 



0x00 



A wr i te to th i s r e g i st e r causes 
a reset of tho TE. 



Th i s r e gist e r can bo r e ad to 



0 — reset in progress 



Indicat e th e r e set state: 



A — r e s e t not In progress 



6e 



0 



Wr i ting 1 to th i s r e gist e r starts 



th e TE. Writ i ng 0 to this 



r e gist e r halts tho TE. 



Wh e n Go i s deassorted tho 



state mach i n e s go to th e ir i dle 



states but a l l count e rs and 



configurat i on rogistors keep 



th e ir va l u e s. 
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Whon Go is aGsortod all 



count e rs are rosot. but con 



r e s e t). N e xtBandEnabio i s 



figurat i on registoro koop tho i r 
va l u e s (i.e. they don't got 



c le arod wh e n Go Is ass e rt e d. 



Th e TFU must bo started 



b e for e th e TE i s started. 



This r e g i ster can b e r e ad to 



determine if th e TE i s runn i ng 
(1 ~ running, 0 - stopped). 



Sotup registers 
(constant for 



processing of a 
page) 



TfsStartAdr 



40 



(§4-brt 



a l ign e d 
DRAM 



addr e ss 



should start at 



a 256 bit 



a l igned l oca 



first TFS l i no in DRAM. 



Points to th e first word of th e 



TfsEndAdr 



Q 



(64-&it 
a li gned 



DRAM 



address 



should start at 



a 256 b i t 



a l ign e d loca 



Points to tho first word of the 



last TFS li no i n DRAM. 



TfsFlrstL l noA 



4« 



9 



df 

(64-b4t 

aligned 

DRAM 



address) 



Po i nts to the f i rst word of the 



f i rst TFS l in e to bo 



e ncount e r e d on tho page. I f 
th e start of tho pag e is i n an 



i nt e r tag gap, then th i s value 



will b e th e same as 



TFSStartAdr sinco th e first tag 
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lino reached will bo the top 
lino of a tog. 




DataRodun 


4- 




Definos the data to 




redundancy ratio for tho Rood 


Solomon encoder. Symbol 
size is always A bits, Codo 
word sizo Is always 1 5 

10 redundancy symbols (40 
bite) 

1 -7 data symbols (28 bits), 8 


redundancy symbols (32 bits) 




Decode2DEn 


4- 




Determines whether or not 




tho data bits aro to bo 2D 
decoded rather than 
redundancy oncodod (oach 2 

A mitniit Hit*! hit''^ 

0 ~ redundancy oncode data 

1 ~ docodo oach 2 bits of 
data into 4 bits 




VariableData 


+ 


Q 


3ofinos whether or not thoro 








there is none, no attempt is 

tag encoding should only 
reference fixed tag data. 




"ncodeFixed 




Q 






is7\^iv^rTi III vvii^nfx.«i \ji 1 iwv 

tho lower 40 (or 56) bits of 
fixod data should bo encoded 


into 120 bits or simolv used 
as is. 




TagMaxDotpa 


S 






VPB 




Tho width of a tag in dot 

pairs, minus 1. 

Minimum 0, Maximum"101. 




TagMaxLino 


9 










The number of lines in a tag, 
minus 1 . 

Minimum 0, Maximum ~ 383. 
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nvft/1 


TagGapDot 


44 


0 


The number of dot pairs 




betwoon tags in the dot 
dimonsion minus 1. 
Only vaiid if 

TagGapPreeentlb'ii 0] ^ 1 . 


0x68 


TagGapLino 


44 


Q 


Dofinos the number of 




dotlines between tags in the 
line dimension minus 1. 
Only valid if 

ragGapProson^bitl] ~ 1. 




Re 


44 


Q 


Number of output dot pairs to 
generate por tag lino. 


Qx7Q 


DotStartTagS 


2 


Q 


Dr'tr'rmirif*^ for tho i\r*^i/e^\/e^n 


cnoo 


(bit 0) and second/odd (bit 1) 
rows of toQS whether or not 
the first dot position of the line 


is in a tag. 


1 - in a tag, 0 - in an inter tag 


0x74 




2 


Q 


Rit n i*^ 1 if thr^rr* 1^ nn tnif^r 




Ull \J to 1 II trll_rl lO 01 1 II ILC7I 

tag gap in tho dot dimonsion, 
and 0 if tags are tightly 

Bit 1 is 1 if thoro is an Intor 
bao gap in the line dimension 


and 0 if tags aro tightly 
packed. 


Qx78 


YScolo 


8 


4 






Tag soalo factor in Y 
direction Output linos to the 
TFU will be generated YScale 


timos. 


0x80 to 


DotStartPoG 


2x44 


9 


Determines for the first/even 






(Q^ and socond/odd rows 


of tags tho number of dotpairs 
remaining minus 1, in oithor 


the tag or inter tag gap at tho 
start of the line. 


0x88 to 0x8C 


NumTags 


2k8 




Dotorminos for tho first/ovon 






and second/odd rows of tags 
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how many tags aro prosont i n 
a l i no (oqualo numb e r of tags 



minus 1). 



S e tup band 



r e lated rogistors 



N e xtBandStar 



tTagDotoAdr 

(6 4 bit 



aligned 



DRAM 



addr e ss 



should start at 



a 256 bit 



a li gn e d loca 



StartTagDataAdr for tho next 



band. This va l ue I s cop ie d to 
StartTagDataAdr wh o n 



NextBandEnablo Is 1, or 
whon Go transitions from 0 to 



Ho l ds tho va l u e of 



Don e Band i s 1 and 



N e xtBandEnd 



QfTagData 
(64-bit 



al i gn e d 



DRAM 
addr e ss) 



Ho l ds tho valuo of 
EndOfTagData for th e next 



band. Thi s valu e i s copi e d to 



EndOfTagData whon 



DonoBand is 1 and 



N e xtBand Enabl e i s 1. or 



when Go transitions from 0 to 



QyQQ 



NextBandFirs 



9 



tTagL i n e 



Holds th e valu e of 
F i rstTagLinoHoight for tho 



next band. This valuo is 



cop ie d to FirstTagLinoHo i ght 



wh e n DoneBand gets Is 1 and 
NextBandEnab le i s 1 , or 



whon Go trans i tions from 0 to 



OxGG 



NextBand Ena 



htf> 



Wh e n NoxtBandEnablo is 1 



and DonoBand i s 1, then 
whon to finishodband is sot 



at tho end of a band: 



N e xtBandStartTagDataAdr is 
copied to StartTagDataAdr 



NextBandEndOfTagData is 
oop l od to EndOfTagData 



PEA23US 



426 



gL i noHoight 



N e xtBandFirstTagLin e Ho i ght 



copiod to F i rstTa - 



■ Don e Bond i s c l oarod 



N e xtBandEnablo is c l eared. 



NoxtBandEnable is cl e ared 



when Go i s ass e rt e d. 



R e ad on l y band 



roiatod r e g i sters 



QyPQ 



DonoBand 



Spoo i fios wh e th e r the tag 
data i nterface has finishod 



loading a ll tho tag data for tho 



band. 



transit i ons from 0 to 1 . 



Whon tho tag data i ntorfaco 



has finishod l oading a ll tho 
tag data for tho band, tho 



t e _finiGhodband s i gna l is 
given out and tho Don e Band 



flag is s e t. 



I f N e xtSandEnabf e is1 at this 



timo th e n GtartTagDatoAdr, 
ondOfT sgData and 



I t is c l eared to 0 whon Go 



ftretTaglinoHoight aro 



updat e d w i th th e values for 



tho next band and DonoBand 



is clear e d. Process i ng of th e 
n e xt band starts imm e d i ately. 



if NoxtBandEnabio i s 0 thon 



th e r e mainder of th e TE wil l 



continue to run,, while tho 



road control unit waits for 



NoxtBandEnabio to b e s e t 



befor e it r e starts. R e ad on l y. 



OxD4 



StartTagData 

Afir 

(64 bit 



a l igned 
DRAM 



Tho start address of tho 



curr e nt row of raw tag data. 



Th i s is Initia ll y po i nts to tho 



first word of th e band's tag 
data, which should be a l igned 



PEA23US 



427 



addr e ss 



should start at 



a 256 b i t 



al i gn e d looa 



should b e 0). Road only. 



o a 128 bit boundary (i.o, tho 
l ow e r b i t of th i s addrooG 



QyQQ 



1« 



a 

(64-bit 



a l ignod 
DRAM 



addr e ss) 



Points to tho address of th e 



fina l tag for tho band. Whon 
all th e tag data up to and 



i nclud i ng addros 



endOfT ogDota hao boon road 



i n, tho to^finiehodband s i gna l 
is giv e n and th e donoBand 



flag is s e t. Road only. 



OxDC 



FirstTagLin e H 9 



0 



Th e number of linos m i nus 1 



in tho first tog oncountorod in 
this band. Th i s w i l l b e e qual 



to TagMaxLino if tho band 
tarts at a tag boundary. 



R e ad on l y. 



Work reg i st e rs (sot 
boforo start i ng tho 



TE and must not 



be touched 



between bands) 



Lin e lnTag 



0 



Dot e rminos whether or not 



tho first line of the page is i n a 
l ine of tags or i n an i nter tag 



i n a tag, 0 — in an i nt e r tag 



9x4«4 



LinoPos 



44 



The number of l inos 



r e ma i n i ng minus 1 , in e ith e r 
the tag or the intor - tag gap i n 



at tho start of tho page. 



0x1 10 to 



TagData 



0x44C 



Th i s 128 bit register must bo 



set up i nit i a l ly w i th th e f i xed 



data r e cord for tho page. Th i s 
i s ei ther th e low e r 4 0 (or 56) 



bits (and th o oncodoFix o d 



PEA23US 



428 



r e g i st e r should bo set), or the 
l owor 120 bits (and 



c le ar). Th e tagData[0] register 



contains the lowor 32 b i ts and 



e ncododFix e d should bo 



tho tagData[3] reg i ster 
contains th e upper 32 bits. 



Th is r e gister is usod 



throughout tho tag e ncod i ng 
proc e ss to ho l d th e n e xt tag's 



variab l e data. 



Work reg i sters (s e t 



int e rnal l y) 
Road on l y from 



th e point of viow of 
PCU register 



access 



0x440 



DetPes 



44 



Q 



dotpairs remaining in o i thor 



th e tag or i nter tag gap. Boos 



D e fines th e number of 



not n ee d to bo setup. 



0x444 



44 



0 



Th e dot pair numb e r being 
gonoratod. 



^(44g 



Dots l nTag 



0 



D e t e rmines whether tho 



current dot pair I s in a tag or 
4 — i n a tag, 0 — in an i nt e r tag 



0x44G 



TagA l tS e nse 



0 



Dotorm i nos whether tho 



production of output dots is 
for th e first (and subs e quent 



ovon) or second (and 
s ubs e qu e nt odd) row of tags 



0x4^ 



CurrTFSAdr 



40 



0 



(64-bit 
aligned 



DRAM 



address) 



Points to tho start next lino of 



tho TPS to bo road i n. 



0x4^ 



R e adsRomai 



Numb e r of r e ads rema i n i ng in 
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I III 



th e curront burst from th e raw 



tag data int e rfaco 



0x1 5C 



CountX 



8 



0 



Tho number of tago romaining 
to b e r e ad (m i nuo 1) by the 



raw tag data i nt e rfaco for tho 



current li no. 



9x4€0 



County 



9 



Th e numb e r of times (minus 
) th e tag data for th e current 



l i n e of tags needs to b e read 



in by th e raw tag data 



int e rfac e . 



RtdTagSonso 



Determ i nos whether tho raw 



tag data i nterfaco i s curr e nt l y 



r e ading ev e n rows of tags 



("0) or odd rows of tags ("1 ) 



with r e sp e ct to th e etart of tho 



pag e . Not e that th i s can bo 



different from tagAltSonso 



sinc e the raw tag data 
interface i s read i ng ahead of 



th e product i on of dots. 



RawTagData 

Adf 

(64 bit 



a li gned 
DRAM 



address) 



Th e current r e ad addr e ss 



w i thin tho unoncoded raw tag 
datar 



10 



Tho PCU access i ble r e gisters ar e divided amongst th e TE top l eve l and th e TE sub b l ocks. This i s 

achieved by i ncluding write decod e rs in the sub blocks as well as tho top l ev el , s ee F i gur e 18 9 . I n 

ord e r to perform r e ads tho sub block reg i sters ore fed to the top l e vel where the road decod e i s 

carr i ed out on a ll the PCU acc e ss i b l e TE r o gist o rs. 

26.6.5. 1 Starting th e TE and r o etarting tho TE botwoon bands 

The TE must be start e d after the TFU. 

For th e f i rst band of data, users s e t up NoxtBandStartTagDataAdr, N e xtBandEndTagData and 
N e xtSandFirstTagLin e H e ight as well as other TE configuration r e g i st e rs. Us e r s th e n s e t the TE's 
Go bit to start process i ng of the band. When tho tag data for tho band has fin i sh e d be i ng 
decoded, tho tojRnishodband i nterrupt w i l l bo sent to tho PCU and ICU i ndicating that the 
m e mory associated with th e f i rst band i s now froo. Process i ng can now start on th e n e xt band of 
tag data. 
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In ordor to procoss th e next band NoxtBandStartTagDataAdr, NoxtBandEndTagData and 
N e xtBandFiretTagUneH e ight n e ed to b e updat e d b e for e wr i ting a 1 to NoxtSandEnabl e . Thore 
ar e A moohon i omG for rostart i ng tho TE botwoon bands: 

a. te_finiehodbQnd caus e s an i nterrupt to th e CPU. The TE wi l l have set i ts DoneBand b i t. Th e 
5 GPy roprograms ti^te NoxtBandStartTagDataAdr, NoxtBandEndTagData and 

N e xtBandFiretTagUn e Height r e g i st e rs, and s e ts N e xtBandEnabi e to restart tho TE. 

b. Th e — QPy — programs th e — TE's N o xtBandStartTagDataAdr, — NoxtBandEndTagData and 
N e xtBandFirstTagLin e l-i e ight r e gist e rs and sets the NoxtBandEnable flag boforo tho ond of tho 
curr e nt band. At tho ond of the ourront band th e TE s e ts DonoBand. As NoxtBandEnabio is 

10 alr e ady 1, tho TE starts proc e ssing the next band i mmod i atoly. 

c. The PCU is programm e d so that to_finish e dt}and triggers tho PCU to oxocuto oommands from 
DRAM to reprogram th e NoxtBandStartTagDataAdr, NoxtBandEndTagData and Noxt 
BandFiretTagLinoH e ight r e g i st e rs and set th e N o xtBandEnabio b i t to start tho TE proc e ssing 
th e n e xt band. Th e advantage of th i s schomo i s that tho CPU could procoss bond hoadors in 

15 advanc e and stor e th e band commands i n DRAM r e ady for e xecut i on. 

d. This is a combination of b ond c abov e . Tho PCU (rather than tho CPU in b) programs tho TE's 
NoxtBandStartTagDataAdr, N o xtBandEndTagData and N e xtBandFiretTagLinoHQigfit r e gist e rs 
and sots tho NoxtBandEnabio b i t boforo tho ond of the curr e nt band. At th e e nd of the curr e nt 
band tho TE sots DonoBand and pu l ses to_finish o dband. As N e xtBandEnabi e i s already 1 , tho 

20 TE starts proc e ss i ng tho noxt band imm e d ia tely. Simu l tanoous l y, toJTinishodband triggers tho 

PCU to fetch commands from DRAM. Tho TE wi ll have restarted by tho tim e th e PCU has 
fetched commands from DRAM. Tho PCU commands program th e TE n e xt band shadow reg 
i stors and s e ts th e N o xtBandEnabio bit. 
After tho first tag on tho page, a l l bands have their first tag start at tho top i.e. 
25 NextBandFiretTagUneHeight - TagMaxLin e , Th e refore tho sam e value of 
NoxtBandFiretTagUnoHoightvAW norma ll y b e us e d for a ll bands. C e rtain l y, 
N e xtBandFirstTagUn o Hoight shou l d not nood to change aftor th e s e cond timo i t i s programmed. 

TE Top Lovo l FSM 

Th e follow i ng d i agram illustrat e s th e stat e s in tho FSM. 
30 At the highest l ovo l , tho TE state machine st e ps through the output linos of a pag e on e l i n e at a 
tim e , with tho starting pos i t i on either i n an int e r - tag gap (s i gnal doteintag ~ 0) or i n a tag (signals 
tfevalid and tdvalid and lin e intag " 1 ) (a SoPEC may bo only printing part of a tag duo to mu l t i p le 
SoPECs pr i nt i ng a single l ino). 

I f th e curr e nt pos i tion is w i th i n an i nt e r tag gap, an output of 0 i s g e nerated. I f tho current pos i t i on 
35 is with i n a tag, tho tag format structure is usod to determ i n e th e va l ue of tho output dot, using th e 

appropr i at e e ncoded data bit from the fixed or var i able data buff e rs as nec e ssary. Th e TE then 

advances a l ong tho l ino of dots, moving through tags and int e r - tag gaps according to tho tag 

plac e m e nt parameters. 

Tablo 177 high li ghts th e s i gnals usod w i thin tho FSM. 
40 Table 177. S i gnals usod within TE top lovol FSM 
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1 oyums puise inoiuuiing lo — i ui gno — i ro sup-diooks lo movG onio ine 
next line of Tag data 


currdotlineadr[1 3:0] 


Addross counter starting 2 pclk ahoad of ourrtagpianeadr to generate the 




uOipOS 


Countor to identify how many dotpairs wide the tag/gap is 


fintiintnn 




Mneintao tenriD 

■ 111 III III 




linopos_shadow 


Shadow register for linepos due to linopos being written to by 2 different 

processes 


talaltsenso 


Fiag which aitornatos between tag/gap linos 


te_state 


FSM state variable 


teplanobuf 


6 bit shift register used to format dotpairs into a byte for the TFU 


wradvlino 


Advance line signal strobed when tho last byte in a lino is placed on 
tejtfu_wdatQ 



Du e to th e 2 eyetom cloak delay in tho TPS (both Tab le A and Tabl e B outputs ar e r e g i st e red) the 
TE FSM is working 2 eyetom oiock oyclos AHEAD of th e log i c generating th e write data for tho 
5 TFU. As a resu l t tho fo l low i ng contro l s i gna l s had to be singlo/doub l e r e g i ster e d on tho eyetom 

clock. 

Tho tQgjdotJine state can b e broken down i nto 3 diff e r e nt stages. 

Stag e l: The state tag_dot_lin e is ent e red du e to the go signal becoming activ e . This stat e 
contro l s the wr i ting of dotbyt e s to the TFU. As l ong as th e tag l in e buff e r addr e ss is not equal to 
10 th e dotpaireperllno r e gist e r valu e and tfu_t e _oktowrit e is active, and ther e is va li d TFS and TD 
ava il abl e or taggaps, dotpairs ore buffered Into bytes and writt e n to th e TFU. Tho tag l i ne buffer 
address is used i nternal l y but not suppl i ed to th e TFU since the TFU is a F I FO rather than tho lin e 
stor e used in PEC1 . 

Whi l o generating tho dotlino of a tag/gap l in e (Hn e intag flag - 1) the dot posit i on count e r dotpoe is 
15 d e cromonted/roload e d (w i th tagmaxdotpa i rs or taggapdot) as the TE mov e s between tags/gaps. 
Th e dotsintag flag i s togg l ed betw ee n tags/gaps (0 for a gap, 1 for a tag). Th i s pattern cont i nues 
unt il tho end of a dotl i ne approach e s (currdotlineadr — dotpaireperlin e ). 

2 eyetom clock cycles b e for e th e e nd of tho dot l ino tho finointag and tagaitGonco s i gnals must be 
prepar e d for tho next dot li ne b e it in a tag/gap dot l ine or a pure l y gap dotl i n e . 
20 Stag e 2: At th i s point the end of a dot li n e i s r e ached so i t is time to decrem e nt th e linopoe countor 
if still i n a tag/gap row or re l oad tho linopoo reg i ster, dotpoe count e r and roprogram the doteintag 
flag i f going onto anoth e r tag/gap or pur e gap row. Any s i gna l w i th tho _temp extens i on moans 
th i s reg i ster i s updated a cycio oarly In order for tho roal rog i stor to got its corroot value whi l o 
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sw i tch i ng b e twoon dot lines and tag rows wh e n dotpoG and iinepoG counters roach zero i.e wh e n 
dotpoe - 0 th e e nd of a tag/gap has boen roachod, wh e n linepoG ~ 0 the e nd of a tag row is 
r e ach e d. This stag e us e s th e s i gna l s lineintagjt e mp and tagafteeneo wh i ch woro gonoratod ono 
syetem clock cyc l e earlier in Stago 1 . 
5 Stag e d: - This stag e impl e m e nts th e wr i t i ng of dotpa i rs to tho corroct part of the 6 bit shift r e g i st e r 
bas e d on th e LSBs of currtagpianoadr and also i mplomontc tho counter for the currtagplan e adr. 
Th e currtagpfan e adr is resot on reaching currtagplan e adr ~ (dotpairep e rfin e — 1 ). All tho qua li fi e r 
signals e .g dotsintag ior th i s stag e ar e d el ay e d by 2 Gyetom clock cyc l os i.o. tho currtagplaneadr 
(which is th e int e rna l writ e addroGO not noodod by th e TFU) cannot bo Increment e d until th e 
10 dotp ai rs aro availabl e which is always 2 Gyetom clock cyc l es l ator than wh e n currdotlinoadr i s 
incr e m e nted. 

Tho wradvlino and advtagllno pu l s e s are gonoratod using tho samo log i c (current l y soparatod i n 
tho PEC1 Tag Encod e r VHDL for c l ar i ty). Both of th e s e pu l ses us e d to update further rog l storo 
h e nc e the reason thoy do not us e th e de l ayed by 2 Gyetom clock cyc le qua li fiers. 

15 26.6.7 Combinat i onal Log i c 

Th e TBI Is r e sponsible for prov i ding th e informat i on data for a tag wh i le tho TFS I is rosponsiblo for 
d e ciding wh e th e r a particu l ar dot on th e tag shou l d bo pr i nt e d as background pattern or tag 
information. Every dot within a tag's boundary is e ith e r an informat i on dot or part of th e 
background pattern. 

20 Tho result i ng l inos of dots ar e stor e d in th e TFU. 

Tho TFS I roads ono Tag Lino Structure (TLS) from tho DIU for ovory dot lino of tags. Doponding 
on tho cun-ont printing position with i n tho tag (indicated by tho signal tagdotnum), tho TFS 
i nt e rfac e outputs dot i nformat i on for two dots and i f n e cessary the corr e sponding r e ad addresses 
for e ncod e d tag data. Th e read addr e ss ar e suppl i ed to tho TB I wh i ch outputs tho corresponding 

25 data va l ues. 

Thes e data values (tdij e tdO and tdijetdl) ar e th e n comb i n e d w i th th e dot information 
(tfeiJtojdotO and tfGi_tojdot1) to produc e th e dot valu e s that wil l actual l y bo printed on tho pago 
(dote), s ee F i gure 192. 

Tho s i gna l lastdotintag i s g e n e rat e d by chock i ng that th e dots aro i n a tag (doteintag ~ 1 ) and that 
30 th e dotpos i tion counter dotpos is equal to zoro. It i s also us e d by th e TFS to load th e i ndex 

addr e ss r e gist e r with z e ros at th e e nd of a tag as this i s always th e starting i ndex when go i ng from 
one tag to the n e xt, laetdotmtag i s gated w i th advtagllno in th e TFS i (Tabl e C) where advJtfGjm e 
pulse i s used to update tho Tab l e C address rog for the new tag li ne this i s because loGtdotintag 
occurs a cycl e earli e r than odvjtfejln e wh i ch would r e su l t i n th e wrong Tab l e C va l uo for tho l ast 
35 dotpa i r. lactdotlntag i s also usod i n th e TB I FSM (otd_sw i tch state) to pulso tho otdjadvtog s i gnal 
hence sw i tch i ng buffers in tho ETBi for th e n e xt tag. 

Tho s i gnal laGtdotintagl is i d e ntical to loGtdotintag e xcept it I s combinator i a l ly g e n e rat e d (1 cyc le 
e arl i er than loGtdotintag, e xc e pt at th e end of a taglino), loGtdotlntagl signal is only us e d in tho TBI 
to reset tho tdvalid o l gnol on tho cycle when dotpoG - 0. Not e th e UNSIGNEB(ct/rr(/otf/nooc/r) " 
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{ JNS \ GNED{dotpaircporlino) - 1 not \ JNS\GNED(currdotlmoQdr) ~ \ JNS \ GNED(dotpQirGporfino) 2 
as i n tho iQGtdotintagjg e n process as th i s i s an combinator i al procoso. 

The dotpoGvaiid signa l is cr e ated basod on boing in a tag li no (lino'intagl - 1), dots b ei ng in a tag 
(dotGintagi - 1), having a va l id tag format s tructur e ava il abl e {tfevafidl ~ 1) and hav i ng oncodod 
5 tag data ava il able {tdvaUdl - 1). Noto that oach of tho qual i fier s i gnals ar e d e layed by 1 polk cycio 
duo to tho rog i storing of Table A output data i nto Tablo C whoro dotpoGvalid is used. Tho 
dotposvafid signal is uood as an onablo to load the Tablo C addroos rog i stor w i th tho next index 
i nto Tablo B wh i ch i n turn provides tho 2 addr e ss e s to mako 2 dots availablo. 
Tho signa l te_tfu_wdQtavalid can on l y be active if in a taggap or i f valid tag data i s ava i lablo 
10 (tdvalid2 and tfGvalid2) and tho GurrtQgpplan e odr{"[ :0) oqual 1 1 i .e. a byt e of data has b ee n 
g e nerated by combining four dotpairs. 

Tho signal tagdotnum tolls tho TFS how many dotpairs rema i n i n a tag/gap. It is calculated by 
subtracting th e value in the dotpoG counter from tho value programmed in tho tagmaxdotpairG 
r e gister. 

15 2§77 Tag Data I nterface (TD i ) 

26.7.1 I /O Specificat i on 

Tablo 178. TDI Port L i st 



iignal namo 



I/O 



Dosoription 



Clocks and Resets 



SoPEC syst e m c l ock 



prst_n 



In 



Act i v e- low, synchronous r e set i n pclk domain. 



D I U Road intorfaco Signa l s 



diu_data[63:0] 



Data from DRAM. 



td_d i u_rroq 



Data r e quest to DRAM. 



td_d i u_radr[21:5] 



Out 



Road address to DRAM. 



diu td rack 



Data acknowledge from DRAM. 



d i u td rva l id 



Data va li d s i gnal from DRAM. 



PCU I nterfac e Data, Control S i gna l s and 



pcu_dataout[31 :0] 



PCU wr i tes this data. 



pcu_addr[8:2] 



PCU acc e ss e s th i s address. 



pcu_rwn 



In 



Global road/writ e not s i gna l from PCU. 



pcu_t e _so l 



In 



PCU selects TE for r/w ooooss. 



pcu_t e _resot 



In 



PCU rosot. 



td t e don e band 



Out 



PCU r e adabl e r e g i sters. 



td to datar e dun 



td to docodo2don 



td_te_var i ab le dataprosont 



td to encod e fix e d 
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td_te_numtagsQ 

td_to_nunntagQl 

td_te_starttagdataadr 

td_te_rawtagdataadr 

td_te_ondoftagdata 

td_to_firsttagiineheight 

td_to_tagdataO 

td_to_tagdata1 

td_te_tagdata2 

td_to_tagdata3 

td_te_countx 

td_tQ_county 

td_te_rtdtagsonse 

td_te_readsremaining 






TFS (Tag Format Structure) 






tfsLadrO[8:0] 




Read address for dotO 


tfsLadr1[8:0] 


In 


Read address for dot1 


Bandstoro Signals 


Gdu_startofbandstore[24:0] 




Start momory area allooatod for pago bands 






cdu_endofbandstore[24:0] 


In 


Last address of the memory allocatod for pago 
bands 


tejnishedband 


Out 


Tag onoodor band finished 



26.7.2 Introduct i on 

Th e tag data int e rfac e is r e spons i b l o for obta i ning th e raw tag data and encoding it as r e qu i r e d by 
tho tag oncodor. Tho smo l lost typ i ca l tag p l acomont Is 2mm >< 2mm. which moans a tag i s at least 
126 1600 dpi dots wide. 

5 I n PEC1 , i n ord e r to k ee p up with th e HCU which proc e ss e s 2 dots por cyc le , tho tag data 
i nt e rfac e has boon designed to bo capab l e of oncoding a tag in 63 cyc le s. Th i s i s actual l y 
accomp l ish e d In approximat e ly 52 cyc le s with i n PEC1 . For SoPEC th e TE nood only produc e ono 
dot por cyclo; it shou l d bo ablo to produce tags in no more than tw i ce tho tim e tak e n by th e PEC1 
TE. Moreov e r, any change in imp le m e ntation from two dots to on e dot p e r cyc le should not los e 

10 th e 63/52 cycl e performance odgo attained in th e PEC1 TE. 

As shown in Figur e 198, th e tag data i nterfac e conta i ns a raw tag data int e rfac e FSM that fotchos 
tag data from DRAM, two symbo l at a time GF(2 '* ) R ee d - Solomon e ncod e rs, an e ncod e d data 
interfac e and a stat o mach i ne for control li ng tho encoding proc e ss. It a l so contains a tagData 
reg i ster that needs to bo s e t up to hold tho fixed tag data for the page. 

15 The typ e of e ncod i ng us e d depends on the r e gist e rs TE_oncodeffx e d, TE_datar e dun and 
TE_d e code2d e n th e options b e ing. 
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^ (15,5) RS cod i ng, wh e r e e v e ry 5 input symbols are us e d to produco 15 output symbo l s, go 

tho output is 3 timos tho sizo of the i nput. This can bo performed on fixod and variab l e tag 

(15,7) RS cod i ng, where ovory 7 input oymbo l o are used to produco 15 output symbols, so 

5 for th e sam e numb e r of input symbols, th e output i s not as largo as tho (15,5) code (for 

more detai l s see section 26.7.6 on pag e 1). This con bo performed on fixod and var i ab l e 
tag data. 

2D decod i ng, whore each 2 i nput b i ts ar e us e d to produce A output b i ts. Th i s can bo 

p e rformed on fix e d and var i ablo tag data. 

10 no cod i ng, wh e r e th e data i s simply passed i nto tho Encoded Data Interface. This can be 

performed on fixod data only. 
Each tag is mado up of fix e d tog data ( i . e . this data is tho sam e for each tag on tho pag e ) and 
variab l e tag data ( i .e. d i ff e r e nt for each tag on th e pag e ). 

Fix e d tag data i s ei ther stored i n DRAM as 120 - bits wh e n i t is alr e ady coded (or no coding i s 
15 r e quired), 10 b i ts wh e n (15,5) cod i ng i s r e qu i red or 56 b i ts when (15,7) coding is required. Once 
tho fixed tag data is coded It i s 120 bits long. It is then stor e d in the Encod e d Tag Data Int e rface. 
Th e var i ab le tag data is stored i n the DRAM In uncoded form. Whon (15,5) coding i s required, tho 
120 - b i ts stor e d i n DRAM are encoded into 360 bits. When (15,7) coding i s requir e d, th e 112 b i ts 
stored i n DRAM are oncodod into 2 4 0 b i ts. Wh o n 2D decoding is r e quir e d tho 120 bits stored in 
20 DRAM aro converted into 210 bits. In each case the encoded bits are stored in tho Encoded Tag 
Data Int e rfac e . 

Th o encoded fixed and variabl e tag data ar e oventually us e d to pr i nt the tag. 
Th e fixed tag data i s loaded i n onc e from th e DRAM at th e start of a page. I t is oncodod as 
necessary and is then stored i n on e of th e 8x1 5 b i ts rogisters/RAMs i n tho Encod e d Tag Data 
25 I nterface. This data rema i ns unchanged in the rogisters/RAMs unt il the next pag e Is r e ady to be 
processed. 

Th e 120 - bits of unoncod e d var i ab l o tag data for each tag is stored i n four 32 b i t words. The TE re 
roads tho var i able tag data, for a particular tag from DRAM, every t i me i t produc e s that tag. Tho 
var i ablo tag data F I FO which reads from DRAM has enough space to store A tags. 

30 26. 7. 2. 1 BandGtoro wrapping 

Both TD and TPS storag e i n DRAM can wrap around tho bandstoro aroa. Tho bounds of tho band 
stor e ar e d e scr i bod by inputs from th e CDU shown in Tabl e . Tho TD and TFS DRAM int e rfac e s 
th e r e fore support bandstore wrapp i ng. If the TD or TFS DRAM i ntorfaco i ncrements an address i t 
i s ch e ck e d to s ee i f i t matches the e nd of bandstoro address. If so, then tho address i s mapp e d to 

35 th e start of tho bandotoro. 
Data F l ow 

An ov e rv ie w of th e dataflow through the TD I can be s e en in F i gure 198 b el ow. 
The TD i nterface consists of the fol l owing main sect i ons: 

th e Raw Tag Data Intorfaco fetches tag data from DRAM; 

40 th e tag data rog i otor; 
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2 R ee d So l omon e ncod e rs — oaoh onoodos one ^ bit symbo l at a t i me; 

^ the Encoded Tag Data i nterfac e supp lie s encoded tog data for output; 

^ Two 2D d e cod e rs. 

Tho main porformance specif i cation for PEC1 is that the TE must b e abl e to output data at a 
5 continuous rat e of 2 dots p e r cycl e . 
26.7.1 Raw tag data i ntorfaco 

The raw tag data interfac e (RTD i ) provides a s i mp le m e ans of access i ng raw tag data in DRAM. 
Th e RTDI pass e s tag data i nto a FIFO whoro it can be subsequently r e ad as roquirod. Tho 6*1 b i t 
output from th e FIFO can b e read dir e ctly, w i th th e valu e of th e wr_rd_count e r b e ing us e d to 
10 set/r e set as th e enab l e signal (rtdAvaif). Tho F I FO is clock e d out with rece i pt of an rtdRd s i gna l 
from th e TS FSM. 

Figur e 199 shows a block diagram of tho raw tag data i ntorfaco. 
26.7.4:1 RTDI FSM 

Tho RTD i state mach i ne is rosponsiblo for keeping tho row tag F I FO full. Th e state machin e r e ads 
15 th e l in e of tag data onc e for e ach Printline that us e s th e tag. This moans a g i v e n l i no of tag data 
w ill b e r e ad TagHoight M x m s B. Typically this w i l l bo 126 tim e s or more, based on an approximately 
2mm tag. Note that tho first l i no of tag data may be road few e r t i m e s sinc e tho start of th e page 
may be w i thin a tag. In addition odd and e v e n rows of tags may contain d i ffer e nt numb e rs of tags. 
Sect i on 26.6.5.1 outi l nos how to start tho TE and restart it b e tw ee n bands. Us e rs must sot tho 
20 NoxtBondStartTagDataAdn N e xtBandEndOfTagData, NextBandFirstTagLinoHeight and 
numTagG[0], numTage[1] r e g i st e rs b e for e starting tho TE by assort i ng Go. 
To restart the tag e ncod e r for s e cond and subs e qu e nt bands of a pag e , tho 
N e xtBandStartTagDatoAdr, N e xtSandEndOfTagData and N e xtSandFiretTagLineHQight r e g i st e rs 
nood to bo updated (typ i cal l y numTagelO] and numTags[1] wil l b e tho samo if tho prev i ous band 
25 contains an oven number of tog rows) and NextBandEnabl e s e t. S ee Sootion 26.6.5.1 for a fu ll 
d e scr i ption of th e four ways of roprogramm i ng tho TE between bands. 

Th e tag data i s road once for e very pr i nt li no conta i ning tags. When maximally packod, a row of 
tags contains 163 tags (soo Tab le n pago 4 65 on pag e 1 ). 

Tho RTD I State F l ow diagram is shown in F i gur e 200. An explanat i on of th e stat e s follows: 
30 idio Gtato: Stay in tho idlo stat e i f th e r e is no var i ab le data pres e nt. I f there Is variabl e data 

pres e nt and th e r e are at l e ast 4 spac e s le ft in the F I FO th e n r e qu e st a burst of 2 tags from tho 
DRAM (1 * 256b i ts). Counter Gountx I s assigned th e number of tags i n a ovon/odd l i n e which 
d e p e nds on tho valuo of reg i ster rtdtageonse, Down counter county is ass i gned tho number of dot 
l i n e s h i gh a tag wi l l b e (min 126). I nitial l y it must bo s e t tho fircttagiin e h e ight va l u e as th e TE may 
35 b e b e tw ee n pages ( i . e . a partial tag). For normal tag g e neration coi/nfy wi l l take tho va l uo of 
tagmaxlino register. 

diu_acc e GS> Th e diu_accoss stat e w i l l gonorato a r e quest to tho DRAM if thero are at l e ast 4 
spaces i n th e FIFO. Th i s i s i ndicated by tho counter wr_rdLcountor wh i ch i s 
incrom e nt e d/decromont e d on writes/reads of tho F I FO. As l ong as wr_rd_counter is l ess than 4 
40 (F I FO i s 8 h i gh) there must bo 4 locat i ons free. A contro l s i gnal ca ll ed tdjdiu_rQdrvaUd is 
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g e n e ratod for th e durat i on of tho DRAM burst aoo e ss. Addrossos aro Gont i n bursto of 1 . Tho 
counter buretjoount controls this s i gna l , (wil l i nvo l vo modifioat i on to ox i oting TE oodo.) 
I f thoro is an odd numb e r of tags in l in e th e n the last DRA I VI road w il l contain a tag in th e first 128 
bits and padding i n the final 128 bits. 
5 fffojoad: This state controls tho addressing to the DRAM. Count e rs countx and county ar e us e d 
to monitor whether tho TE is proc e ssing a li n e of dots within a row of tags. When countx is z e ro i t 
m e ans a l l tag dots for this row are comp l ete. Whon county i s zoro it moans tho TE is on th e l ast 
li ne of dots (pr i or to Y scaling) for this row of tags. Whon a row of tags i s comp l oto tho sonso of 
rtdtags e nGO is i nverted (odd/ e v e n). The rawtagdataadr is compar o d to th e to_ondoftagdata 

10 addrosG. I f rawtagdataadr ~ e ndoftogdata the donoband s i gna l is sot, tho finishodband signal is 
pu l sed, and tho FSM enters tho rtd_ctall stat e unti l tho donoband s i gna l is rosot to z e ro by tho 
PCU by wh i ch t i me tho rawtagdata, ondoftagedata and firettaglinotioight rogiotors aro setup w i th 
new va l ues to restart tho TE. Th i s stat e is used to count th e 6 4 b i t roads from tho D I U. Each t i m e 
diujtdjrvalid i s h i gh rtdjdatajcount i s incr e mented by 1 . Th e compare of rtdjdatojcount ~ 

15 rtd_num i s necessary to find out wh e n either al l 4*6 ^ 1 b i t data has boon rocoivod or n*6 ' 1 bit data 
(depending on a match of rawtagdataadr - endoftogdata in the m i ddle of a set of 4 *6 4- b i t values 
b ei ng r e turned by tho D I U. 

rtd_6tall: This state wa i ts for the the donoband s i gna l to be r e s e t (s ee pag e 1 for a d e scr i ption of 
how th i s occurs). Onc e res e t th e FSM r e turns to the i dio stat e . This states also performs the 
20 sam e count on tho diujdata read as abov e in tho caso wh e re diu_td_rvalid h a s not gon e high by 
the t i me th e addressing is comp l ete and th e e nd of band data has boon r e ached i . e . 

rawtagdataadr - ondoftagdata 

26.7.5 — TB I stat e machine 

The tag data stat e machine has two process i ng phas e s. The first process i ng phas e i s to e ncod e 
25 tho fixod tag data stored i n tho 128 bit (2 >< 6i b i t) tag data r e g i ster. Tho s e cond i s to e ncode tag 
data as it is required by tho tag encod e r. 

When tho Tag Encoder is start e d up, tho fixod tag data i s already preloaded in th e 128 bit tag 
data r e cord. If oncodoFix e d is sot, then th e 2 codewords stor e d in the lower b i ts of th e tag data 
record nood to bo encod e d: 4 0 bits if datoR e dun - 0, and 56 bits i f dataRodun - 1 . If oncodoFixod 
30 i s cl e ar, then tho lower 120 b i ts of th e tag data record must b e passed to tho encoded tag data 
i nterface without be i ng e ncod e d. 

Wh e n e ncod e Fix e d i s set, tho symbols d e r i ved from cod e word 0 aro writt e n to cod e word 6 and 
tho cymbolc derived from codeword 1 aro writt e n to codeword 7. Th e data symbo l s are stor e d first 
and then tho remain i ng r e dundancy symbols aro stored aft e rwards, for a tota l of 15 symbo l s. 
35 Thus, whon datoRedun - 0, th e 5 symbo l s der i ved from bits 0 19 aro wr i tten to symbo l s 0 4 , and 
the redundancy symbo l s aro writt e n to symbo l s 5 1 4 . Whon dataRedun - 1 , th e 7 symbols 
d e r i ved from bits 0 27 are wr i tt e n to symbo l s 0 6, and th e r e dundancy symbo l s aro written to 
symbols 7 14. 

When oncodoFixed is clear, th e 120 bits of fixed data is copied d i rectly to codewords 6 and 7. 
40 The TBI State Flow diagram is shown in F i gur e 202. An e xplanation of th e stat e s fo l lows. 

PEA23US 438 



idio: I n tho idio stato wait for tho tag oncodor go s i gna l — top_go ~ 1 . Thp first taok io to oithor 
storo or e ncod e th e F i x e d data. Onc e th e Fix e d data i s stored or encodod/storod tho donofixod 
flag is s e t. I f thoro i s no variab l e data tho FSM returns to the idio stat e h e nco tho reason to chock 
tho donofixod f \ ag before advancing i.e. only store/oncod e th e f i xed data once. 
5 fix e djdata: - I n th e fix e d_data stato tho FSM must d e cod e whether to dir e ct l y storo tho fixed data 
in th e ETD i or if th e fix e d data noods to bo e i ther (1 5:5) (^0 b i ts) or (1 5:7) (56 bits) RS e ncoded or 
2D d e cod e d. Th e va l ues stored i n registers oncodofixod and datarodun and d e codo2don 
determine what th e n e xt stato should b e . 

bypasG_to__otdi: The bypQSG_to_otdi takes 120 bits of fix e d data(pre encoded) from the 

10 tag_dota( 127:0) r e gist e r and stores it in the 15*8 (by 2 for simu l tan e ous reads) buffers. The data 
is passed from th e tagjdata register through 3 l eve l s of muxing (leveH, l evoi2, Ievel3) wh e r e it 
e nters tho RS0/RS1 encoders (which ar e now i n a straight through mod e ( i .e. oontrolJS and 
oontrolJT are zero henco tho data passes stra i ght from th e i nput to th e output). Th e MSBs of tho 
otdj i MTjadr must be high to store this data as cod e words 6,7. 

15 e td_buf_ewitch: This stat e is us e d to s e t tho tdvalid signa l and puls e tho otd_j3dvjtag signal 
which in turn Is used to sw i tch tho read write sense of tho ETD i buffers (msbO). Th e firsttim e 
signal i s used to identify the first time a tag is encoded. I f zero it m e ans r e ad th e tag data from tho 
RTDi F I FO and e ncod e . Once encoded and stored the FSM r e turns to this state where i t 
e valuates th e sense of tdvalid. First time around it w i ll b e z e ro so this s e ts tdvalid and r e turns to 

20 th e roadtagdata stato to fill the 2nd ETDi buff e r. Aft e r this the FSM r e turns to th i s state and wait s 
for th e loGtdotintag signal to arr i ve. I n between tags when the lastdet i ngtag signa l is rece i ved the 
e tdjadvjtag is pulsod and the FSM go e s to th e readtagdata stato. However i f the lastdotintag 
s i gnal arrives at tho end of a l ine there is an extra 1 cyc le de l ay i ntroduc e d i n g e n e rat i ng tho 
e tdjadvjtag puls e (v i a otdjadvjtagjondoflin e ) du e to tho pipe li n i ng in th e TFS. Th i s a l lows all th e 

25 prev i ous tag to bo road from th e corr e ct buffer and s e amless transfer to the other buffer for tho 
n e xt l in e . 

roadtagdata: ■ The r e adtagdata state waits to r e ceive a rtdavail signal from th e raw tag data 
int e rface wh i ch indicates there i s raw tag data avai l ab le . The tagjdata r e g i st e r is 128 bits so i t 
tak e s 2 pu l ses of the rtdrd s i gnal to get the 2*6 4 b i ts i nto th e tagjdata register. I f the rtdavail 

30 signa l i s s e t rtdrd is pu l sed for 1 cycle and th e FSM steps onto th e l eadtagdata state. I nit i al l y th e 
flag fircte^bite wil l be zero. The 6^ bits of rtd ar e ass i gned to the tagjdata[63:0] and tho flag 
firste^bfte is set to i ndicat e the first raw tag data road i s comp le t e . The FSM then st e ps back to 
tho road_tagdata state where i t generates th e second rtdrd puls e . Th e FSM th e n st e ps onto th e 
l oadtagdata stato for wh e r e th e s e cond 6 4 b i ts of rawtag data ar e ass i gn e d to tag jdata[1 28:64]. 

35 loadtagdata: Tho loadtagdata stat e wr i tes th e raw tag data into tho tagjdata reg i ster from tho 

RTD i F I FO. The fir€t64bite flag is reset to zero as th e tagjdata reg i st e r now contains 120/11 2 b i ts 
of variable data. A decode of whether to (15:5) or (15:7) RS encod e or 2D decode this data 
d e cid e s the n e xt state. 

re_15_5: Th e rs_15_5 (Reed Solomon (15:5) mode) stato either oncedos 40 - b i t F i xed data or 
40 120 b i t Variab l e data and prov i des tho encoded tag data write address and write enab l e 
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{ e td_wr_adr and e tdwe r e sp e ct i vo l y). Once the fixod tag data is onood e d tho donefixod flag is set 
as th i s only n e eds to bo done onoo per pag e . Th e variablodatapree e nt register is then polled to 
se e if there is variab l e data i n th e tags. If thoro is var i abl e data prosont thon this data must bo 
r e ad from th e RTD i and l oaded i nto tho tQgjdatQ regist e r. Else th e tdvalid^ \ ag must bo sot and 
5 FSM r e turns to tho i dl e stat e . controLS i s a control bit for th e RS Encoder and contro l s 
feodfonrt^ard and foodback mux e s that e nable (15:5) e ncod i ng. 

The rs_15_6 state a l so gonoratos tho control signa l s for passing 120 b i ts of variab l o tag data to 
tho RS oncodor in ^ b i t symbo l s per clock cyclo. rencount e r is usod both to control tho lov e l1_mux 
and act as th e 15 cyc l e counter of tho RS Encoder. Th i s logic cyc l es for a total of 3*15 cyc l es to 
10 encod e th e 120 bits. 

r6_16_7: Tho rs_15_7 stat e is sim i lar to th e rs_15_5 state except th e Ieve l 1_mux has to select 7 
4- b i t symbols inst e ad of 5. 

dooodo_2d_15J5, docodo_2d_15_7: Tho docodo_2d states provid e s th e control s i gnals for 
pass i ng th e 120 bit variab le data to th e 2D decoder. Th e 2 Isbs ar e d e coded to creat e 4 bits. Tho 

15 A bits from e ach d e cod e r ar e comb i ned and stored i n tho ETD i . Next tho 2 MSBo ore docodod to 
create 4 bits. Again th e 4 bits from each d e cod e r ar e combined and stored in tho ETD i . 
As can be soon from Figur e n pago 4 88 on pago Error! Bookmark not dofinod. th e re are 3 
stag e s of mux i ng between th e Tag Data r e g i st e r and tho RS e ncod e rs or 2D decod e rs. L e vels 1 2 
arc contro l lod by lov o l1_mux and /0v^e/2_mi/x which are generated with i n th e TD i FSM as is th e 

20 writ e addr e ss to th e ETDi buff e rs ( e td_wr_adr) 

Figures 203 through 208 il lustrate tho mappings usod to store tho encoded fixed and var i ab l e tag 
data in th e ETD I buffers. 

26.7.6 Rood Solomon (RS) Encoder 

26.7.7 Introduction 

25 A R ee d So l omon code is a non b i nary, block codo. If a symbo l consists of m b i ts thon th e r e are q 
=^* " possib le symbols d e f i n i ng th e cod e alphab e t. I n th e TE, m - 4 so tho numb e r of poss i b l e 
symbo l s is q ^ 16. 

An (n,k) RS cod e is a b l ock cod e w i th k i nformation symbo l s and n codo word symbols. RS codes 
hav e th e property that th e code word n is limit e d to at most q+1 symbols in l ength. 
30 I n tho case of th e TE. both (15,5) and (15,7) RS codes can be us e d. Th i s m e ans that up to 5 and 
A symbols r e sp e ctive l y can bo corrected. 

Only one typ e of RS coder i s usod at any part i cular time. Tho RS cod e r to b e us e d i s d e t e rm i n e d 
by the regist e rs TE_dataredun and TEjdocodo2don: 

TE_datar e dun - 0 and TE_dooodo2don - 0, thon use tho (15,5) RS coder 

35 ^ TEjdatarodur} - 1 and TEjd e cod e 2d e ri - 0. then uso tho (15,7) RS coder 

For a (15,k) RS code with m - 4, k ^ bit i nformation symbo l s app lie d to th e cod e r produce 15 4- b i t 

codeword symbols at th e output. I n tho TE, tho codo i s syotomat i c so tho f i rst k codeword symbo l s 

are th e same th e as th e k input informat i on symbols. 

A simp le b l ock d i agram can bo soon i n. 
40 26.7.8 I /O Sp e cificat i on 
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A I/O diagram of tho RS oncodor can bo soon in» 
26.7.9 Propos e d impi e m e ntat i on 

I n tho caso of tho TE, (15,5) and (16,7) codos aro to bo usod w i th 4 b i ts por oymboL 
The primitivo po l ynom i a l i s p(x) - + x + 1 
5 I n th e case of tho (15,5) cod e , this g i vos a generator po l ynomia l of 

§{x)^=-(x+a)(x*a'')(j^ 

10 ^ 

I n th e case of th e (15,7) codo, th i s givos a g e n e rator polynomia l of 

h(x) (x ^'o)(x*^3 )(x^'a )(x"^a )(X'^a )(x^a )(x"^a )(x'^a ^ 
Mx)-=^®-*-«^x^-^V-t-aV-*-aV-^'^x^-^ 
h(x) - x^ + h7X^ -M^^^--M^^-^4X ^ * h^^ -^^'-haX^-^M HX ^ ho 
15 Th e output codo words are produc e d by divid i ng tho gonorator po l ynomia l i nto a po l ynom i a l mad e 
up from the input symbols. 

This d i vision is accomplished using tho circuit shown in Figure 21 1 , 

Tho data in tho circu i t ar e Galo i s Fi e ld e l e m e nts so addition and multipl i cat i on aro performed 
using special circu i try. Thoso ar e e xpla i n e d in tho n e xt s e ct i ons. 
20 Tho RS coder can oporato c ither i n (15,5) or (15,7) mod e . The soloction is made by tho registers 
TE_dQtQrodun and TE_docodo2don, 

Whon operating in (15,5) modo Gontrol_7 is always z e ro and when op e rating i n (15.7) mod e 
controi_5 i s always z e ro. 

First l y consid e r (15,5) modo i .o. TE_datQredun is sot to zoro. 

25 For each new sot of 5 i nput symbo l s, proc e ss i ng i s as fo ll ows: 

Th e A b i ts of th e first symbo l dy aro fed to the input port rejdQtQ_in{3:0) and control_5 is sot to 0. 
mux2 is s e t so as to use tho output as fe e dback. control_6 i s zoro so mux4 s e lects th e i nput 
{rs_datQjn) as tho output (rG_dota_out). Onc e the data has sett l ed (« 1 cycle), tho sh i ft rog i stors 
are c l ocked. Th e next symbol ^4 i s then app l i e d to th e i nput, and again after tho data has s e ttl e d 

30 th e sh i ft rog i stors are clocked again. This i s ropoat e d for tho noxt 3 symbols c/^, d^ and c/ ^^As^ 

r e sult, th e first 5 outputs ar e th e same as th e inputs. After 5 cycles, tho sh i ft rogistors now contain 
th e next 10 r e qu i r e d outputs. control_5 i s sot to 1 for tho noxt 10 oyolos so that zoros are fed back 
by mux2 and the shift reg i st e r va l ues aro fed to tho output by mux3 and mux4 by s i mp l y clock i ng 
tho rog i stors. 

35 A tim i ng d i agram i s shown below. 

Secondly oonsidor (1 5,7) modo i . e . TEjdatQrodun i s s e t to one. 

I n this caso processing is s i m i lar to above e xc e pt that confro/_7 stays l ow whilo 7 symbols (t/g, d^ 
... d^) are fed i n. As wel l as bo i ng f e d back into the circu i t, th e s e symbols aro fod to th e output. 
After th e s e 7 cycl e s, controlJT is sot to 1 and the contents of th e sh i ft r e g i sters are f e d to th e 
40 output. 
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A timing diagram is shown bolow. 

Tho onabio signal con be used to start/r e set the counter and tho shift rogistors. 
Th e RS e ncoders can b e des i gned so that e ncod i ng start s on a r i s i ng onabio odgo. After 15 
symbo l s hav e boon output, th e oncodor stops unti l a ris i ng e noblo edg e i s d e tected. As a resu l t 
5 ther e wi ll bo a delay betwoon each codeword. 

Alt e rnat i v el y, once tho e nable goes h i gh th e shift r e gisters are r e set and oncod i ng wil l procood 
until it is told to stop, rajdotajn must be suppl ie d at tho correct tim e . Us i ng this method, data can 
b e cont i nuously output at a rate of 1 symbol per oydo, oven ov e r a few codewords. 
A l t e rnativo l y, tho RS oncodor can r o qu o st dat a as it roquir o s. 
10 Th e p e rformance crit e rion that must be mot is that tho fol l ow i ng must bo carr i od out with i n 63 
cycl e s 

^ load on e tag's raw data i nto TEJtQgdatQ 

^ e ncod e the raw tag data 

stor e tho encoded tag data in the Encoded Tag Data Intorfaco 

15 I n th e cas e of the raw fix e d tag data at tho start of a pag e , there i s no def i nite porformanco 
crit e r i on exc e pt that i t shou l d bo onoodod and stored as fast as poss i ble. 
26.7.10 — Galois Fi el d el ements and their roprosontation 

A Galois Field is a s e t of olomonts in which we can do addition, subtraction, mult i plication and 
division without leaving tho sot. 
20 Th e TE USPS RS oncoding ovor the Ga l ois Fi e ld GF(2 ' ^). Th e r e are 2"^ e l e m e nts in GF(2'*) and they 
arc gonoratod using th e pr i mitiv e po l ynomia l p(x) - x^ + x + 1 . 

Th e 16 e lem e nts of GF(2^) can b e r e present e d in a number of different ways. Table 1 79 shows 
thr ee possib l e representat i ons — th e power, po l ynomial and 4 tupl e repr e s e ntation. 
Tab l e 170. GF(2^) r e presentations 

25 



power^ # 


Polynomial # -4 
Representation % 


4-tuple^ J 7€ 
representatiori^ 


repr^entotion^ . 




(afl.ala2ia3)-i . 


0 


0 


(0 0 0 0) 


4- 


4- 


(1 0 0 0) 


^ 


X 


(0 10 0) 




□□□□□□□□□□□□□x^ 


(0 0 10) 








X* 


(0 0 0 1) 








1 *x 


(110 0) 


«^ 


— x-t-x* 


(0 110) 


a'' 


2 i 

X -(-X 


(0 0 11) 


et^ 


1 * X □□□□□□□ < 


(110 1) 






a* 


A i-x' 


(10 10) 


et" 




(0 10 1) 
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xDDDDDaaDDl 






1 + X 1 X^- 


(1110) 




X 1 X^H-^^ 


(0 111) 




1 + X ( X^H-X^ 


(1111) 




1 ^^-h^* 


(10 11) 








r1 h-x* 


(10 0 1) 







26,7.11 — Multip li cat i on of GF(2 '': 
Th e multipl i cat i on of two fi e ld olomonts and i s d e fin e d as 



et -=-€t T€fr -=H 



4 2 3 

^^^^^^ 

So if w e have tho ol e ments i n e xpon e ntial form, multip l ication is simply a matter of modu l o 15 
addition. 

I f the o l omonts aro i n polynom i al/tupio form, th e po l ynomia l s must bo multipl i od and roducod mod 
+ X + 1 . 

Suppos e w e wish to mu l tiply the two field olomonts i n GF(2^ >f 

wh e r e a,, ar e i n the field (0,1) ( i .o. modulo 2 orithmot i c) 

Mu l t i p l ying thoso out and using x + 1 - 0 wo got: 

a^-=-{(aob3-4^b a + a g b 4 -*-aab 9) + a^bjx^ 

* [(aoba ^ 34 ^ 4 + aabo H^b a ^ (a^bj^ * ojy^ ^ 

'*4(aob8-*^4fe 3 a^bg + a^ b^^ 

- [aoba a4ba + a a b 4 + a^Cbo + bg)]x^ 

'h [aob2 * 34 ^4 * Mbo * b^) * a^Cb^ ^ b^) 

■*4Qofe4-"*^4(fe 9 ^ ba) + a^(b^ + b^) * aj b ^ * ba) ]x 



I f w e wish to mu l t i p l y an arb i trary f i eld e l e m e nt by a fixed field ele m e nt w e got a more simp le 
form. Suppose we w i sh to mu l tiply a ^-by-ee^T 

In this case a^ -=-x ^ so (aO a1 a2 a3) - (0 0 0 1 ). Subst i tuting th i s i nto tho above equat i on giv e s 

Th i s can bo i mplomontod using s i mple XOR gat e s as shown in Figure 21 4 
26.7.1 2 Add i t i on of GF(2^) ele m e nts 

If tho o l omonts aro i n the i r po l ynomla l /tupio form, po l ynom i a l s are s i mply added. 
Suppose we wish to add tho two fie l d o l omonts i n Gf{2% 
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whero a^, b, ar e in the f i o l d (0,1 ) ( i .e. modulo 2 ar i thmotio) 

"{04^ ^ (aa b2 )x^-*4a^-^ 4)x ^ (Ou * bo ) 
5 Aga i n this can b e implomontod us i ng s impl e XOR gat e s as shown in Figuro 215 
26.7.13 — R ee d So l omon Imp l em e ntation 

Th e d e signer can d e cid e to oroato tho rolovant addit i on and multip l ication oircuits and i nstantiate 
th e m wh e re necessary. A l t e rnative l y the foodbaok mu l tiplications can b e combin e d as follows. 
Consid e r th e mu l tiplication 
10 a^^^--^^ 

or in terms of po l ynomia l s 

i^^^*-a^^'^*-^bi X ^ aa).(b^^ + b aX^ -^4 X ■^ b^) ~ (o^ ^"=*--^^-^4X-* 

I f w e subst i tut e ail of tho possibio fio l d oloments in for and expross i n t e rms of a^ w e g e t th e 
15 table of resu l ts shown i n Toblo 1 80. 

Tab l e 180. mult i p l ied by all field el ements, e xpr e ss e d in terms of 



aa.-- a3x3 ^ a2x2^a1x^g0 










field ^ 


(aOal a2a3)„ 










Q 


(0 0 0 0) 










4- 


(1 0 0 0) 










a 


(0 10 0) 




bg+b^ 


b* 






(0 0 10) 






be+ba 


b4 




(0 0 0 1) 






b3-»*3 


bo^ 


et* 


(110 0) 




b^^" b^'^b^ 


b^-i-ba 


b^+ba 


a* 


(0 110) 




bo'^bg 


bg^^^^b^ 


b+^bg 


a" 


(0 0 11) 


b:^*b3 


^+*b3 


bg*b2 


bo+b4^ 




(110 1) 


be^4^ 




b^^ 


bo^3 




(10 10) 




b^^a**^ 


bg^bg^'b^ 


b4*ba 




(0 10 1) 








bo^bg+bs 




bo^b+^bg^b^ 


b^+ba+ba 




(1110) 




bQ'^b4.'^by 




b^'^^bg'^bg 




bo^4+bg+b^ 




(0 111) 


h.+hn4'h-, 

wq- fc'X "^o 




bg"^ b4.'^*b3 


bo'^b^*^ bg 




(1111) 


b^*^ b^"^ bjj'^^ bg 


be 


bo*b+ 


bo^^4'**b2 




(10 11) 


b0^4^*^ 




bo 


bo*fe4 




(100 1) 


bo*b4 


ba 
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the fo l low i ng s i gnals ar e r e qu i r e d: 

• ( bo^*^^), (bQ^*^2)i (bg+b^), (b^+bg), (b4+b3), (b^'**b3)7 
■ (bu * b4 .*b ^). (btf*b4*bj , (btf*b^ * bj), (b »*ba*bj), 

5 /h j L+ h-i+hiL+ hi\ 

Th e i mplementat i on of tho c i rcuit can bo ooon in F i guro . Tho ma i n oompononto are XOR gates, 
4- b i t shift r e g i sters and mult i pl e x e rs. 

Th e RS e ncod e r has 4 i nput l i n e s lab el l e d 0,1 ,2 & 3 and A output li nes lab el led 0,1 ,2 & 3. This 
l ab el ling corresponds to th e subscr i pts of the polynom j ai/ 4 tup i o ropros e ntat i on. The mapp i ng of 
10 4 - b i t symbols from tho TE_tagdata reg i ster i nto tho RS i s as follows: 
tho LSB in the TE_tagdata is f o d Into l i n e O 

- th e n e xt most sign i ficant LSB i s f e d into lino1 
tho noxt most s i gnificant LSB i s fod i nto Ii n e 2 

- tho MSB is fod i nto lino3 

15 The RS output mapping to the Encoded tag data int e rfac e i s sim il iar. Two e ncod e d symbols are 
stored i n an 8 - b i t addr e ss. W i th i n th e se 8 b i ts: 

- l in e O Is f e d i nto tho LSB (bit 0/4) 

- lin e l i s fed into tho noxt most significant LSB (bit 1/5) 
l i no2 is fod i nto tho noxt most sign i ficant LSB (b i t 2/6) 

20 linoS i s fod i nto tho MSB (b i t 3/7) 
267.1 4 2D Dooodor 

The 2D docodor is so l octod when TE_d e code2den - 1. it operat e s on variab l e tag data only, i ts 
function is to conv e rt 2 b i ts i nto 4- b i ts according to Table 181 .. 

25 Tab l e 181 . Operat i on of 2D docodor 









Q001 




00 10 


1-0 


0 100 


1-4 


1000 



26.7.15 Encoded tag data int e rfac e 

Th e e ncod e d tag d a t a int e rfac e conta i ns an encod e d fixed tag data stor e int e rface and an 
o ncodod var i able tag data store i nt e rfaco, as shown in F i guro 217. 
30 Tho two roord units s i mply reorder tho 0 i nput b i ts to map tow ordor codewords into tho b i t 

se l ection component of the address as shown i n Tabl e 182. Reorder i ng of writo addresses i s not 
n e c e ssary s i nce tho addr e ss e s ar e already in th e correct format. 
Table 182. Roord unit 
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bitff#'J 


input 
bit 


intorprotation 


output 
bit 






interpretation 




A 


select 1 of 8 codewords 


A 


Bolect 1 of 4 codeword 




tables 




B 




B 




Wm 


G 


D 


soloct 1 of 15 symbols 






select 1 of 15 symbols 


E 






& 




1= 




F 


6 




6 


e 


select 1 of 8 bits 




N 


soloot 1 of 4 bits 


H 






\ 




1 



The e ncoded fix e d data interfac e is a single 15 x 8 b l t RAM with 2 road ports and 1 wr i te port. As 
i t is only writt e n to dur i ng page setup time ( I t i s fixed for the durat i on of a page) th e re is no need 
for s i mu l tan e ous road/write acc e ss. However the fixed data stor e must b e capab l e of decoding 
5 two s i multaneous roads in a s i ngl e cycle.Figuro 218 shows th e imp le mentation of the fixed data 

The e ncoded var i abl e tag data i nterfac e i s a doub l e buff e r e d 3 >< 15 x 8 b i t RAM with 2 read ports 
and 1 writ e port. Th e doub le buffering a ll ows on e tag's data to b e r e ad (two r e ads i n a single 
cyc le ) while the n e xt tag's variabl e data is b ei ng stor e d. Writ e addr e ssing is 6 b i ts: 2 b i ts of 
10 addr e ss for s e l e cting 1 of 3, and 4 bits of address for se l ect i ng 1 of 15. R e ad addr e ss i ng is the 
sam e w i th th e addition of 3 more address b i ts for se l ecting 1 of 8. 

F i gure 219 shows the implomontation of th e e ncod e d variab le tag data stor e . Double buffering is 
impl e m e nt e d via two sub - buff e rs. Each t i m e an AdvTag puls e i s receiv e d, th e sense of which sub 
buffer is being read from or wr i tten to chang e s. Th i s is accompl i shed by a 1 bit flag ca ll ed wrobO, 
15 Although the in i t i a l state of wrsbO i s irrelevant, i t must invert upon receipt of an AdvTag pulse. The 
structure of each sub buffer i s shown in Figure 220. 

2&S Tag Format Structure (TFS) i NTCRrACc 

26.8.1 I ntroduction 

The TFS specifi e s the contents of every dot posit i on w i thin a tags border i.e.: 

20 ^ i s th e dot part of th e background? 

i s the dot part of the data? 

The TFS i s broken up into Tag L i n e Structures (TLS) which specify the contents of every dot 
pos i tion in a particular l ine of a tag. Each TLS consists of throe tab l es A, B and C (s ee F i gure 

25 For a given li ne of dots, al l the tags on that li no correspond to the same tag li ne structure. 

Consequently, for a given l i no of output dots, a s i ngl e tag l ino structure i s requ i red, and not the 
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e ntir e TFS. Doubl e buffer i ng a l lows th e n e xt tag l i no structur e to bo f e tch e d from tho TFS in 
DRAM while the existing tag l ino structur e is us e d to rondor th e curront tag l i no. 
Tho TFS intorfoco is r e spons i b l e for l oading the appropriat e l ino of tho tag format structure as th e 
tag encoder advances through tho page. I t i s a l so rospons i b l o for producing tab l o A and tab l e B 
outputs for two cons e cut i v e dot pos i t i ons i n th e current tag li no. 

^ Thoro is a TLS for every dot lin e of a tag. 

^ All tags that ar e on tho samo l i n e hav e the e xact sam e TLS. 

A tag can bo up to 38 4 dots w i do, so each of th e s e 38 4 dots must b e specified i n th e TLS. 

^ Th e TLS informat i on Is stor e d i n DRAM and on o TLS must bo read into th e TFS Interface 

for e ach li n e of dots that are outputt e d to tho Tag P l an e Lin e Buffers. 
-* Each TLS i s road from DRAM as 5 t i mes 256 b i t words with 21 4 padded bits in tho last 

256 b i t DRAM rood. 
26.8.2 I /O Sp e cification 

Tabl e 183. Tag Format Structur e I nterface Port L i st 




SoPEC syst e m clock 



prst_n 



l« 



Activ e- low, synchronous r e s e t i n pc l k doma i n 



top_go 



Go s i gnal from TE top l evel 



DRAM 



diu_data[63:0] 



Data from DRAM 



diu tfs rack 



In 



Data acknowl e dg e from DRAM 



diu tfs rval i d 



In 



Data valid from DRAM 



tfs_diu_rr e q 



R e ad r e qu e st to DRAM 



tfs_d i u_radr[21:5] 



Out 



R e ad addr e ss to DRAM 



tag encoder top love! 



top_advtag l ine 



Pu l s e d aft e r the l ast li n e of a row of tags 



top_tagaltsonse 



In 



For even tag rows " 0 i .e. 0,2, 4 . 



For odd tag rows ~ 1 i .e. 1,3,5... 



topjastdot i ntag 



tn 



Last dot i n tag is curr e ntly b ei ng procossod 



top_dotposva l id 



Curr e nt dot posit i on i s a tag dot and i ts structur e data 
and tag data is ava i lab l e 



top_tagdotnum[7:0] 



Counts from zoro up to TEJtagmaxdlotpairB (m i n. "1 , 
max. - 192) 



tfsi valid 



TLS tabl e s A, B and 0, r e ady for us e 



tfs i Ja_dotO[1 :0] 



Out 



Even e ntry from Tab le A corr e spond i ng to 
top_tagdotnum 



tfsi,ta_dot1[1:0] 



Out 



Odd entry from Tab le A corr e sponding to 
top_tagdotnum 
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ta§ — e ncod e r top — level 



(PCU road doooder) 



tfG_to_tfsGtartadr[23:0] 0\j^ 



tfs_to_tfGondadr[23:0] Qui 



tfs_te_tfsfirstl i noodr[23:0] Out 



tfs_t e _ourrtfsadr[23:0] Qui 



tfs i _td i _adr0[8:0] 



tfsLtdLodr1[8:0] 



TFS tfsstartadr rogistor 



TFS tfs e ndadr registor 



TFS tfsfirstlineadr rogiotor 



TFS ourrtfsadr rogiotor 



Qtft 



R e ad addr e ss for dotO (ovon dot) 



Road addr o GG for dot1 (odd dot) 



26.8.2.1 StatomoGhino 
Tho stato moohino is rospons i bl e for gonorat i ng control signals for tho var i ous TFS tablo units, 
and to load the appropriato l in e from th e TFS. Th e states are exp l a i ned bo l ow. 
idio: Wait for topjgo to bocome act i vo. Pulso odvjtfejino for 1 cyc i o to rcGot tawradr and tbwradr 



5 r e gisters. Pulsing advJtfGjlne wil l switch th e r e ad/wr i te sons e of Tablo B so switching Tab l o A 
hero as wol l to k ee p th i ngs th e same i .e. wrtaO ~ NOT( wrfaQ). 

diu_QccoGG> I n the diu_oocoss stat e a roquost i s s e nt to tho DIU. Once an ack signal i s rooo i vod 

Tab le A wr i te onab l o I s asserted and th e FSM mov e s to tho tlejoad stato. 

tleJoQd: Tho DRAM access is a burst of 5 256 b i t accesses, u l t i mat el y return e d by tho D I U as 
10 5*( 4 *6 4 bit) words. Thore wi l l bo 1Q2 padd e d b i ts in tho l ast 256 b i t DRAM word. Tho first 12 64 

bit words r e ads are for Table A, words 12 to 15 and som e of 16 ar e for Tabl e B wh i le part of road 

16 data i s for Tab l o C. Th e count e r r e ad_num is used to Id e ntify which data go e s to wh i ch tabl o . 

Tho tabl e B data is stor e d temporar il y i n a 288 b i t rogistor unti l th e t l s_updat e stato h e nc e tbw e 

does not bocom e activo unti l road_num ~ 16). 
15 Th e D I U data go e s d i rectly into Tab le A (12 * 6 4 ). 

The D I U data for Tab le B is loaded i nto a 288 bit rogistor. 

Th e DIU data goes direct l y into Tabl e C. 



tiGjupdat e : - Th e 288 b i ts in Tab l o B n ee d to wr i tten to a 32*9 buffer. Tho tlejjpdat e stato takes 

20 care of thi s us i ng the road_num counter. 

tiG_next Th i s stato ch e cks tho logic l e ve l of tfevalid and sw i tch e s tho road/write s e nses of Tablo 
A (wrtaO) and Tablo B a cycle later (using tho advjtfGjine puls e ). Tho reason for switching Tab le 
A a cycle e ar l y is to mak e sur e th e topj e v e l address v i a tagdotnum i s point i ng to the corr e ct 
buffer. Keep in mind th e topj e v e l is work i ng a cycle ahead of Tabl e A and 2 cycl e s ahead of 

25 Tablo B. 

If ffsValid is 1, tho stat e machino waits until tho QdvTagLino signa l i s r e ce i ved. When it is 
rec ei v e d, th e stat e machine pulses advTFSLino (to sw i tch r e ad/writ e s e nse i n tab le s A, B, C), and 
starts reading the n e xt l i no of tho TFS from currTFSAdr. 

If tfGVafid i s 0, tho state mach i no pu l ses advTFSUne (to switch road/wr i te s e nso I n tab l es A, B, C) 
30 and th e n jumps to tho t l s_tfsval i d_s e t stato whore the s i gnal tfGValid i s s e t to 1 (a ll owing th e tag 
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e nooder to start, or to oontinuo i f i t had boon staHod). Tho Gtato machino can thon start road i ng 
tho noxt l ino of tho TFS from currTFSAdr 

t l s_tfsval i d_n e xt: - S i mp l y s e ts th e tfevalid signa l and r e turns the FSM to th e diu__acG e ss stat e . 
I f an advTagUn e signa l i s r e c ei v e d befor e th e n e xt li n e of the TFS has boon road i n, tfsValid i s 
5 clear e d to 0 and process i ng continu e s as out l in e d abov e . 
26,8.2.2 Bandetoro wrapping 

Both TD and TFS storag e i n DRAM can wrap around th e bandstore area. Th e bounds of the band 
stor e ar e descr i bod by inputs from tho CDU shown i n Table — . Th e TD and TFS DRAM i nterfaces 
th e r e for e support bandstore wrapp i ng. I f th e TD or TFS DRAM i nt e rfac e I ncr e m e nts an addr e ss It 
10 is ch e ck e d to see i f it matches th e e nd of bandstoro address. I f so, th e n th e addross I s mapp e d to 
the start of th e bandstore. 
The TFS stat e flow d i agram i s shown in b el ow. 
26.8.3 Generat i ng a tog from Tab le s A, B and C 

Th e TFS contains an e ntry for each dot pos i tion w i th i n th e tag's bounding box. Each e ntry 
15 spocifios whothor tho dot is part of the constant background pattern or part of the tag's data 
component (both f i x e d and var i ab l e). 

Th e TFS thorofor o has TagHoight x TagWidth ontrios, wh e r e TagH e lght is th e height of tho tag in 
dot -li n e s and TagWIdth is the width of th e tag in dots. The TFS entries that sp e cify a singl e dot - 
lino of a tag aro known as a Tag L i no Structure. 
20 Th e TFS conta i ns a TLS for e ach of th e 1600 dpi l in e s i n th e tag's bounding box. Each TLS 
contains three cont i guous tablos, known as tabl e s A, B and C. 

Tab l e A conta i ns 38^ 2 - b i t e ntries i .e. one e ntry for e ach dot i n a s i ngle l i n e of a tag up to tho 
max i mum w i dth of a tag. Th e actual number of e ntr ie s us e d should match th e siz e of th e 
bounding box for tho tag i n tho dot d i mension, but a ll 38 4 e ntr i es must b e pres e nt. 
25 Tab le B conta i ns 32 9 - bit data address that r e f e r to (in order of app e aranc e ) th e data dots present 
in th e particular lino. Again, all 32 ontrioo must bo present, oven i f fewer aro used. 
Tab i o C contains two 5 bit po i nters into tab le B and i s follow e d by 22 unused bits. Th e total l ength 
of each TLS is thoroforo 3 4 32 bit words. 

Each output dot valu e i s gen e rat e d as fo l lows: Each e ntry in Tabl e A cons i sts of 2 b i ts — bitO and 
30 bit1 . Thes e 2 b i ts are i nt e rpr e t e d accord i ng to Tab le 18 4 , Tabl e 185 and Table 186. 



Table 18 4 . I nterpretation of b i tO from entry i n Table A 



bitO 


Interpretation 


Q 


tho output bit comos directly from biti (see Table ). 


4- 


tho output bit comes from a data bit. Biti is used in conjunction with 
Tag Line Structure Table B to determine which data bit will be output. 





Tab l o 185. Interpretation of biti from entry i n table A when bitO 0 



bit-1- 



i nt e rprotat i on 
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9 


output 0 




output 1 



Tabl e 186. I nt e rpr e tation of b i t1 from e ntry in tablo A whon bitO - 1 





interpretation 


Q 


output data bit pointed to by current indox into Tablo B. 


4- 


output data bit pointed to by current index into Table B, and advance 


index by 1 . 



If b i tO ~ 0 th e n tho output dot for this e ntry is part of th e constant background pattern. Tho dot 
5 valu e its e lf com e s from bit1 i . e . if bit1 ~ 0 then th e output i s 0 and i f bit1 ~ 1 thon tho output i s 1 . 
I f bitO - 1 th e n th e output dot for this entry comes from th e var i abl e or fixed tag data. Blt1 is usod 
in conjunction with Tables B and C to d e t e rmin e data b i ts to use. 

To und e rstand th e i nterpretat i on of bit1 wh e n bitO ~ 1 w e n ee d to know what i s stored in Tabl e B. 

Table B conta i ns th e addr e sses of al l tho data bits that ar e us e d i n th e particular l i no of a tag in 
10 ord e r of appoaranco. Th e refore, up to 32 different data b i ts con appear i n a line of a tag. Tho 

addr e ss of th e first data dot in a tag wi ll be giv e n by tho address stor e d in e ntry 0 of Tab le B. As 

w e advance along th e var i ous data dots wo wi l l advance through tho various Tablo B ontr i os. 

Each Tab l o B e ntry is 9 - bits long and oach points to a sp e c i f i c var i abl e or fix e d data b i t for th e tag. 

Each tag contains a maximum of 120 fixod and 360 variable data bits, for a total of A&O data bits. 
15 To a i d address decod i ng, th e address e s are based on th e RS encoded tag data. Tab l o — l i sts th e 

int e rprototion of tho 9 bit addrossos. 

Tab l e 187. I nterpretation of 9 bit tag data address i n Tab l o B 




6li 



CodoWordSo l oct 



m 



Symbo l Soloct 



B i tSelect 



d e scr i ption 



Select 1 of 8 cod e words. 



Codowords 0, 1, 2, 3, ^, 5 aro var i abl e data. 



Codewords 6, 7 aro fix e d data. 



Seiee t 1 of 15 symbols (1111 inva l id) 



S ele ct 1 of ^ b i ts from tho se le ct e d symbo l s 



I f th e f i x e d data i s supplied to th e TE i n an un e ncod e d form, the symbo l s deriv e d from codoword 0 
20 of fixod data are wr i tten to cod e word 6 and the symbo l s d e r i v e d from f i xed data codoword 1 aro 
written to codoword 7. The data symbols are stor e d first and thon the rema i ning redundancy 
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symbo l s aro stor e d aft e rwards, for a tota l of 15 symbo l s. Thus, wh e n 5 data symbols ar e us e d, 
the 5 symbo l s der i ved from bits 0 19 ar e wr i tten to symbo l s 0 4, and tho redundancy symbo l s ar e 
written to symbo l s 5 1^. Whon 7 data symbols are used, th e 7 symbols dor i vod from bits 0 27 aro 
writt e n to symbo l s 0 6, and th e r e dundancy symbo l s are written to symbols 7 1 4 
5 However, if tho fixed data is suppli e d to th e TE i n a pro encod e d form, the encoding cou l d 

thoorot i ca l ly bo anyth i ng. Conooquent l y the 120 bits of f i xod data i s copi e d to codewords 6 and 7 
as shown in Table 188. 

Tab le 188. Mapping of fixod data to cod e word/symbols wh e n no redundancy encod i ng 









input bits 


output symbol 
range 


output 
codeword 


©-40 


6-4 


6 


20-38 


Q-4 


7 


/^Q 5Q 


§-0 


8 


@0-78 


§-0 


7 


gQ QQ 


40-44 


6 


100 110 


40-44 


7 



10 I t i s important to note that th e i nt e rpr e tat i on of biti from Tabl e A (wh e n b i tO - 1 ) i s r e lativ e . A 5 bit 
ind e x i s used to cycl e through th e data address i n Table B. Since tho first tag on a particu l ar l ino 
may or may not start at the first dot in the tag, an in i tial valu e for the ind e x into Tabl e B is n ee d e d. 
Subsoquont tags on tho somo l ino will always start with an i nd e x of 0, and any part i al tag at th e 
end of a l ino w ill simply finish before tho ontiro tag has been rondorod. Th e initial i nd e x r e quired 

15 du e to th e rendoring of a partial tag at th e start of a lin e is supp l ied by Tab l o C. Tho i nitial i ndox 
will b e diff e r e nt for each TLS and there aro two possib l e i n i tia l indexes since th e re are e ffect i vely 
two typos of rows of tags i n terms of i n i tial offsets. 

Tab le C provides th o appropr i at e start i nd e x into Tab le B (2 5 bit indices). When render i ng oven 
rows of tags, e ntry 0 i s used as tho i n i t i a l indox into Tab l o B, and whon rendering odd rows of 
20 tags, e ntry 1 is us e d as th e in i t i a l i nd e x i nto Tab le B. Th e second and subs e qu e nt tags start at th e 
l eft most dots pos i tion w i th i n th e tag, so can us e an in i t i a l indox of 0. 
26.8. 4 Architocturo 

A block diagram of tho Tag Format Structur e Int e rfac e can bo soon i n Figure 223. 
26. 8. ^. 1 Tablo A intorfac e 
25 Tho impiom e ntat i on of tab l o A i s two 16 x 6 4- b i t RAMs w i th a sma ll amount of contro l logic, as 
shown i n F i gure 22 4 . Whi le on e RAM i s r e ad from for th e curr e nt l i n e 's tabl e A data (A bits 
r e present i ng 2 cont i guous tab l o A ontrios). tho other RAM i s be i ng writt e n to with th e n e xt l ino's 
tabl e A data (6 4- b i ts at a t i me). 

Note: Tho Tab l o A data to b e pr i nted ( i f each LSB ~ 0) must b e pass e d to th e topj e ve l 2 cycles 
30 aft e r th e r e ad of Tab l e A duo to tho 2 stago pipe li n i ng i n tho TFS from r e g i st e ring Tabl e A and 
Tab le B outputs h e nc e th i s extra registering stage for tho generation of ta_dot0_1cyc l e l ator and 
ta_dot1_1 oyc l elater. 
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Each time an AdvTFSLin e pu l se is r e c ei v e d, th e sense of which RAM i s bo i ng road from or wr i tt e n 
to chang e s. This is accomp li shed by a 1 b i t flag ca l l e d wrtaO, A l though tho i n i tial stat e of wrtaO is 
irr e levant, i t must i nvert upon receipt of an AdvTFSLino pu l so. A 4 b i t counter cal l ed taWrAdr 
koops tho wr i t e address for tho 12 wr i t e s that occur aft e r the start of e ach l i ne (specifi e d by tho 
5 AdvTFSLin e control i nput). Tho tawo (tab l e A write enab l e) input is sot wh e n e v e r tho data I n is to 
b e wr i tt e n to table A. Tho tolVr/\c/r address count e r automatical l y increments with each wr i te to 
tab le A, Addr e ss gonorat i on for tawo and taWrAdr is shown in Table 180. 
26. 8. ^. 2 Tabi e C intorfac o 

A block diagram of the tab l o C int e rface is shown below in Figur e 226. 

10 Th e addr e ss gon o rator for tab le C contains a 5 bit address regist e r adr that is sot to a now 
address at th e start of processing tho tag (eith e r of the two table C init i a l values based on 
tagAltSonoo at tho start of tho lino, and 0 for subsequent tags on th e same l ine). Each cycio two 
addr e ss e s into tab l o B are generated bas e d on tho two 2 - bit i nputs (inO and inl). As shown in 
S e ct i on 1 89, the output address tbRdAdrO i s always adr and tbRdAdrl is one of adr and Qdr*1, 

15 and at tho end of tho cyc l e ooflr tokos on on e of adr, adr*1, and adr^2. 
Tab le 189. AdrG e n lookup tab l o 



Inputs 




outputs 
adfOSol 


adrlSel 


adrSel 








00 


00 




X 




00 


04 




dUl 




00 


40 


X 


X 




00 


44 






adr+1 


04- 


00 




X 


Q^p 


04- 


04 


anstr 






04- 


40 


adf 


X 


J^p 


04- 


M- 


adf 




adr+1 


40 


00 




X 




4« 


04 


X 


anstr 


^^p 


4« 


40 


X 


X 


g^p 


4« 


44 


X 




adr+1 


44- 


00 


adf 


X 


adr+1 


44- 


04 




adr-M 


adr+1 


44 


40 


adf 


X 


adr+1 


44 


44 




adr+1 


adr+2 



26.8.4.3 Tablo B intorfaco 



X - don't caro Gtato. 
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Tho tab l o B i nt e rfac e implemontat i on g e n e rates two e ncod e d tag data addrossoo (tfci_odrO, 
tfeijadrl) based on two tab le B input address e s {tbRdAdrO, tbRdAdrl). A block diagram of table B 
can bo soon i n Figure 227. 

Tab l e B data I s i n i tially l oaded i nto th e 288 b i t tab le B t e mporary r e gister via tho TFS FSM. Once 
5 all 288 b i t ontrioo have boon loaded from DRAM, th e data i s wr i tt e n in 0 b i t chunks to tho 32*0 
reg i ster arrays based on tbwradr. 

Each tim e an AdvTFSLln e puls e i s r e c e iv e d, tho sonso of which sub buffer i s boing road from or 
wr i tten to changos. Th i s is accomp li sh e d by a 1 bit flag cal l ed wrtbO, A l though tho I n i t i al stat e of 
wrtbO is irre le vant, it must invert upon r e c e ipt of an AdvTFSLino pulse. 
10 Note: The output address e s from Tabl e B aro reg i st e r e d. 

27 Tag FIFO Unit (TFU) 

27r1 Overv i ew 

The Tag F I FO Un i t (TFU) provides th e m e ans by which data i s transferred botwoon th e Tag 
Encoder (TE) and tho HCU. By abstract i ng tho buffer i ng mechan i sm and controls from both un i ts, 

15 the i nterfac e i s c le an b e tw ee n tho data us e r and th e data gen e rator. 

Th e TFU is a simple FIFO intorfaoo to tho HCU. Tho Tag Encod e r w ill prov i d e support for arb i trary 
Y Int e g e r scaling up to 1600 dpi. X intogor sca l ing of tho tag dot data is performed at tho output of 
tho FIFO in tho TFU. Thoro is feedback to tho TE from th e TFU to a ll ow sta lli ng of tho TE during a 
li n e . Tho TE i nt e rfac e s to th e TFU with a data w i dth of 8 bits. Th e TFU interfac e s to tho HCU with 

20 a data width of 1 bit. 

The depth of tho TFU FIFO is choson as 16 bytes so that th e FIFO can stor e a singl e 126 dot tag. 
»AA I nterfaces botwoon TE, TFU and HCU 

27.1.1.1 TE TFU IntorfQCO 

Tho i nterface from tho TE to tho TFU compr i ses tho fol l owing s i gna l s: 

25 t e jtfu_wdatQ, 8 bit wr i t e data. 

t e _tfu_wdatavaHd, writ e data val i d. 

t e Jtfu_wrQdvlin e , accompanies tho last va li d 8 bit write data in a l ino. 

Th e i nterface from tho TFU to TE compris e s the fo ll ow i ng s i gna l : 

tfujtejoktowrit e , indicating to the TE that there is spac e available in the TFU F I FO. 

30 Tho TE wr i t e s data to th e TFU FIFO as long as th e TFU's tfu_to_oktowrite output b i t is s e t. Th e 
TE wr i te will not occur unless data is accompan i ed by a data val i d signal. 

27.1.1.2 TFU HCU Int o rfQC O 

Th e Interfac e from th e TFU to tho HCU compr i ses the fo ll ow i ng signa l s: 

tfu_hcu_tdQtQ, 1 b i t data. 

35 -* tfu_hcu_Qvaii, data valid signal indicat i ng that ther e is data ava il abl e in th e TFU F I FO. 

Tho interface from HCU to TFU comprises tho fo ll owing signal: 

hGuJfujroody, indicating to tho TFU to supp l y tho next dot. 

27.1.1.2.1 X sca l ing 

Tag data i s r e plicated a sca l e factor (SF) number of t i mes In th e X d i rection to convert tho final 
40 output to 1600 dpi. Un l ik e both tho CFU and SFU, wh i ch support non intogor sca l ing, tho sca li ng 
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is i ntogor on l y. Repl i cation in tho X diroction is p e rformod at tho output of tho TFU FIFO on q dot 
by - dot bas i s. 

To account for tho caso whoro thoro may be two SoPEC dovioes, oaoh generating Its own portion 
of a dot -l ine, th e first dot in a l i no may not b e r e plicated th e total sca l o factor number of t i moo by 
5 an ind i vidua l TFU. Tho dot wi l l ultimately bo scalod up correctly w i th both devices doing part of 
the sca li ng, one on its l e ad out and th e oth e r on i ts load I n. 

Note two SoPEC TEs may b e i nvolved in produc i ng tho same byte of output tag data stradd li ng 
the pr i nthoad boundary. Th e HCU of tho l oft SoPEC w i l l acc e pt from i ts TE tho correct amount of 
dots, i gnoring any dots i n th e l ast byto that do not apply to i ts printh e ad. Th e TE of tho r i ght 
10 SoPEC w ill b e programmed th e corr e ct number of dots i nto tho tag and its output w i ll be byto 
a l igned w i th the l oft odgo of the printhead. 

27t2 Def i n i t i ons or I /O 

Table 100. TFU Port L i st 



Port Name 



Descript i on 



Clocks and R e sets 



PqII^ 



SoPEC Functional c l ock. 



Prst n 



Globa l res e t s i gnal. 



PGU — Int e rfac e — data — and — control 



;i gna l s 



Pcu_adr[4:2] 



In 



required to docode the address spaco 
for th i s block. 



PCU address bus. Only 3 b i ts ar e 



Pcu_dataout[31 :0] 



32 



In 



Shar e d write data bus from tho PCU. 



Tfu_pcu_data i n[31 :0] 



32 



R e ad data bus from tho TFU to tho 



PGUt 



Pcu rwn 



In 



Common read/not wr i t e signa l from tho 
PGUt 



Pcu tfu se l 



In 



Block se l ect from tho PCU. When 



pcuJtfujBol i s h i gh both pcu_adr and 



pcu_dataout are va li d. 



Tfu_pcu_rdy 



Out 



Ready signal to tho PCU. Wh e n 



tfu _pcu_rdy Is h i gh it i nd i cates th e l ast 



cyc le of th e access. For a wr i t e cyc l e 



th i s m e ans pcu_dataout has been 
reg i stered by th e b l ock and for a read 



cycle this m e ans th e data on 
tfu jpoujdQtain is va li d. 



TE — I nt e rface — data — and — eentrel 
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signals 

Te_tfu_wdata[7:0] 



8 



In 



Write data for TFU F I FO. 



To tfu wdatava li d 



Wr i t e data va l id s i gna l . 



T e tfu wradvlin e 



Advance lino s i gnal strobod wh e n the 



last byte i n a li n e i s placed on 



te tfu wdatQ 



tfu t e oktowr i to 



R e ady signa l ind i cating TFU has space 



avai l able in i t's F I FO and i s r e ady to b e 
written to. 



HGU — Int e rface data and control 



s i gna l s 



Hcu tfu advdot 



S i gnal i ndicating to th e TFU that th e 



HCU is ready to accept tho n e xt dot of 
data from TFU. 



tfu hcu tdata 



Out 



Data from tho TFU F I FO. 



tfu hcu avai l 



Out 



S i gna l indicat i ng va l id data availab l e 



from TFU F I FO. 



27r3 Conf i gurat i on Reg is ter s 

Tabl e 191. TFU Conf i guration R e g i st e rs 



Address 



regist e r name 



TFU Bas e + 



If uiio 



valu e d e scr i pt i on 



an 



rcoot 



Control r e gisters 



OxOQ 



R e set 



A write to this reg i st e r caus e s a reset of 
the TFU. 



This r e g i ster can be r e ad to i ndicate the 



r e s e t stat e : 



0 — r e set in progress 
reset not i n progross. 



Go 



see 
text 



Wr i ting 1 to this register starts tho TFU. 



Writ i ng 0 to this reg i ster ha l ts th e TFU. 
Wh e n Go is d e ass e rt e d the state 



machines go to the i r i d le stat e s but al l 



counters and conf i guration reg i sters 
k e ep the i r va l u e s. 



Wh e n Go is ass e rt e d a ll counters are 



reset, but configuration rog i storc keep 
th e ir values (i.e. they don't get reset). 
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15 



20 



S e tup reg i st e rs (constant dur i ng proc e ssing of pago) 



QyQQ 



Th e TFU must bo started befor e th e TE 



i s start e d. 



This register oon bo read to d e term i n e if 
th e TFU is running 



(1 - running, 0 ~ stopped). 



XFracScal e 



TEByt e Count 



XScalo 



8 



45 



HCUDotCount 



4€ 



Tag sca le factor in X direct i on for the 
First dot in a line (must bo programm e d 



to bo l ess than or e qua l to XScafo ) 



Tho numb e r of byt e s to b e accoptod 



from tho TE por l i no. Onco this number 
ef byt e s have been r e c ei v e d 



Tag sca le factor in X d i rect i on. 



subsequent — bytes — afe — i gnor e d — bH=rtil 
there is a strobe on the to tftj wradvHno 



Tho numb e r of (optiona ll y) x sca l ed 
dots per l i ne to be supp l i e d to th e HCU 



Onc e this number has been r e ached 



th e r e ma i nd e r of th e current F I FO byt e 
is i gnor e d. 



Deta i led de s cr i pt i on 



The FIFO is a simp l e 16 - byt e stor e w i th road and wr i t e po i nters, and a cont e nts stor e , F i gur e 229. 
16 bytos is sufficient to stor e a s i ng le 126 dot tog. 

Each lino a total of TEBytoCount bytes is read into tho F I FO. AH subs e qu e nt byt e s are i gnor e d 
unti l there is a strobe on the to_tfu_wradvUno signal, wh e reupon bytos for th e next l in e are stored. 
On the HCU s i de, a total of HCUDotCount dots are produced at th e output. Onc e this count i s 
reached any more dots i n tho F I FO byte currently be i ng proc e ss e d ar e i gnor e d. For tho f i rst dot in 
the next li n e th e start of li n e sca l e factor, XFracScaie, I s used. 

Th e b e hav i our of these s i gnals and tho contro l s i gnals between tho TFU and tho TE and HCU is 



10 d e ta i l e d b e low. 



// Concurrontly ExcGutcd Code ; 

^ — TE alwayo allowed to v < 7ritc when thorc^o — either — fa-)- 

room ©3? a© room afid aii 



// bytco for that line have been rcccivGd. 

if ((FifoCntnto FifoMax) OR (FifoCntnto 

and BytcToRx 0) ) — then 

tfu_tc_o]ttowritG a 1 

cloo 



FifoMax 



tfu to o]ctowritc 
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-H- — Data prcocntcd to — HCU when — there — is — fa^ — data — is 

and ^ fehe H€tJ has aefe 

// rcocivcd all doto for a line 

if (FifoCntnto != 0) AND (BitToTx ■= 0)thcn 

tfu hcu avail = 1 



cloo 



tfu hcu avail 



// Output mux of FIFO data 

10 tfu hcu tdata = Fif o [Fif oRdPnt] [RdBit] 



// Sequentially Executed Code; 



i f ( t e_t f u_wdat avalid 3r9 MJB (FifoCntnto 

FifoMax) AND (ByteToRx ! - 0) then 

15 Fifo [FifoWrPnt] ■ tc_tfu_wdata 

FifoWrPnt I I 

Fi f eContent o — m- 



ByteToRx 

20 i€ — (te_tfu_wradvlinc 1) — then 

ByteToRx a TEByteCount 



— (hcu_tfu_advdot == 1 and FifoCntnto — 1= 0) — then { 
BitToTx — Hh 



25 if — (RepFrac 1) — then 

RepFrac = Xocale 

if (RdBit » 7) then 



RdBit 



Fif oRdPnt — m- 



30 Fif eContent o 

eloe 

RdBit I I 



eloe 

RepFrac 



35 if (BitToTx == 1) then { 

RepFrac = XFracScale 

RdBit = 0 



Fif oRdPnt — i-t- 



Fif eContent o 



40 BitToTx ° IICUDotCount 
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¥ 

What i o not d e ta i led abov e is tho fact that, s i nce th i s is a circular buffer, both tho f i fo road and 
write po i ntoro wrap around to zoro aft e r they roach two. A l so not d e tail e d is th e fact that if thoro is 
a change of both the r e ad and writ e pointer in th e same cyc l e, th e fifo contonts count e r r e ma i ns 
5 unchanged. 

2% a l ftonor Compos i tor Un i t (HCU) 

2%tA Overv i ew 

Tho Ha l ftonor Compositor Un i t (HCU) produc e s dots for each nozzl e in tho destinat i on pr i nthoad 
taking account of the pag e dim e nsions ( i ncluding margins). Tho spot data and tag data aro 
10 r e c ei ved i n bi lovo l form whil o th e pixel oontono data r e ce i ved from tho CFU must b e d i thor o d to a 
bi - l e ve l r e pr e sentat i on, Tho resultant 6 bi l ove ! pianos for each dot position on tho pag e are then 
r e mapped to 6 output planes and output dot at a t i mo (6 bits) to the next stage in tho pr i nting 
p i p e line, name l y tho dead nozz i o oomponoator (DNC). 
28r3 Data flow 

15 F i gure 230 shows a simple dot data flow high lovo l b l ock diagram of th e HCU. Th e HCU roads 
contono data from tho CFU, bi lovol spot data from tho SFU, and bi l ev el tag data from tho TFU. 
Dith e r matrices ar e road from tho DRAM via th e D I U. Tho ca l culated output dot (6 bits) is road by 
tho DNC. 

Th e HCU i s given the p a g e dimensions (including marg i ns), and is on l y started once for the page. 
20 I t do e s not need to b e programmed i n botweon bands or restart e d for oach band. Th e HCU wil l 
sta l l appropriately if its input buffers aro stan/od. At tho end of tho page tho HCU w ill cont i nu e to 
produce 0 for a ll dots as l ong as data is roqu e stod by tho units further down tho p i pe li ne (th i s 
al l ows later units to oonvon i ontly flush pip eli n e d data). 

Th e HCU performs a l i near processing of dots calculat i ng tho 6 b i t output of a dot in each cyc l o. 
25 Tho mapp i ng of 6 calcu l ated b i ts to 6 output bits for e ach dot a ll ows for such oxamp i o mapp i ngs 
as compositing of tho spotO layor over tho appropr i ate contono l ay e r (typ i ca ll y b l ack), tho merg i ng 
of CMY into K (if K i s pres e nt in the printhoad), the spl i tting of K i nto CMY dots i f th e r e is no K i n 
th e printhoad, and tho g e n e ration of a f i xative output b i tstroam. 

28t3 DRAM STORAGE REQUIREMENTS 

30 SoPEC al l ows for a number of different d i ther matr i x configurations up to 256 bytes w i d e . Tho 

d i ther matrix is stored in DRAM. Using either a s i ngle or doublo buffer sch e m e a l in e of the d i ther 
matr i x must bo read in by th e HCU over a SoPEC l ine timo. SoPEC must produce 1382 4 dots per 
l i no for A4/Lottor pr i nt i ng which takes 1 382^ cyc l es. 

The fol l owing give tho storage and bandw i dths roquiromonto for somo of th e poss i ble 
35 configurations of tho dithor matrix. 

^ Kbyte DRAM storage required for one 64x64 (preferred) byte d i thor matr i x 

6.25 Kbyte DRAM storage required for one 80x80 byte dithor matrix 

^ 16 Kbyte DRAM storag e requ i red for four 6^x64 byte d i ther matr i ces 

64 Kbyte DRAM storag e requ i red for one 256x256 byte d i thor matr i x 
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I t tak e s 4 or 8 r e ad accossos to l oad a lin e of d i ther matrix into tho d i thor matrix buffer, d e pend i ng 
on wh e th e r we'r e using a singl e or doubl e buff e r (configur e d by DoubloUnoBuffrQgloiQr). 

2%7A Implementat i on 

A b l ock d i agram of the HCU i s g i von I n Figure 231 . 

5 28. 4 .1 Def i nition of I /O 

Table 192. HCU port li st and descr i pt i on 



Port name 


Pins 


I/O 


Description 


Clocks and rosot 


PqII^ 


4- 




System clock. 


prst_n 


1- 




System rosot, synchronous active low. 


PCU interface 


pcu_hcu_sel 


4- 


\B 






Block select from the PCU. When pcu_hcu_6ei is high 
both pcu_adrar\6 pcu_dataout are valid. 






1- 


In 


Common read/not write signal from tho PCU. 


pcu_rwn 




pcu_adr[7:2] 


§ 


\B 


PCU address bus. Only 6 bits are required to decode tho 




address space for this block. 


pcu_datoout[31 :0] 


32 




Shared write data bus from tho PCU. 






hcu _pcu_rdy 


1- 


Otrt 


Ready signal to the PCU. When hcu _pcu_rdy is high it 






Indicates the last cycle of tho access. For a write cycle 
this means pcajdataout has boon registered by the block 


and for a read cycle this moans the data on 


hcu _pcu_datain is valid. 


hcu_pcu_datain[31 :0] 


32 


Out 


Read data bus to the PCU. 






DID interface 


hcu_diu_rroq 


4- 


Oi it 


HCU road request, active high. A read request must be 






accompanied by a valid read address. 


diu_hcu_rack 


1- 








Acknowledge from DIU, active high. Indicates that a road 
request has boon accepted and the now road oddross 


can bo placed on the address bus, hcu^diu^radr. 




hcu_diu_radr[21:5] 


4^ 


Out 






HCU read address. 17 bits wide (256 bit aligned word). 


diu_hcu_rvalid 


1- 








Read data valid, active high. Indicates that valid read data 
is now on tho road data bus, diujdata. 




diu_data[63:0] 


64 


In 


Road data from DIU. 






CFU interface 


cfu_hcu_avail 


4- 








Indicates valid data present on cfu_hou_c[3 O]dota linos. 


cfu_hcu_c0data[7:0] 


8 








Pixel of data in contone plane 0. 


cfu_hcu_c1 data[7:0] 


8 


ifi 






Pixel of data in oontone plane 1 . 


cf u_hcu_c2data[7 :0] 


8 


1ft 






Pixel of data in contone piano 2. 
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GTu__ncu__Goaata|./.uj 


o 

& 


1 M 


Pixel of data in Gontono piano 3. 


hcu_ofu_advdot 


1- 


if 


Informs tho CFU that tho HCU has captured tho pixol 


uaia on cTu_ncu_ci\j uju3i3 lines ano me oru can now 
place the next pixol on the data linos. 




SFU interface 








sfu_hcu_avail 


4- 




Indicates valid data present on Gfu_hcu_GdQta. 


sfu_hGu_sdata 


+ 


m 


PI level dot data. 


hGU_sfu_advdot 


A- 


Oi if 


Infonms tho SFU that the HCU has oapturod the dot data 
on Gfu_hGu_6data and the SFU can now place tho noxt 


dot on tho data lino. 


TFU interface 








tfu_hcu_avaii 


4- 


In 


Indicates valid data present on tfuJhGUJtdato. 


tfu_hcu_tdata 




J« 


Tag dot data- 


hcu_tfu_advdGt 


^ 


Otrt 


Informs the TFU that the HCU has captured tho dot data 




on tfu_hGU_tdQta and the TFU can now place the next dot 


on tho data lino. 


DNC IntorfaGO 


dnG_hGu__roady 


4- 








Indlcatos that DNC is ready to accopt data from tho HCU. 


hGu_dnG_avail 


4- 


Oi if 


Indicates valid data present on hcu_dnc_dQtQ. 


hGu_dnG_data[5:0] 


@ 


Out 


Output bi level dot data in 6 ink planes. 



28.4.2 Configurat i on Rogistoro 

Th e configuration reg i st e rs in tho HCU aro programm e d v i a tho PCU interface. Rofor to soct i on 
21 .8.2 on pago 1 for tho doscr i ption of th e protocol and timing diagrams for reading and writ i ng 
r e gisters in the HCU. Note that s i nc e address e s in SoPEC aro byto a li gned and th e PCU only 



5 supports 32 - b i t regist e r r e ads and wr i t e s, tho lowor 2 bits of tho PCU address bus ar e not 

r e quired to dooodo tho address spac e for the HCU. Wh e n r e ad i ng a roglstor that i s loss than 32 
bits w i d e z e ros should bo returned on tho upp e r unused bit(s) of hGu j>Gu_datain, Th e 
Gonfiguration registers of the HCU ar e li sted i n Tab le 193. 
Tab le 1 9 3. HCU Registers 



Address 


Register Nomo 


#bits 


en 

Reset 




(HCU_baso ^) 




Doscription 


Control registers 








4- 


0x4- 


A write to this register 
causes a reset of the 




Qe 




OxQ 


Writing 1 to this roglstor 
starts the HCU. Writing 0 
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Whon Go is asoortod all 



Gountors, flags oto. aro 
c le ared or given tho i r 



in i tia l va l uo, but 



Whon Go i s doasGortod 



the state machinoo go to 
th ei r idl e states but all 



to this register ha l ts tho 



configurat i on r e g i sters 
k ee p their va l ues. 



count e rs and 



configuration registers 



koop thoir va l ues. 



Tho HCU shou l d be 



started after the CFU, 



SFU, TFU, and DNC. 



This reg i ster can bo read 



to d e t e rm i ne if the HCU is 



running 

(1 - running, 0 ~ 



stopped). 



Setup registers (constant 
For dur i ng processing) 



Ava i lMask 



which of tho dotgon units 



etc. aro to b e checkod 



b e fore a dot is generated 
by the HCU w i th i n the 



sp e cifi e d marg i ns for the 
i p e cifi e d color p l an e . If 



Mask used to d e t e rmin e 



tho specified dotgen unit 
i s sta ll ed, th e n th e HCU 



w i l l also stal l . 



Seo Tab l e — for b i t 



a ll ocation and defin i tion. 



MMask 



rwn 



Sam e as AvailMoGk, but 



us e d in tho top marg i n 



ar e a before the 



appropriat e target page Is 
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reachod. 


Qyi Q 


PageMarginY 


32 


0x0000 


The first lino considorod 




_0000 


to bo offtho pago. 






4€ 


0x0000 


This io tho maximum dot 






iiuiiiit/^i 1 ^1 uovil 11 

exampio if a page 
contains 1 3824 dots, thon 
MaxDof will be 13823. 


Qx20 




32 




T"ho "fir^^t linr*i t^"^ ^ 




0000 


be considered within tho 




target page for contone 
and spot data. (0 ~ first 
printed line of pago) 


Qx2.^ 




32 


0x0000 




Li/V^llUI 1 IIVIUI Ml* ■ 


0000 


bottom margin for 
oontono and spot data 

^■•^'a ■■■Wk llll^^ Wll u«l>4^k«b 

pago)- 


Qx2Q 


LeftMargin 


4€ 


0x0000 


The first dot on a lino 






within the target page for 
contone and soot data 


Qx2G 


RightMargin 


4« 


OyFFF 


Tho fircit r\r\f rtn lino 






F 


1 1 l\J tit Ol AiUl \Ji 1 u III IC 

within tho target right 
margin for oontono and 
spot data. 


Qx3Q 




32 


0x0000 




■ 1 UltJIVIUI Mil 1 


0000 


be considered within the 




target pago for tag data. 
'0 - first printed line of 


Qx34 


TagBottom Margin 


32 


0x0000 


The first lino in tho target 




0000 


bottom margin for tag 
data (\ G first lino -aftef 
target pago). 


Qx3B 


TagLeftMargin 




DxOOOO 


The first dot on a lino 






within tho target pago for 
tag data. 


Qx3C 








The first dot on a lino 


TagRightMargin 
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within tho target right 
margin for tag data. 




StartDMAdrpi :5] 




0x0- 


Points to the first 256- bit 




QQQQ 


word of the first line of the 
dither matrix in DRAM. 




EndDMAdr[21:5] 


47 


0x0- 


Points to tho loot addross 




nnnn 


bit reads (or 8 if single 
buffering) that reads in 
the last line of the dither 
matrix. 




Linolnoromont 


& 




Tho number of 256 bit 




words in DRAM from the 
start of one lino of tho 
dithor matrix and tho start 
of tho next line, i.e. the 
value by which the DRAM 

tho start of a line so that it 
points to the start of the 
next lino of the dither 
matrix. 


0x50 


DMInitlndexCO 


8 


Q)(OQ 






If using tho single buffer 
scheme this register 
represents the initial index 

matrix line buffer for 
contone plane 0. If using 
double buffer scheme, 
only the 7 Isbs aro used. 


Qx§4 


DMLwrlndexCO 


8 




If using the single buffer 




sohomo this register 
represents the lower 

inHr^v within '^^fi hvrff* 

dithor matrix lino buffer for 
contone plane 0. If using 
double buffer schomo, 
only the 7 Isbs are used. 




DMUprlndexCO 


8 








If using tho single buffer 
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scheme this rogiotor 
reprosonts the upper 
index within 256 byto 
dither matrix lino buffer for 
oontone piano 0. After 
reading the data at this 

lGf5^5tion thf^ Inrif^x wrnnft 
to DMLwrindexCO. If 
using double buffer 
scheme, only the 7 Isbs 
are used. 




DMinitlndexCI 


8 


QxOO 








If using the single buffer 
scheme this register 
reprosonts the initial index 
within 256 -byte dither 
matrix lino buffer for 
oontone piano 1 . If using 
double buffer schomo, 
only tho 7 Isbs ore usod. 




DMLwrlndexCI 


g 


rwnn 


If using the single-buffer 




scheme this register 
represents the lower 
index Mnthin 256-bvte 
dithor matrix lino buffer for 
oontone plane 1 . If using 
double buffer schomo, 
only the 7 Isbs are used. 


0x64 


DMUprlndoxCI 


g 










If using the single buffer 
schomo this register 
reprosonts tho uppor 
index within 256 byte 
dithor matrix line buffer for 
contono piano 1 . After 
reading tho data at this 
iQcation the Index wraps 
to DMLwrindexCI. If 
using double buffer 
schomo, only tho 7 Isbs 
are used. 


0x68 


DMInitlndoxC2 


B 


QyQQ 






If using tho single buffer 
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SGhomo this rogistor 
represents tho initial indox 

matrix line buffer for 
Gontono plane 2. If using 
double buffer schomo, 
only the 7 Isbs aro usod. 


QxQC 


DMLwrlndexC2 


8 








If using tho singlo buffer 
schomo this rogistor 
represents tho lowor 

inrfov within P^fi h\/t^* 

dithor matrix line buffor for 
oontono piano 2. If using 
double buffor schomo, 
only tho 7 Isbs aro usod. 


rwrn 


DMUprlndoxC2 


g 








If using the singlo buffor 
schomo this register 
represents the upper 
index within 256- byte 
dither matrix line buffor for 
contone piano 2. Aftor 
reading the data at this 

to DMLwrlndoxC2. If 
using double buffor 
scheme, only tho 7 Isbs 

are used. 




DMInitlndexC3 


8 


QyQQ 






If using the singlo buffor 
scheme this register 
roprosonts the initial Index 

within PSfi-h\/tf* rlith<=^r 

matrix line buffer for 
contone plane 3. If using 
double- buffer schomo, 
only the 7 Isbs aro usod. 


Qx7B 


DMLwrlndexC3 


8 


Q)^QQ 


If using the singlo buffor 




scheme this rogistor 
represents tho lowor 
index within 256 byto 
dither matrix lino buffor for 
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Gontone piano 3. If uoing 
doublo buffer schomo, 
only tho 7 Isbo aro usod. 


QxJC 


DMUprlndoxCa 


8 


Qx3F 


If using tho singlo buffor 




schomo this rogistor 
represents tho uppor 
index within 256 byto 
dither matrix lino buffor for 
contone plane 3. After 
reading the data at this 

lof^tinn thf* inrif*y wmn*i 
to DMLwrlndoxC3. If 
using double buffer 
sohemo, only tho 7 Isbs 
are used. 


QxQO 


DoubloLinoBuf 


4- 


0x4 


Selects the dither line 




buffer modo to bo Einals 
or double buffer. 

0 — singlo line buffer mode 

1 — doublo line buffer 
mode 


0x84 to 0x08 


lOMappingLo 




0x0000 










0000 


The dot reorg mapping for 
nutnut inkt 0 to S For 




vui^ui II ir\o \j wj v/< 1 \J\ 

Bach ink's 64 bit 
lOMapping value, 
lOMappingLo reprosonts 
the low order 32 bits. 


OxOC to OxBO 


lOMappingHi 




0x0000 










0000 


The dot roorg mapping for 

dutsiit inks 0 to S- -For 




each ink's 64 bit 
lOMapping value, 
lOMappingHi represents 
the high order 32 bits. 


OxB^ to OxCO 


cpConstant 


4x8 


QyQQ 


The constant contone 






value to output for 
contono piano N when 
printing in tho margin 
areas of tho pago. This 
value will typically bh 0. 
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sConstant 


4- 


0x0 


The constant bi lovol 




■k/alu© to outnut for root 
when printing in tho 
margin areas of the pago. 
This value will typically bo 

Or 


0xC8 


tConstant 


4- 




The constant bi level 




data whon printing in tho 
margin areas of the pago. 
This value will typically bo 
0. 


DxCC 


DitherConstant 


g 


Qxpp 


Tho constant value to uso 




For dither matrix whon tho 
dithor matrix is not 
available, i.e. whon tho 
signal dmjavoil is 0. This 
value will typically bo 
OxFF so that cpConetant 
can easily be 0x00 or 
OxFF without requiring a 
dither matrix 
{DitherConstant is 
primarily used for 
threshold dithoring in tho 
margin areas). 


Debug — rogistors — (road 




OxDO 


HcuPortsDebug 


44 








Bit 13 - tfu_hcu_avQil 
Bit 12 - hGU_tfu_Qdvdot 
Bit 1 1 ~ 6fu_hGU_avafl 
Bit 1 0 " hcu_Gfu_advdot 
Bit 9 ~ cfu_hcujavQil 
Bit 8 ~ hGujafujadvdot 
Bit 7 ~ dncJiGujready 
Bit 6 ~ hGujdnGjavQil 
Bits 5-0 - hGu_dnG_data 


9xQ4 


HcuDotgenDobug 


4^ 


N/A 






Bit 14 - afterjtop^margin 
Bit 13- 
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OxQG 



HcuD i th e rDobugl 



HcuDithorDobug2 



in_Jag_tQrgot _pQgo 
Bit 1 2 ^ injtargot jpago 



Bit 10 - s avail 



[tp,G, cp3, cp2, optcpO] 



Bit 11 - tpjavail 



Bit 9 ~ cpjavail 



B i t 8~ dm avail 



Bit 7 - advdot 



B i ts 5 0 - 



( i . e . 6 b i t i nput 



to dot roorg units) 



B i t 17- ad^dof 



Bit 16 " dm avail 



B i t 15 8 " cp1jdithor_vai 



B i ts 7 - 0 " cpO_dith e r_val 



B i t ^7- advdot 



Bit 16 - dm avail 



Bit 15 - 8 - cp3_dithor_vQl 
Bits 7 - 0 - op2_dith e r_vall 



26A.3 Contro l un i t 

Th e contro l unit is r o sponslb l o for controlling tho ovoral l flow of the HCU. I t is respons i b l o for 
d e t e rmin i ng wh e th e r or not a dot w i ll b e genoratod in a givon cyc i o, and what dot w il l actual l y b o 
g e n e rat e d — includ i ng whether or not th e dot i s I n a margin area, and what d i th e r c ell values 
5 should bo usod at the speo i flo dot locat i on. A block diagram of tho contro l unit is shown in Figure 

Tho I nputs to tho control un i t aro a numb e r of avail flags sp e c i fy i ng wh e th e r or not a g i v e n dotgon 
unit is capab le of supp l y i ng Y e ar data I n this cycl e . The t e rm 'r e ar r e f e rs to data generated from 
oxternal sourc e s, such as contono lino buffers, b l lovol li no buffers, and tag p l ane buff e rs. Each 
10 dotgen unit i nforms th e contro l un i t whothor or not a dot can b e g e nerat e d this cyc le from r e a l 
data. It must also chock that tho DNC is r e ady to rec e iv e data. 

Th e conton e /spot margin unit is rosponsibl e for dotormining whether tho current dot coord i nate i s 
w i thin th e targ e t conton e /spot marg i ns, and tho tag marg i n un i t is r e sponsibl e for d e termining 
wh e th e r the current dot coordinat e I s w i th i n th e target tag margins. 
15 Th e dith e r matr i x tab l o intorfaco provides the I nterfac e to DRAM for the gen e rat i on of d i th e r c e l l 
valu e s that are usod in tho halftoning proc e ss in th e conton e dotgen unit. 
28.4.3.1 D e t e rmino advdot 

Th e HCU do e s not a l ways r e quir e contone p i anos, b i l ovol or tag p l an e s I n ord e r to produce a 
page. For exampl e , a giv e n page may not have a b i l evel l ayor, or a tag l ay e r. In addit i on, th e 
20 conton e and b i l ov e l parts of a pago aro only requir e d w i thin th e contono and b l l ovol pogo 

margins, and th e tag part of a pago is on l y requ i red within th e tag pag e margins. Thus output dots 
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can bo gonerat e d without oonton e , bi - l e v e l or tag data befor e tho rospeotivo top marg i ns of a 
pag e has been roaoh e d, and Os aro gonoratod for a l l color plan e s aftor the ond of the pago has 
b ee n r e ach e d (to a ll ow lat e r stag e s of the pr i nting p i polino to flush). 

Consoquont l y tho HCU has on AvailMask reg i ster that detorminos which of the various i nput ava il 
flags shou l d b e tak e n notic e of dur i ng th e production of a pago from the f i rst lino of th e targ e t 
pag e , and a TMMaek register that has tho same behaviour, but i s used In tho l i nes boforo the 
target pago has boon roachod (i. e . i ns i d e tho target top margin area). The d i ther matrix mask bit 
TMaskfO] i s th e e xc e pt i on, i t app li es to a l l margins aroas not just tho top marg i n. Each bit in the 
AvailMoGk r e f e rs to a part i cular avail bit: i f th e bit in th e AvailMask r e g i ster is s e t, th e n th e 
corr e spond i ng avail b i t must bo 1 for tho HCU to advanc e a dot. The b i t to ava il corrospondonoo 
is shown i n Tablo 104. Caro should bo taken with TMMaek if tho particu l ar data is not ava i lab le 
aftor tho top marg i n has boon r e ach e d, then tho HCU wi ll sta l l. Note that th e avaii bits for contono 
and spot co l ors ar e ANDed with Injtarg e t _page after th e targ e t page ar e a has b ee n roachod to 
al l ow dot production i n th e contono/spot marg i n aroas w i thout need i ng any data in th e CFU and 
SFU. Th e avaH bit for tag color Is AND e d with injtagjtarg e t jyage aftor th e targ e t tag pago area 
has b e en r e ach e d to a ll ow dot production in tho tag margin ar e as without nood i ng any data in tho 

Tablo 10 4 . Correspondenc e b e tween bit in Avai l Mask and avail flag 



bit # in Ava il Mask 



avail flag 



d e scription 



Q 



dm avail 



d i thor matr i x data ava il ab l e 



cp_ava il 



conton e pix el s ava il ab l e 



s ava i l 



ipot color avai l ab le 



tp_avai l 



tag p i ano available 



Each of the i nput a vat'f bits i s process e d with I ts appropriat e mask b i t and th e aftor Jtop_morgin 
flag (not e th e d i th e r matrix is tho except i on it i s procossod with InJtargBt _j>Qgo), Tho output b i ts 
are ANDed togeth e r a l ong with Go and output_buffJuH (wh i ch sp e c i fi e s wh e ther the output 
buff e r is ready to r e c e iv e a dot i n this cycle) to form the output b i t advdot Wo a l so g e nerat e 
wrjadvdot In this way, if tho output buffer i s full or any of th e spocifiod avail flags is cl e ar, th e 
HCU w ill sta ll . Wh e n th e e nd of tho pag e i s r e ach e d, in _pago wil l bo d e assorted and tho HCU 
w il l continue to produco 0 for all dots as long as th e DNC requests data. A b l ock diagram of the 
d e t e rm i n e advdot un i t is shown in Figure 233. 

The advance dot block also determ i nes if current pag e needs dith e r matrix, I t i ndicat e s to th e 
d i thor matr i x tab l o i nterface b l ock via tho dm_read_ e nabio s i gnal. I f no dithor Is requ i red in th e 
margins or in tho target pago th e n dm_r e ad_ e nabl e wi l l b e 0 and no d i ther will b e r e ad in for this 
pager 
28.4.3,2 Position unit 

Th e pos i tion unit is r e sponsib le for outputt i ng tho pos i tion of tho curr e nt dot {curr jpos, Gunr_lino) 
and whether or not th i s dot is the l ast dot of a li no {advlino). Both ounr jyoe and currjlno aro sot to 
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0 at r e sot or wh e n Go trans i t i ons from 0 to 1 . Th e pos i tion un i t r e lies on th e advdot input o i gna l to 
advanc e through the dots on a pago. Whenevor an advdot pulso is roco i vod, curr jpoc goto 
i noromontod. I f curr jyoe e quals mox_c/of thon an adviino pulso is gonoratod ao this is tho l ast dot 
i n a li no, currjino gets i ncromontod, and th e curr j>og i s roset to 0 to start count i ng the dots for 
5 th e n e xt lin e . 

Th e pos i tion un i t a l so generates a filtered vers i on of adviino ca ll ed dm^advimo to i ndicate to tho 
dithor matrix pointers to increm e nt to tho n e xt l in e . Tho dm_Qdvfin e is only i ncromontod when 
dither i s requ i r e d for that lino. 

-3r# — ( (af tcr_top_mQrgin A^TD avail_maa3c [0] ) OR tm_mao]c[0] ) — then 
10 dm_advlinc = advlinc 

— dm_advlinG « 0 
28.^.3.3 Margin ur}it 

Tho rosponsib il ity of tho margin unit i s to d e t e rm i ne whether th e sp e c i fic dot coordinat e is w i thin 
15 th e pag e at a l l, w i thin tho target pag e or i n a margin area (soo Figure 231). Th i s unit is 

instant i at e d for both tho contone/spot margin unit and tho tag margin unit. 

Tho margin unit tak e s th e current dot and l i n e position, and r e turns thre e flags. 

^ th e first, in _pago is 1 i f tho current dot i s within tho pag e , and 0 i f i t is outsid e th e pago. 

the sGOond flag, in_target jjag e , i s 1 if tho dot coordinate i s w i thin tho target pago area of 

20 tho page, and 0 if i t i s within the targ e t top/ l oft/bottom/right marg i ns. 

^ tho third flag, aftor_top_marg i n, i s 1 if the current dot is b e low tho targ e t top margin, and 0 if 

i t i s w i thin tho target top marg i n. 

A b l ock d i agram of tho margin un i t is shown in Figure 235. 

28. 4. 3. ^ Dittier matrix tabl e int e rfaco 
25 Tho dithor matrix table int e rface prov i des th e interfac e to DRAM for tho g e n e rat i on of dither col l 

values that ar e us e d in th e ha l ftoning process in th e conton e dotg e n unit. Tho control flag 

dmjr e adjonable enab l es th e r e ad i ng of tho d i thor matr i x tablo l i no structure from DRAM. If 

dm_r e Qd_onabl e i s 0, tho d i thor matr i x is not specif i ed in DRAM and no DRAM ■a cces se s a r e 

att e mpt e d. Tho d i thor matrix tab le int e rfac e has an output flag {//77_a\^a// which spoc i fios if tho 
30 curr e nt lin e of the spoc i fiod matrix is available. Tho HCU can bo direct e d to stall wh e n dm_ovoil is 

0 by s e tt i ng th e appropr i at e b i t in th e HCU'g AvailMaek or TMMack registers. Wh e n dm_avail i s 0 

th e value in th e DithorConstant register i s used as tho d i ther cel l va l ues that are output to th e 

conton e dotg e n un i t. 

Tho d i thor matr i x tablo i nt e rfac e consists of a stat e mach i ne that interfaces to th e DRAM interfac e , 
35 a d i ther matrix buffer that provid e s d i ther matrix va l u e s, and a un i t to g e n e rat e tho addresses for 
r e ad i ng th e buff e r. Figure 236 shows a block diagram of tho dithor matr i x tabl e int e rfaco. 
28. . 3. 5 Dithor data Gtructur e in DRAM 

Th e dith e r matr i x is stored in DRAM i n 256 bit words, transferred to tho HCU i n 6 4- b i t words and 
consum e d by the HCU in bytes. Tablo 105 shows th e 6A bit words mapping to 256 - bit word 
40 addr e ss e s, and Tablo 106 shows tho 8 b i ts d i thor valuo mapping in tho 64 b i ts word. 
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Tabl e 1 9 5. D i th e r Data storod i n DRAM 



Addres6[21:5] 



ooeee 



00004 



0004« 



90044 



0O4OO 



D3 

[255:102] 



D7 

[255:102] 



Data[255:0] 



|D2 

101:128] 



m 

191:128] 



D44 

[255:192] 



[255:1 9 2] 



D-| Q 

[255:102] 



[127:6 4 ] 



[127:6^] 



D40 

101:128] 



DO 

[127:6 4 ] 



|D44 
101:128] 



101:128] 



D-| 3 

[127:6 4 ] 



D4^ 
[127:64] 



DO 



D4 



D8 



&42 

[@a^ 



Whon tho HCU first roquooto data from DRAM, the 6 4 bits word transf e r order wi ll bo 
D0,D1,D2,D3. On th e sooond r e qu e st th e transfer ord e r w i l l b e D 4 ,D5.D6,D7 and so on for oth e r 
r e qu e sts. 

Tabl e 196. D i thor data stor e d i n HCUs l in e buff e r 



Dither indGx[7:0] 


Data[7:0] 


Dither index[7:0] 














Data[7:0] 


Dither indox[7:0] 


Data[7:0] 


90 


D0[7:0] 


40 


D2[7:0] 


20 








D4[7:0] 


04 


D0[15:8] 


44 


D2[15:8] 


24 








D4[15:8] 


02 


D0[23:16] 


42 


D2[23:16] 


22 








D4[23:16] 


03 


D0[31 :24] 


43 


D2[32:24] 


23 








D,4 [31:24] 


04 


DG[30:32] 


44 




24 






D2[30:32] 


D4 [30:32] 


9§ 


D0[47:'10] 


4^ 




25 






D2['17:40] 


D4[47:40] 


96 


D0[55:'18] 


4€ 




26 






D2[55:48] 


D4[55:48] 


9? 


D0[63:56] 


47 


D2[63:56] 


27 








D4[63:56] 


98 


D1[7:0] 


4« 




28 






D3[7:0] 


D6[7:0] 


09 


D1[15:8]' 


40 




29 






D3[15:8] 


D5[15:8] 


OA 


D1[23:16] 


4A 


D3[23:16] 


2A 


D5[23:16] 








OB 


D1 [31:24] 


4B 




2B 






D3[31:24] 


D5[31:24] 


0G 


D1 [30:32] 


4C 


D3[30:32] 


26 








D5[30:32] 


OD 


D1[47:40] 


40 




20 






D3[-17:40] 


D5[47:40] 


OE 


D1 [55:48] 


4E 


D3[55:48] 


2E 








D5[55:48] 


OF 


D1 [63:56] 


4F 




3F 






D3[63:56] 


DS[63:56] 










eter 
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28. 4 .3.5.1 Dith e r matr i x buff e r 

Tho Gtoto machino l oods dithor matr i x tabl e data a l in e at a time from DRAM and stores It i n a 
buffer. A sing le l ino of the dither matr i x Is e ith e r 256 or 128 8 bit entrios, doponding on tho 
programmable b i t DoubloLinoBuf. If this bit is onab l od, a doub le- buffer mochanism is e mp l oyed 
5 s uch that whi l o ono buff e r i s r e ad from for th e current l in e 's dither matrix data (8 b i ts r e pr e senting 
a singl e d i thor matrix entry), th e oth e r buffer i s being writt e n to with tho noxt li n e 's dithor matrix 
data (6^ bits at a t i me). Alternativ e ly, th e single buffer sch e m e can bo us e d, wher e th e data must 
b e loaded at the end of the l in e , thus i ncurring a de l ay. 

Tho s i nglo/double buff e r is implement e d using a 256 byt e 3 port regist e r array, two r e ads, one 
10 write port, with tho reads c l ock e d at double tho system clock rat e (320MHg) allowing 4 roads per 
clock cyc l e. 

The dithor matrix buffer unit also prov i d e s tho mochan i sm for keeping track of tho current road 
and wr i te buff e rs, and provid i ng the mochanism such that a buff e r cannot be road from until i t has 
b e en wr i tten to. I n this cas e , e ach buffer i s a lino of tho dithor matr i x, i.e. 256 or 128 bytes. 

15 Tho d i thor matrix buffer maintains a road and wr i te po i nt e r for tho d i thor matr i x. Th e output va l ue 
dmja t vall i s d e rived by comparing tho road and write pointers to d e t e rm i n e whon tho d i thor matrix 
is not e mpty. Tho write pointer wrjotdr is incr e mented e ach time a 6^ b i t word i s written to tho 
dither matr i x buffer and th e r e ad po i nter rd _ptr i s incremented each tim e dmjadvlin e is received. 
I f doublo_lin e _buf \ s 0 th e rd jpfr will incr e m e nt by 2, othorwiso it wi l l increment by 1 . I f th e d i ther 

20 matrix buff e r is fu l l th e n no further writ e s will be al l ow e d {bufFJuH -1), or if tho buffer is empty no 
furth e r buff e r reads ar e a ll owed {buff_ e mp''^). 

Th e r e ad addresses ar e byte align e d and aro gonoratod by the r e ad address gen e rator. A s i ngle 
d i ther matrix entry is represented by 8 bits and an e ntry is r e ad for e ach of tho four contono 
p l anes in paral le l. If double buff e r is used (doubieJino_buf-1) th e road address is der i ved from 7 
25 bit address from the r e ad addr e ss generator and 1 bit from tho read po i nt e r. I f doubloJin e Jyuf^O 
then tho road address is th e ful l 8 - b i ts from tho road addr e ss gon e rator. 
4=€ — (doublc_linG_buf == 1 ) then 

rGad_port [7:0] {rd__j)tr[0] , rd_adr [ 6 : 0 ] ) H- 

concatenation 
30 cloc 

rGad_port [7:0] — « rd_adr[7 ! 0] 

28.1.3.5.2 R e ad addr e ss g e n e rator 

For each contono plane there is a in i tia l , low e r and upper i ndex to b e us e d wh e n read i ng d i thor 
35 ce ll va l ues from tho d i th e r matrix doub l e buffer. The read addr e ss for e ach p l an e is used to se l ect 
a byte from tho current 256 - byt e r e ad buffer. When Go gets set (0 to 1 trans i t i on), or at th e e nd of 
a l ine, the read addresses aro sot to their corresponding i n i t i al ind e x. Otherwise, the read address 
g e nerator re l i e s on advdot to advance the addr e sses w i thin tho i nclus i ve range sp e c i fied th e low e r 
and upper ind i ces, roprosented by tho following pseudocode: 

40 
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if (advdot »° 1) then 

at^ — (advlinc 1) — then 

rd_adr ° dm_init_indGx 

cloif — (rd_adr " dm_upr_indGx) — then 

5 rd_adr = dm_lwr_indcx 

oloc 

rd_adr — m- 

gIoc 

rd_adr =■ rd_adr 

10 28. 4 .3.5.3 Stato machino 

Tho dithor matrix i s road from DRAM in s i ngle 256 b i t occogsoo, roc e iv i ng the data from tho D I U 
over A clock oyolos (6 4 b i ts p e r oyGl e ).Th e protocol and tim i ng for r e ad accesses to DRAM is 
descr i bod i n sect i on 20.9.1 on pag e 1 . Read accossos to DRAM aro imp l omontod by means of 
th e state machine doscrlbod i n Figure 238. 

15 A l l count o rs and flags shou l d bo c l oarod aftor rosot or whon Go trans i t i ons from 0 to 1 . Whi l e tho 
Go bit i s 1, th e stat e mach i n e r e lies on tho dmjroadjanQblo bit to tell it wh e th e r to att e mpt to r e ad 
dither matr i x data from DRAM. Wh o n dm_road_onablo i s cloar, tho state machino doos noth i ng 
and r e mains I n th e i dio stato. Whon dmjroQdjonable i s sot, th e stato machin e cont i nu e s to load 
dith e r matrix data, 256 bits at a t i m e (recoiv o d over 4 clock cyclos, 6^ bits por cyclo), whi l e thoro 

20 is spac e availab l e in tho dithor matrix buffor, {buffjull 1-1 ). 

Th e read address ax\6 lino_GtQrt__Qdr aro i nitially sot to GtQrt_dm_Qdr. Tho r e ad addr e ss gots 
incremented after each r e ad acc e ss, it tak e s 4 or 8 read accossos to load a l ino of d i ther matr i x 
into th e d i thor matrix buffer, doponding on wh e th e r w e 'r e us i ng a single or double buff e r. A count 
is k e pt of the acc e sses to DRAM. Wh e n a r e ad acc e ss compl e t e s and acGOGe^count oquals 3 or 

25 7, a li no of d i ther matrix has just boon l oad e d from and th e r e ad address i s updated to 

Uno_GtQrtjadr p l us finojncromont so i t points to tho start of tho n e xt lino of dither matrix. 
{fino_GtQrt_Qdr is also updated to this value). I f tho r e ad addr e ss oquals e nd_dm_Qdr then tho 
next r e ad address will bo Gtart_dm_adr, thus tho road address wraps to point to th e start of tho 
area i n DRAM whore th e dithor matr i x is storod. 

30 Tho write address for tho dith e r matr i x buffor is i mplemented by moans of a modu l o 32 count e r 
that i s i n i tia l ly sot to 0 and i ncromontod whon diu_hcu_rvaHd is assorted. 
F i gure 237 shows on examp l e of sett i ng GtQrt_dm_Qdr and e ndjdmjadr va l u e s In r el ation to th e 
li n e i ncr e ment and double li no buffer settings. Tho calculation of ondjdm_Qdr i s 
// Gnd_dm__adr caloulation 

35 dm_hGight = Dithor matrix height in linco 
if (doiiblc_linG_buf 1) H- 

cnd_dm_Qdr [21 : 5] = — atart_dm__adr [21 ! 5] 1 ( ( (dm_hGight 

1) *1 incline) — \ — 3-) — « 5) 
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Gnd_dni_adr [21:5] = — otart_dm_adr [21 ; 5] 1 ( ( (dm_hcight 

1) *1 incline) — i — 7^ — << 5) 

28.4.4 Conton e dotg e n un i t 

Tho conton e dotg e n un i t is r e spons i b le for producing a dot in up to 4 co l or plan e s por cyo l o. Tho 
5 contono dotgen un i t also produces a cp_Qvail flag wh i ch spec i flos wli e th e r or not conton e pix e ls 
ar e curr e ntly availab le , and th e output hcu_cfujadvdot to r e quest th e CFU to provide th e n e xt 
conton e p i x el i n up to A color plan e s. 

Th e b l ock diagram for tho conton e dotgon un i t is shown in F i gure 230. 

A dithor un i t prov i d e s th e funct i ona l ity for dithering a s i ngle contone p i ano. Tho conton e image is 
10 only d e fin e d with i n th e contono/spot margin ar e a. As a r e su l t, i f tho input flag injtarg e t _pogo i s 0, 
th e n a constant conton e p i x e l va l u e is used for tho pixol i nstead of th e conton e p i ano. 
Th e r e sultant contono pix e l i s th e n halfton e d. Tho dith e r valu e to b e us e d in th e halfton i ng 
proc e ss i s prov i d e d by th e contro l data un i t. Tho ha l fton i ng proooss invo l ves a compar i son 
botwoon a p i x e l va l ue and its corr e spond i ng dith e r va l ue. I f tho 8 b i t contone valu e i s gr e at e r than 
15 or oquQl to tho 8 b i t d i th e r matr i x value a 1 is output. If not, th e n a 0 Is output. This moans each 
ontry i n tho d i ther matrix i s I n the rango 1 255 (0 I s not us e d). 

Not e that constant us e is d e pendant on the in_targot _pag e signa l only, if mjtargot _pQgo is 1 th e n 
the Gfu_hGu_G*_dQtQ should bo allowed to pass through, r e gardl e ss of th e stal l ing behaviour or 
th e avail_mQGk[1 ] octX l ng, Th i s a ll ows a constant valu e to b e s e tup on th e CFU output data, and 
20 tho use of diff e rent constants wh il e inside and outsido tho target pago. Tho hGu_cfu_Qdvdot w\ \ \ 
always b e z e ro if th e avaif_maGk[1] i s zero. 

28. 4 .5 Spot dotgen un i t 

The spot dotg e n unit is responsible for producing a dot of b i- l e v e l data per cyc l e. I t d e als w i th b l- 
l evel data (and th e refor e do e s not nood to ha l ftone) that comes from tho LBD v i a tho SFU. Like 
25 the contono l ayer, th e b l l e v e l spot layer I s on l y d e fin e d with i n th e contone/spot margin ar e a. As a 
r e sult, if input flag in^targot _j>ago is 0, then a constant dot value (typical l y th i s would b e 0) Is us e d 
for tho output dot. 

Tho spot dotgen unit also produc e s a s_avail flag wh i ch specifi e s wh e ther or not spot dots ar e 
current l y avai l ab le for this spot pian o , and tho output hcu_Gfu_advdot to requ e st tho SFU to 
30 prov i de tho noxt b i l e v e l data va l ue. Tho spot dotgon unit can b e r e pres e nt e d by the fo ll owing 
ps e udocode: 

o_ava i 1 g o f u_hGU_avai 1 

— ( in_targct jago 1 AND avail_maok [2] — 0 )0R 

35 ( in_targQt_pago 0) — then 

hcu_ofu_advdot = 0 

ClOQ 

hcu_ofu_advdot « advdot 

40 — ( in_targct_pagQ 1) — then 
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op = ofu_hcu_odata 

gIoc 

op ■ op_conotant 

Noto that constant uso is dependant on the injtargot jpag e s i gna l on l y, if injtarget jpag® i o 1 then 
5 th e Gfu_hcu_data should b e allow e d to pass through, r e gardless of tho stalling b e hav i our or the 
Qvail_maGk s e tting. This al l ows a constant valuo to be setup on th e SFU output data, and the use 
of different constants whi l e inside and outsido tho target page. Tho hcu_jofu_advdotW \\ \ a l ways bo 
zero i f th e avail_maGk[2] i s zero. 
28. 4 .6 Tag dotg e n unit 

10 This unit is vory sim i lar to tho spot dotgon unit (s ee S e ction 28.^.5) i n that it d e a l s w i th bi leve l 
data, in this cas e from the TE v i a tho TFU. Tho tag lay e r i s on l y d e fin e d with i n th e tag margin 
area. As a r e sult, i f i nput flag injtagjtargot j>ogo is 0, th e n a constant dot va l u e , tp_conGtant 
(typical l y th i s wou l d be 0), i s us e d for th e output dot. The tagplan e dotgen un i t a l so produces a 
tp_avaH flag wh i ch specifies whether or not tag dots are currently available for the tagplane, and 

15 tho output hcu_tfu_advdot to request th e TFU to prov i d e th e n e xt bi le v el data valuo. 

The houjtfujadvdot generat i on is s i m il ar to th e SFU and CPU, e xcept i t d e pends only on 
Injtarg e t _page and advdot. It does not take into account th e ava i l mask wh e n i nsid e the target 
pag e . 

28.^.7 Dot r e org unit 

20 Th e dot r e org unit provid e s a m e ans of mapping tho bi lovo l d i thorod data, th e spotO color, and 
th e tag data to output i nks in tho actua l pr i nth e ad. Each dot r e org unit tak e s a set of 6 1 b i t inputs 
and produc e s a sing le bit output that repres e nts th e output dot for that color p l an e . 
Th e output b i t is a log i cal combination of any or al l of th e i nput b i ts. Th i s al l ows th e spot co l or to 
be placed in any output color piano ( i nclud i ng infrared for test i ng purposes), b l ack to be merg e d 

25 into cyan, mag e nta and y ell ow ( i n th e cas e of no b l ack ink i n th e Memj e t printh e ad), and tag dot 
data to b e p l ac e d i n a v i s i b l e p l ane. An output for f i xat i v e can r e adily b e g e n e rat e d by simply 
combin i ng dosirod input bits. 

Tho dot roorg un i t conta i ns a 6 4- b i t lookup to a l low comp le t e fr ee dom w i th r e gards to mapping. 

S i nce all poss i ble comb i nations of i nput bits are aocounted for in th e 64 bit lookup, a given dot 
30 r e org un i t can tak e the mapping of othor roorg units into account. For e xample, a b l ack p l an e 

r e org un i t may produc e a 1 only if th e conton e p l an e 3 or spot co l or inputs ar e s e t (th i s e ff e ct i v e ly 

compos i t e s b l ack bi -le v el over th e conton e ). A fixat i ve roorg un i t may g e n e rat e a 1 if any 2 of th e 

output co l or planes is s e t (taking into account th e mappings produced by th e other r e org un i ts). 

If d e ad nozzl e r e p l aoomont i s to be used (see sect i on 20.^.2 on page 1), the dot reorg con bo pro 
35 gramm e d to d i r e ct th e dots of th e specified color i nto th e ma i n p l ane, and 0 into th e other. I f a 

nozzle is th e n marked as d e ad in th e DNC, swapping tho b i ts between th e p l an e s w i ll result in 0 i n 

tho d e ad nozzio, and th e r e quired data in the othor p l ane. 

If d e ad nozz l e r e p l ac e m e nt is to b e used, and there aro no tags, tho TE can b e programmed with 
th e position of doad nozz le s and th e resu l tant patt e rn us e d to direct dots i nto th e specified nozz le 
40 row. If only fixed background TFS i s to be us e d, a l i mit e d number of nozz l es can bo rep l aced. I f 
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var i abl e tag data is to bo us e d to sp e cify doad nozzles, th e n l arge numbors of doad nozzles can 
bo readi l y compensat e d for. 

The dot roorg unit can b e us e d to av e rag e out th e nozzl e usag e wh e n two rows of nozzlos sharo 
tho same ink and tag oncoding i s not being used. Tho TE can be programmod to produce a 
5 regu l ar patt e rn ( e .g. 0101 on one lin e , and 1010 on tho next) and th i s patt e rn can bo usod as a 
dir e ctiv e as to direct dots into th e sp e c i f ie d nozz le row. 

Each reorg un i t contains a 6A bit fOMopping valu e programmable as two 32 b i t HCU r e gist e rs, 
and a s e t of so l oction l og i c bas e d on th e 6 bit dot input (2^ - 6 4 b i ts), as shown in Figure 2 4 0. 
Th e mapp i ng of input b i ts to oach of tho 6 so l oction bits i s as defined in Tab le 197. 
10 Tab l e 197. Mapp i ng of input bits to 6 se le ct i on bits 



address bit 
of lookup 


tied to 


1 jj^Qly 




intorprotation 


0 


bi level dot from contone layer 0 


cyan 




1- 


bi lovol dot from contono layer 1 






magenta 


2 


bi level dot from contone layer 2 






3 


bl-level dot from contone layer 3 






4 


bi level spotO dot 




3 


bi lovol tag dot 


infra red 







28. 4 .8 Output buff e r 

Th e output buffor do coup l es th e stal li ng b e haviour of tho feeder units from tho sta l ling b e haviour 
of th e DNC. Th e l arg e r th e buffer tho greater d e- coup li ng. Current l y tho output buffer size is 2, but 
15 could b e i ncreased If n ee d e d at th e cost of e xtra ar e a. 

I f tho Go b i t is sot to 0 no road or wr i t e of th e output buffor i s pormittod. On a low to high trans i t i on 
of th e Go b i t the cont e nts of th e output buff e r are c le ar e d. 

Th e output buffor a l so i mp le m e nts th e i nterfac e log i c to th e DNC. If th e re i s data i n th e output 
buffer the hcu_dnc_avaii signa l wil l bo 1 , oth e rwis e i s wi ll be 0. If both hcu_dnc_avail and 

20 dnc_hcu_roady are 1 then data is rood from tho output buffor. 

On the wr i te s i do i f ther e i s space availab l e i n th e output buff e r the l ogic ind i cat e s to th e control 
unit via tho outputJbuff_full s i gna l . Tho contro l un i t will th e n a l low writ e s to th e output buff e r v i a 
th e wr_advdot signa l . If th e writes to tho output buff e r ar e after tho ond of a page ( i ndicated by 
J^ogo equa l to 0) then al l dots written into the output buffor ar e s e t to zero. 

25 28. 4. 8. 1 HCU to DNC intorfoco 

Figure 2 4 1 shows tho timing diagram and roprosontativo log i c of tho HCU to DNC i ntorfaoo. Th e 
hcujdncjavail s i gnal indicate to tho DNC that th e HCU has data availab l e. The dnc_hGU_roQdy 
signal ind i catos to tho HCU that tho DNC i s ready to acc e pt data. Wh e n both s i gnals ore high data 
is transf e rr e d from th e HCU to tho DNC. Once tho HCU i ndicates it has data available (s e tting tho 

30 hcujdnc_QVQil signal h i gh) i t can on l y s e t th e hcujdncjavail low again after a dot is acoeptod by 
tho DNC. 

28.4.9 Feeder to HCU intorfacoo 
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Figur e 242 shows the foodor un i t to HCU intorfaco tim i ng diagram, and F i guro 2^3 shows 
r e pr e s e ntat i v e log i c of tho intorfac e with th e r e g i ster pos i t i ons. efu_hGu_data and Gfu_hcu_QVQil 
arc always rogistorod whiio tho €fu_hcu_Qdvdot is not. The /?cu_sft/_oya// signa l indicatos to tho 
5 HCU that th e feeder un i t has data availab le , and €fu_hou_odvdot ind i catos to tho fe e der unit that 
the HCU has captured tho last dot. Tho HCU can nev e r produce an advance dot pulse while tho 
avail i s low. Tho diagrams show th e e xamp le of tho SFU to HCU i nt e rfac e , but tho same i nterface 
is used for th e othor foodor units TFU and CFU. 
20 Doad Noazl e Compensator (DNC) 

10 2^ Overview 

Th e D e ad Nozzl e Comp e nsator (DNC) i s respons i b l e for adjust i ng Momjot dot data to tako 
account of non funct i on i ng nozzles in tho M e mj e t pr i nthoad. Input dot data is suppl ie d from tho 
HCU, and the corrected dot data is passed out to the DWU. Tho h i gh le ve l data path is shown by 
th e block diagram i n Figur e 241. 

15 Th e DNC compensat e s for a doad nozz l es by p e rforming tho fol l owing op e rations: 

Dead noBglc removal^ — i .o. — turn the nozalc off 

Ink rcplQCcmGnt by direct oubotitution i.e. K — K 

^ Ink rGplaccmcnt by indirect oixbotitution i.e. — K — > CMY 

Error diffuaion to adjacent nozgleo 

20 Fixative corrcctiono 

The DNC is requ i red to effici e ntly support up to 5% doad nozzles, under tho oxpootod DRAM 
bandwidth allocat i on, with no restr i ct i on on whore doad nozzles ore locat e d and handle any 
fixative corr e ction duo to nozz l e comp e nsations. Performance must d e grade gracefu ll y aft e r 5% 
d e ad nozzl esr 

25 29t2 Dead nozzle ident i f i cation 

Dead nozzles are i dentified by means of a pos i tion valu e and a mask valu e . Position information 
is r e pres e nt e d by a 10 b i t d e lta encod e d format, whore th e 10 bit valu e d e fines th e numb e r of 
dots botwoon doad nozzl e columns '* ^. With th e d e lta information it also r e ads the 6 bit d e ad nozzlo 
mask (dn mask) for th e d e fin e d d e ad nozzle position. Each bit in the dnjnask corr es ponds to an inlc plan e . 

30 A s e t bit indicates that th e nozzle for the corresponding inlc plan e is d e ad. The dead nozzl e tabl e forma^ is 
shown in Figur e 215. Th e DNC r e ads dead nozzle information fi-om DRAM in singl e 256 bit acces se s. A 
10 bit delta encoding schomo m ohoson so that each table entry is 16 bits wid e , and 16 entri es fit e xactly in 
e ach 256 bit r e ad. Using 10 bit delta encoding m e ans that th e maximum distanoo betw ee n dead nozzl e 
columns is 1023 dots. It is possible that d e ad nozzle s may bo spaced furth e r than 1023 dots fi'om e ach oth e r, 

35 so a null dead nozzl e id e ntifier is requir e d. A null d e ad nozzl e identifi e r is defined as a 6 bit dn_mask of all 
z e ros. Th e s e null d e ad nozzl e identifi e rs should also b e us e d s o that: 



for a 10 bit do l ta value of </, if tho ourront co l umn n is a doad nozz i o co l umn then th e n e xt dead nozzle 
co l umn I s given by n (d * 1 ). 
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the dead nozglc table io a multiple of 16 cntrico — (oo that it ia 

aligned to the 256 bit DRAM locationo) 

the dead nog ale table opano the aomploto length of the line, — i.e. 

the firot entry^ dead nog ale table ahould have a delta from the 
5 firot nogglc column in a line and the laot entary in the dead noggle 

table ohould correopond to the laot nogglc column in a line. 
Note that tho DNC dea l s with tho w i dth of a page. This may or may not bo the same as tho width 
of th e pr i nth e ad (th e PH I may introduce som e margining to tho page so that its dot output 
match e s th e w i dth of th e pr i nthead). Caro must be tak e n wh e n programming tho dead nozz i o 
10 table so that dead nozzle positions aro corroctly spoo i fiod with rospoct to tho page and pr i nth e ad. 

29^ DRAM S TORAGE AND B ANDW I DTH REQUinCMCrfT 

Th e m e mory requir e d is largo l y a factor of th e number of d e ad nozz l os pres e nt in tho pr i nth e ad 
(which i n turn i s a factor of th e printhoad sizo). Tho DNC is required to road a 16 b i t entry from tho 
d e ad nozzio tabl e for e v e ry d e ad nozzle. Tab le 198 shows th e DRAM storogo and avorago^ 
15 bandwidth r e quir e m e nts for th e DNC for diff e r e nt p e rcentag e s of d e ad nozzles and differ e nt page sizes. 
Tab l o 198. Doad Nozz le storag e and average bandwidth r e quir e m e nts 



Page sizo 


% Dead 


Dead nozzle table 




Nozzles 








Memory 


Bandwidth 


(KBytOG) 






(bits/oyole) 


A4^ 


5% 


















2A 








9S 




±DS/L 


9S 


4t6 


4^ 







a. B l lith i o pr i nth e ad has 1382 4 nozz l es por co l or prov i d i ng ful l blood printing for A 4 /L e tt e r 
— B i li th i o pr i nthoad has 19^88 nozzlos por color prov i d i ng full bl ee d printing for A3 
20 e: — 16 bits x 1 382 4 nozz l os x 0.05 doad 

d. (16 bits r e ad / 20 cycl e s) - 0.8 bits/cyc i o 
2974 Nozzle compensation 

DNC rec ei v e s 6 b i ts of dot information every cyc io from tho HCU, 1 b i t por co l or p i ano. When tho 
dot posit i on corresponds to a doad nozzl e co l umn, tho associated 6 b i t dn_maek i ndicates which 
25 i nk p l ano(s) conta i ns a d e ad nozzlo(s). Tho DNC first dolotoo dots dest i n e d for the doad nozzio. I t 
then rep l aoos thos e d e ad dots, eith e r by placing th e data d e st i ned for th e dead nozzle in te-afi 



Avorago bandw i dth assum e s an ovon spread of dead nozz l es. C l umps of doad nozz l os may causo delays 
du e to i nsuffici e nt avai l able DRAM bandw i dth. Th e s e de l ays wi ll ooour ovory li n e caus i ng an acoumulativo 
d el ay ov e r a pag e. 



PEA23US 



478 



adjacent ink plan e (dir e ct subst i tut i on) or into a numb e r of i nk p i anos (indiroot Gubot i tution). Aftor 
i nk roplac e nri e nt, if a d e ad nozzio is mado active again th e n the DNC porformo error d i ffuo i on. 
Final l y, fo ll owing the d e ad nozzio comp e nsation mechan i sms th e fixat i v e , if present, may n ee d to 
bo adjusted due to new nozzles b e ing activated, or doad nozz l os being removed. 

5 29. 4 .1 Doad nozz l e r e mova l 

If a nozzio i s defin e d as dead, then th e first act i on for tho DNC i s to turn off (zoroing) the dot data 
dostinod for that nozz le . Th i s i s done by a b i t wis e AND i ng of the i nvers e of th e dnjmaek with the 
dot value. 

29. 4 .2 Ink roplacoment 

10 I nk r e plac e m e nt i s a m e chan i sm whoro data dostinod for tho doad nozz i o i s p l aced into an 
adjacent i nk plan e of th e sam e onlnr (riirftnt RiihRtitiitinn, i ft K K j i t p rmtivo ). p ' -"^f"- ^ f< '"^^^ ^ 
numb e r of i nk plan e s, the comb i nation of wh i ch produc e s th e des i red color (indir e ct subst i tution, 
i .e. K > CMY). Ink roplacoment i s perform e d by filt e r i ng out i nk b el ong i ng to nozzlos that afe 
d e ad and th e n add i ng back i n an appropr i at el y ca l culat e d pattern. This two stop process allows 

15 tho opt i onal ro inclusion of th e i nk data into tho or i gina l doad nozz i o pos i t i on to bo subsoquontly 
e rror diffused. I n tho gen e ra l cas e , fixative data dest i n e d for a d e ad nozz le should not b e l e ft 
active intending i t to bo lator diffused. 

The ink rep l ac e m e nt m e chan i sm has 6 ink replacem e nt patt e rns, on e p e r ink plan e , 
programmable by tho CPU. Tho dead nozzio mask i s ANDod w i th tho dot data to soo if there aro 

20 any pianos wh e r e th e dot is activ e but the correspond i ng nozz le i s d e ad. Th e r e sultant va l u e 

forms an enable, on a por ink basis, for th e ink roplacom e nt proc e ss. I f replac e ment is e nabl e d for 
a part i cular i nk, the valu e s from th e corr e spond i ng rep l ac e m e nt patt e rn r e gist e r ar e OR e d i nto tho 
dot data. The output of th e i nk r e p l ac e m e nt process is then filter e d so that e rror d i ffus i on i s on l y 
a l lowed for tho pianos in which error d i ffus i on is enabled. Tho output of th e i nk r e plac e m e nt l ogic 

25 i s ORed w i th th e r e su l tant dot aft e r d e ad nozz le remova l . Soo F i gure n pago565 on page Error! 
Bookmark not def i ned- for imp l ementation details. 

For example if w e cons i der tho printhoad color configurat i on C,M,Y,K4.,K^, I R and tho i nput dot 
data from th e HCU is b101 100. Assuming that tho K 4 . ink piano and I R ink piano for th i s position 
ar e dead so tho doad nozz le mask i s b000101 . Th e DNC first removes tho doad nozz i o by 

30 zoro i ng tho K 4 . piano to produce blOIOOO. Then tho doad nozz i o mask i s ANDod with tho dot data 
to giv e bOOOlOO wh i ch sel e cts th e i nk r e p l acem e nt patt e rn for K t . ( i n this cas e tho ink r e plac e m e nt 
patt e rn for \^ i s configured as bOOOOlO, i .e. i nk r e p l ac e m e nt into the p l an e ). Providing orror 
d i ffus i on for i s enab le d, th e output from tho i nk roplacomont proc e ss I s bOOOOIO. This i s ORed 
with tho output of dead nozzl e r e moval to produce the resultant dot bid 010. As can b e s e en th e 

35 dot data i n tho defective K4 nozzio was romovod and rep l aced by a dot in the adjacent Ka nozz i o 
i n the same dot pos i t i on, i . e . dir e ct subst i tution. 

I n th e e xample above tho i nk plan e could b e comp e nsat e d for by ind i rect substitut i on, i n which 
cas e i nk r e p l acement pattern for K4 wou l d be configur e d as b1 1 1000 (substitution into tho CMY 
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color pianos), and this is OR e d w i th th e output of d e ad nozzle romoval to produce tho resu l tant 
dot b1 1 1000. Here the dot data i n the def e ctiv e i nk p l an e was romov e d and p l ac e d into the 
CMY ink plan e s. 
29. 4 .3 Error d i ffus i on 

5 Based on tho programming of th e l ookup tabl e tho dead nozz le may b e left act i vo aft e r i nk 

rep l ac e ment. I n such cas e s th e DNC can comp e nsat e using error d i ffusion. Error d i ffusion i s a 
mechan i sm wh e r e d e ad nozzio dot data is diffused to adjac e nt dots. 

When a dot is active and its dostinod nozz l e is doad, th e DNC w ill att e mpt to place tho data into 
on adjacent dot position, if on e i s i nactive. I f both dots arc i nactive thon tho cho i co is arbitrary, and 
10 i s determ i ned by a psoudo random bit generator. I f both n ei ghbor dots aro already act i vo thon tho 
bit cannot bo compensated by d i ffusion. 

Since tho DNC needs to l ook at neighboring dots to d e t e rm i ne whore to placo tho now b i t (if 
requ i r e d), th e DNC works on a s e t of 3 dots at a t i m e . For any giv e n s e t of 3 dots, th e first dot 
received from tho HCU Is roforrod to as dot A, and th e s e cond as dot B, and th e th i rd as dot C. 
15 Th e r el at i onship i s shown In Figure 2 4 6. 

For any giv e n s e t of dots ABC, only B can bo componsatod for by e rror diffus i on i f B i s defined as 
doad. A 1 i n dot B will bo d i ffused into oithor dot A or dot C i f possible. I f ther e is a l r e ady a 1 i n dot 
A or dot C th e n a 1 in dot B cannot b e diffused i nto that dot. 

Tho DNC must support adjacent doad nozzl e s. Thus i f dot A i s defined as dead and has 
20 pr e v i ous l y b ee n comp e nsat e d for by e rror diffus i on, then tho dot data from dot B shou l d not be 
d i ffus e d into dot A. Sim i larly, i f dot C is d e f i n e d as d e ad, then dot data from dot B should not b o 
d i ffus e d i nto dot C. 

Error diffus i on shou l d not cross l ino boundar i es. I f dot B contains a doad nozzio and is tho first dot 
i n a lino then dot A r e pr e s e nts th e l ast dot from th e previous li n e . I n th i s cas e an act i v e bit on a 
25 doad nozz i o of dot B shou l d not bo diffused into dot A. S i m i larly, if dot B contains a doad nozzio 

and i s tho last dot in a l in e th e n dot C r e pres e nts th e first dot of tho next li n e . I n this cas e an activ e 
bit on a doad nozzio of dot B should not be diffus e d i nto dot C. 
Thus, as a rulo, a 1 in dot B cannot bo diffused i nto dot A if 
- — a 1 io already prcacnt — in dot A, 
30 ^ ' — dot A ia dc fined ao dead, - 

- — or dot A ia the laot dot in a lino. 
Sim il ar l y, a 1 in dot B cannot b e d i ffus e d i nto dot C i f 

a 1 io already prcocnt in dot C, 

-* dot C io defined ao dead, 

35 - or dot C io the firot dot in a line. 

If B i s defin e d to b e dead and the dot va l ue for B i s 0, th e n no comp e nsat i on needs to be don e 
and dots A and C do not need to be changed. 

I f B i s d e fin e d to bo d e ad and th e dot value for B is 1 , then B i s changed to 0 and tho DNC 
att e mpts to placo the 1 from B i nto e ith e r A or C: 
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If the dot can be placed into both A and C, — then the DNC muot choooc 
between thom. — The preference io given by the current output from the 
random bit goncrator^ — 0 for ^'prefer loft" — (dot A) — or 1 — for ^'prefer 
right" (dot C) . 

If dot can be placed into only one of A and C, — then the 1 from B io 
placed into that pooition. 

If dot cannot be placed into cither one of A or — then the DNC 
cannot place the dot in either pooition. 



10 



Tab l e 199. Error D i ffusion Truth Tabio whon dot B i s d e ad 




Tab l e 199 shows the truth tab l e for DNC error diffus i on operat i on when dot B is d e fined as dead, 
a. Output from random bit g e n e rator. D e term i nes dir e ction of error diffus i on (0 ~ le ft, 1 ~ right) 
b-. — Bold e mphasis Is us e d to show the DNC I nsert e d a 1 

15 The random b i t va l ue used to arb i trari l y select th e d i rection of diffus i on i s generated by a 32 - b i t 
maximum length random b i t g e n e rator. Th e gen e rator generat e s a now b i t for each dot in a li n e 
r e gardl e ss of wh e ther th e dot i s d e ad or not. The random bit generator can b e i nit i aliz e d w i th a 
32 b i t programmab le seed valuo. 
29. 4 . 4 Fixat i v e corr e ction 

20 Aft e r th e d e ad nozzl e comp e nsation methods have boon appl i ed to tho dot data, th e fixat l vo, i f 
prosont, may nood to bo adjusted du e to now nozzl e s b ei ng act i vat e d, or dead nozz l es be i ng 
r e mov e d. For e ach output dot th e DNC dotormln e s i f fixat i v e Is r e qu i r e d (us i ng tho 
Fixativ e Requir e dMaek rog i stor) for tho now componsatod dot data word and wh e th e r fixative i s 
act i vated already for that dot. For tho DNC to do so i t n ee ds to know th e color p l an e that has 
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f i xative, this i s sp e cifi e d by th e FixativeMaekl configurat i on r e gister. Tabl e 200 indioatoo tho 
act i ons to tak e based on th e s e calcu l at i ons. 

Tabl e 200. Truth tab le for fixativ e corr e ction 



Fixative Prooont 


Fixotivo roquirod 


Action 


4^ 


4- 


Output dot as is. 


A- 


9 


Cloar fixativo piano. 


Q 


4- 


Attempt to add fixatlvo.- 




0 


Q 


Output dot as is. 



5 Tho DNC a l so al l ows th e sp e cification of another fixativ e p l an e , specified by th e FixativoMask2 
configuration reg i ster, with Fi'xativ e Maskl having tho h i gher pr i ority over FixativoMaGk2. When 
att e mpting to add fixativ e th e DNC first tr i os to add i t i nto tho pianos def i ned by FixativeMaekl , 
How e v e r, if any of th e se pianos i s d e ad th e n i t tries to add fixativo by p l ac i ng i t into tho p i anos 
d e fin e d by Fixativ e MaGk2. 
10 Note that th e fixativ e d e f i ned by Fixativ e Maskl and Fixativ e MQ€k2 could possib l y b e multi part 

fixativ e , I . e . 2 b i ts could b e s e t I n FixativoMaekl w i th th e fixat i vo boing a comb i nation of both I nks. 
297€ I mplementation 

A b l ock diagram of the DNC is shown i n Figur e 2 4 7. 

29.5.1 D e fin i t i ons of I/O 

15 Table 201 . DNC port l ist and d e scr i ption 



Port name 


Pifts 


m 






Description 


Clocks and Resets 




1- 




System Clock. 


prst_n 


1- 




System reset, synchronous active low. 






PCU interface 


pcu_dnc_sol 


1- 


In 






Block select from the PCU. When pcu_dnc_Goi is 
high both pcu_adr and pcu_dataout are valid. 






\ 


In 




pcu_rwn 


Common read/not write signal from the PCU. 


pcu_adr[6:2] 


5 


In 






PCU address bus. Only 5 bits are required to 


decode the address space for this block. 


pcu_dataout[31:0] 


32 


\^ 


Shared write data bus from the PCU. 


dnc_pcu_rdy 


4- 


Out 


Ready signal to the PCU. When dno _pcu_rdy is 
high it indicates tho last oycio of the access. For o 


write cycle this means pcu_dataout has boon 


registorod by the block and for a read cycio this 


means the data on dnc _pcujdiatain is valid. 




dnc_pcu_datain[31 :0] 


32 


Out 


Read data bus to tho PCU. 






DIU interface 
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dnc_diu_rroq 


4- 


Otrt 


DNC unit requests DRAM road. A read request 
must be aocompanied by a valid road address. 




dnc_diu_radr[21 :5] 




Out 


Read addross to DIU 256 bit word alionQd 


diu_dnG_rack 


4- 


In 






Acknowlodge from DIU that road roquoot has 
boon accepted and now road addross can bo 


placod on dnc_diu_jrQdr 


diu_dnG_rvalid 










Read data valid, active high. Indioatos that valid 


read data is now on tho read data bus, dlujdQta. 


Oiu_ciata[bo.CJj 


©4 




Kead data from DIU. 


HCU interface 








d n o_hcu_read y 


I* 

+ 




Indicates that DNC is ready to acoopt data from 
tho HCU. 


h cu_d n c_a va i 1 


A 

+ 


1 1^ 


Indicates valid data present on hcu dnc_datQ. 


hcu_dnG__data[5:0] 


e 




Output bi level dot data in 6 ink pianos. 


r^t All 1 • X e 

DWU interfaco 








dwu_dnc_roady 


1- 


In 


Indicates that DWU is ready to accept data from 
tho DNC. 


dnc_dwu_avail 


4- 


Out 


Indicates valid data present on dncjdwujdatQ. 


dnc__dwu_data[5:0] 


6 


Otrt 


Output bi-level dot data in 6 ink planes. 



20.5.2 Conf i gurat i on rogistors 

Th e conf i gurat i on registers in th e DNC aro programmed via tho PCU intorfaoo. Ref e r to s e ction 
21 .8.2 on page 1 for th e d e scription of th e protocol and tim i ng d i agrams for read i ng and wr i ting 
r e gist e rs in tho DNC. Not e that s i nc e addr e ss e s in SoPEC ar e byt e a l igned and th e PCU only 



5 supports 32 bit reg i st e r r e ads and writes, th e l ow e r 2 b i ts of tho PCU addroso bus aro not requ i red 
to docodo tho addross spaco for the DNC. Wh e n r e ading a rogistor that i s loss than 32 b i t s wid o 
z e ros should bo returned on th e uppor unused b i t(s) of dnc _pcujdatain. Table 202 l i sts tho 
configuration registers in th e DNC. 

10 Table 202. DNC configuration rogistors 









Value. bnH 








Control registors 








0*1- 




A write to this rogistor causes a rooot of 
tho DNC. 


0x04 


6e 


4- 




Writing 1 to this register starts tho DNC. 




Writing 0 to this register halts tho DNC. 
When Go is asserted all counters, flags 




etc. aro cloarod or givon thoir initial 
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value, but configuration rogistoro koop 



th e ir values. 



When Go i s d e assort e d the otato 



maohinos go to tho i r i dle otatos but al l 
oountors and configuration rog i stors 



koop tho i r va l ues. 

This regist e r can b e read to det e rmin e if 



th e DNC i s running 

(1 - runn i ng, 0 ~ stopped). 



Setup reg i sters (constant during processing) 



MaxDot 



4€ 



0x0000 



This is the maximum dot number — 1- 



pag e contains 1 382 4 dots, thon MaxDot 



w il l bo 13823. 



Not e that this numb e r may or may not 
bo tho some as the number of dots 



across th e pr i nthoad as some margining 
may be i ntroduced in tho PHI. 



pr e s e nt across a pag e . For example I f a 



t=SFR 



32 



0x0000 



QQQQ 



The current valuo of tho LFSR r e gister 
us e d as tho 32 bit maximum l ength 



r a ndom bit gonorator. 

Users can writ e to th i s r e gister to 



program a sood valu e for tho 32 bit 
maximum l e ngth random b i t g e nerator. 



Must not b e a ll 1s for taps i mpl e m e nted 



in XNOR form. ( I t is e xpected that 
wr i t i ng a sood valu e w i ll not occur during 



th e operat i on of th e LFSR). 

This LSFR valu e could a l so have a 



possibl e uso as a random source i n 



program code. 



Q x20 



Fixativ e MaskI 



Defines tho higher prior i ty f i xative 
plan e (s). B i t 0 r e pr e sents tho sett i ngs 



For plane 0, b i t 1 for p i ano 1 e tc. For 



e ach bit: 



1 ~ the Ink p l an e contains fixat i ve. 
0 - tho i nk piano do e s not contain 



fixativ e . 



Fixat i v e Mask2 & 



D e fin e s th e l ow e r prior i ty f i xot i vo 
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nlj^nf*^^^ RIt n rf*nrf***r*nt*^^ thn r:r^ttinnr: 


for plane 0, bit 1 for piano 1 oto. Uood 


only whon FixQtivBMQski planes are 


dead For oach bit' 

1 the ink plane contains flxativo 


0 ~ the ink piano does not contain 




rwoQ 


FixativeRequired 


6 


nvfin 








fixativo. Bit 0 represents tho sottings for 
ninnf* 0 hit 1 for nlnnf^ 1 ntn Fnr f^r>nh 


bitf 

1 ~ the ink olane rocuiros fixative 


0 ~ tho ink plane does not roquiro 


fixativo (e.g. ink is self fixing) 


Qy3Q 


DnTableStartAdr[ 
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0x0 0000 


Start address of Dead Nozzle Table in 








DRAM spocified in 256- bit words 








DnTableEndAdr[ 
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0x0 0000 










the location containing tho last entry in 




^linnori tn i ?Sfi hit hniinHnni/ if 


nec^*^Qnrv it mn hf^ nnririf^ri with null 


■ ix^^yx^v^ww*! T iw wAi I IVILl 1 1 lull 


0x40 0x54 


PlaneReplaoePat 
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Q)^QQ 






tern[5:0] 












PlaneReplQcoPQttorn[1] is tho ink 


replacempnt nnttP^rn for nianp 1 pto 


For each 6-bit replacement pattern for a 


piano, a 1 in any bit positions indicates 


the slternative Ink olanes to be u'^ed for 


this plane 




DiffuooEnablo 


S 


9x3F 






Dofinos whether, after ink replacomont, 
error diffusion is allowed to be 
performed on each plane. 


Bit 0 represents the settings for plane 0, 
bit 1 for plane 1 etc. For each bit: 
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1 - error diffusion is enabled 
0 - orror diffusion is disablod 


Debug rogistors (road only) 


QxQQ 
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N/A 


Bit 7 - dwu_dnc_roQdy 




Bit 6 - dnojdIwujavQil 
Bits 5 0" dncjdwujdQta 




DnoReplaoeDeb 


44 


N/A 




u§ 


Bit 13 " odujready 
Bit 12 - IrujavQil 
Bits 1 1 6 - iru_dn_mQGk 
Bits 5 0 - iru_data 


Qx68 


DncDiffueeDobu 




N/A 




9 


Bit 1 3 " dwu_dnc_roady 
Bit 12 - dnc_dwu_Qvaif 
Bits 1 1 6 - QdujdnjmoGk 
Bits 5 0" odujdatQ 



29.5.3 I nk rop l ac e ment un i t 

Figuro 2^8 shows o sub block diagram for tho ink rop l ac e mont unit. 
29.5,3.1 Control unit 

Tho control un i t is rospons i blo for reading th e dead nozzl e tab l e from DRAM and making It 
5 availab le to tho DNC v i a th e dead nozzio FIFO. Tho doad nozzle tab l e i s road from DRAM in 
s i ngle 256 b i t acc e ss e s, r e ce i ving th e data from the DIU ovor ^ clock cyclos (6^ b i ts per cycio). 
Tho protoco l and t i m i ng for road accossos to DRAM is doscribod i n section 20.9.1 on page 1. 
R e ading from DRAM is implement e d by m e ans of tho stato mach i ne shown i n F i guro 2 4 9. 
A l l counters and flags should bo c l eared after rosot. When Go trans i t i ons from 0 to 1 al l counters 
10 and flags should toko their In i tia l value. Whil e th e Go b i t l o 1, the stato mach i n e r e qu e sts a road 
access from th e dead nozzio tab l e In DRAM provid e d there i s enough opaoo i n Its F I FO. 
A modu l o ^ counter, rdjcount, is used to count each of the 6 4- b i ts r e c ei ved i n a 256 - b i t r e ad 
access. It is incr e m e nt e d whenev e r diujdncjrvQlid i s assorted. When Go is 1 , dnjtablojradr i s 
s e t to dn_jQblo_GtQrt_Qdr. As each 6^ b i t valuo i s returned, i nd i cat e d by diu_dnc_rvafid b ei ng 
15 ass e rt e d, dnjtablojradr is compared to dn_tQbl&jond_Qdr. 

^ If rd_count equals 3 and dnjabl e jadr equa l s dnJabloj>ndjidr, then dnjabl e jadr is 

updated to dnjQble_Gtart_adr. 

^ If rd_count equa l s 3 and dnjQblo_radr 6oeo not equa l dnjablej>ndj3dn then 

dnjablojrodr i s increm e nt e d by 1 . 
20 A count is kept of tho number of 64 bit va l ues i n the FIFO. Wh e n diu_dnc_n/alid is 1 data is 

written to the FIFO by assorting ivr_ e n, and fffo_contontG and fifo_wr_adr ore both i ncremented. 
Whon fffo_oont e ntG[3:0] i s greater than 0 and odujoady i s 1 , dnojioujoady is ass js rtod to 
i ndicate that tho DNC is r e ady to acc e pt dots from th e HCU. I f hcu_dncj3vail is a l so 1 then a 
dotadv pu l s e is sent to the GonMask unit, ind i cating tho DNC has aoooptod a dot from tho HCU, 
25 and iru^avail is a l so assorted. After Go i s set, a s i ngle prolood pu l s e is s e nt to the GonMask un i t 
onc e th e F I FO conta i ns data. 
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Whon a rdjadv pulse is reooivod from tho GonMask un i t, ftfo_rd_adr[^:0] is then i noromented to 
so l ect the n e xt 16 bit valu e . If fifo_rd_adr[1 :0] - 1 1 th e n the noxt 6^ b i t va l u e is r e ad from the 
FIFO by assort i ng rd_on, and fifo_contontG[3:0] is docromontod. 

29.5.3.2 D e ad nozzl e FIFO 

5 Tho doad nozz i o F I FO oonooptua l ly is a 6 4 b i t input, and 16 bit output F I FO to account for th e 6 4- 
bit data transf e rs from th e D I U, and th e I nd i v i dua l 16 b i t e ntri e s i n tho doad nozzle tab l e that aro 
used I n tho G e nMask unit. I n rea li ty, th e F I FO is actua ll y 8 e ntr i es d ee p and 64 bits wido (to 
accommodate two 256 b i t accosoos). 

On tho DRAM sido of tho FIFO th e writ e addr e ss is 64 - b i t a l ignod wh il e on th e GonMask sid e the 
10 road address is 16 - bit a l ign e d, i . e . tho upper 3 b i ts aro input as th e r e ad address for th e FIFO and 
tho low e r 2 bits ar e us e d to s e l e ct 16 b i ts from tho 6 4 bits (1st 16 bits road corresponds to bits 15 
0, s e cond 16 b i ts to bits 31 - 16 e tc.)- 

29.5.3.3 GonMask unit 

Th e G e nMask un i t gonoratos tho 6 - bit dn^maek that is sent to tho roplaco un i t. I t consists of a 10 

15 b i t d e lta counter and a mask r e g i ster- 
Aft e r Go is set, tho GenMask un i t w i l l rocoivo a proload pulso from tho control un i t indicating the 
first doad nozzl e tabl e e ntry is ava i labl e at th e output of th e d e ad nozzle F I FO and should be 
loadod into tho dolta counter and mask r e g i ster. A rd_qdv pu l s e i s gen e rated so that th e n e xt 
doad nozzi o table e ntry i s pr e s e nt e d at th e output of tho doad nozzio F I FO. Tho dolta counter i s 

20 d e cromonted ov o ry t i me a dotadv pu l s e i s r e c e iv e d. Wh o n th e d e lta counter reaches 0, it g o ts 

load e d w i th tho current dolta vaiuo output from tho doad nozzl e FIFO, i .e. b i ts 15 6, and th e mask 
reg i ster gots loadod w i th mask output from the d e ad nozz i o F I FO, i . e . b i ts 5 0. A rdjadv pu l so i s 
then generat e d so that th e n e xt dead nozzle tablo entry i s presented at tho output of tho doad 
nozz i o F I FO. 

25 Wh e n th e do l ta count e r is 0 tho value in th e mask register is output as th e dnjmoek, otherwise 
tho dn_moek is a ll Oo. 

Th e GenMask un i t has no knowl e dg e of th e numb e r of dots i n a l i n e , it simply loads a counter to 
count th e dolta from one doad nozzl e column to th e n e xt. Thus as descr i bed i n sect i on 20.2 on 
page 1 tho d e ad nozz le tabl e should i nclude nu l l id e nt i fi e rs i f nec e ssary so that the d e ad nozz i o 
30 tab l e covors tho first and l ast nozzl e co l umn i n a l i no. 

29.5.3.4 Roplaco unit 

D e ad nozz i o remova l and i nk r e p l acement are imp le m e nt e d by th e combinatorial logic shown in 
F i gur e 250. Dead nozz i o remova l i s performed by b i t w i so AND i ng of tho inverse of tho dn^maek 
w i th the dot valuo. 

35 Tho ink rep l acement mechanism has 6 ink r e p l ac e m e nt patterns, one per i nk plane, 

programmabl e by th e CPU. The d e ad nozz le mask i s ANDed w i th th e dot data to se e i f thoro aro 
any p i anos whoro tho dot i s act i v e but th e corr e sponding nozz le is doad. Tho resultant va l uo 
forms an enab l e, on a per i nk bas i s, for tho ink replacement process. If rop l acomont i s enab l ed for 
a particu l ar ink, tho va l ues from tho corresponding rop l acomont pattern reg i ster aro ORod into tho 
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dot data. Th e output of tho i nk rop l ac e m e nt prooosQ i s th e n f il torod so that e rror diffusion is on l y 
allowed for th e planes i n wh i ch error diffusion i s e nab l ed. 

Tho output of tho ink replaoomont procoss i s ORed with tho resu l tant dot aftor d e ad nozz le 
r e mova l . If th e dot posit i on do e s not contain a d e ad nozz l e then tho dajmaek will b e a l l Os and tho 
5 dot, hcu_dnG_dQta, wil l be passod through unchanged. 
29.5. 4 Error D i ffusion Unit 

Figure 251 shows a sub block diagram for tho error diffusion unit. 
20. 5. ^. 1 Random Bit Gonorator 

Th e random bit va l ue used to arb i trarily soloct tho dir e ct i on of d i ffusion is gonoratod by a 
10 max i mum l ength 32 bit LFSR. The tap po i nts and foodback generat i on ar e shown i n F i gure 252. 
Th e LFSR generates a n e w b i t for oach dot i n a lino r e gardl e ss of whether th e dot i s dead or not 
i .o shifting of th e LFSR i s enab l ed wh e n advdot e qua l s 1. Tho LFSR can be i n i tia l ised with a 32 
bit programmab le s ee d va l u e , randomjs e od. This seed value is loaded into tho LFSR whonovor a 
writ e occurs to th e RandomSood register. Noto that tho sood va l u e must not bo al l 1s as th i s 
15 caus e s th e LFSR to lock up. 

29.5.4.2 Advanoo Dot Unit 

Th e advance dot unit is r e spons i ble for d e t e rmin i ng in a giv e n cyc le wh e th e r or not th e e rror 
d i ffus e unit w i l l acc e pt a dot from th e ink roplac o mont unit or make a dot ovailablo to tho fixative 
corr e ct unit and on to th e DWU. It thorofor o r e c e ives tho dwajdnajroady contro l signal from th e 
20 DWU, th e iru_avaif flag from tho ink roplacem e nt un i t, and g e nerates dncjdwujavail and 
e dujr e ady control flags. 

Only th e dwujdnojroady signa l n ee ds to bo ch e ck e d to see i f a dot can bo accepted and assorts 
edujr e ady \o i nd i cate this. I f tho error diffuse unit i s ready to acc e pt a dot and th e ink r e plac e m e nt 
un i t has a dot availab le , then a advdot puls e i s g i v e n to shift tho dot i nto the pipo l ino in th e diffus e 
25 unit. Noto that sinc e th e e rror diffusion op e rates on 3 dots, tho advance dot unit i gnores 
dwujdnojroQdy in i t i al l y unti l 3 dots havo boon accepted by tho diffus e un i t. Sim i lar l y 
dnc_dwu_ovail is not ass e rted unti l th e diffuse un i t conta i ns 3 dots and the ink rop l acem e nt unit 
has a dot available. 

29.5.4.3 Diffus e Unit 

30 Tho diffus e un i t conta i ns tho combinator i a l l ogic to i mp le m e nt the truth tab le from Tab l e . Tho 

diffuse unit r e c ei ves a dot consist i ng of 6 color p l an e s (1 bit per p i ano) as w e l l as an assdc i atod 6 
b i t d e ad nozzle mask value. 

Error d i ffus i on is appl i ed to all 6 p l anes of th e dot in para ll el. Sinc e e rror d i ffusion op e rat e s on 3 
dots, th e d i ffuse un i t has a pipe li n e of 3 dots and the i r correspond i ng dead nozzio mask values. 
35 Th e f i rst dot r e ceived is referred to as dot A, and th e second as dot B, and th e third as dot C. Dots 
are shifted along the pipo l ino whenever advdot is 1 . A count is also kept of th e numb e r of dots 
rec e iv e d. It is i ncr e mented whonovor advdot is 1 , and wraps to 0 when it roaches maxjdot Whon 
tho dot count is 0 dot C corresponds to tho first dot i n a l i no. Wh e n th e dot count is 1 dot A 
corresponds to tho last dot in a lino. 
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I n any g i v e n s e t of 3 dots on l y dot B can b e d e fin e d as contain i ng a dead nozzlo(G). Doad nozzles 
are i dentifi e d by bits set i n irujein^moGk. If dot B contains a doad nozzlo(s), th e correspond i ng 
bit(G) i n dot A, dot C, the d e ad nozz i o mask va l ue for A, tho doad nozzio masl< value for C, th e dot 
count as w ell as th e random b i t value are i nput to the truth table l og i c and tho dots A, B and C 
5 ass i gned accord i ng l y. I f dot B does not contain a dead nozz l e then the dots aro sh i fted a l ong tho 
p i pe l ine unchanged. 
2 9 .5.5 Fixativ e Corr e ction Unit 

Th e fixat i ve corroction unit consists of combinator i al l ogic to Imp le m e nt f i xative corroction as 
d e fin e d in Tab i c 203. For e ach output dot tho DNC det e rm i n e s if fixative i s roquirod for th e n e w 
10 comp e nsat e d dot data word and wh e th e r f i xat i v e i s activated a l r e ady for that dot. 

— Fixa t i vcPr G o cnt = ( (FixativcMaokl 1 FixativGMaalc2 ) & 

Gdu_data) — ! = 0 

FixativGRcquircd ° — (FixativGRoquircdMaok & Gdu_data) — !« 0 

15 I t then looks up tho truth table to soe what action, if any, n ee ds to bo takon. 
Tabl e 203. Truth tab le for fixat i v e corr e ction 



0 



Fixativ e Pr e s e nt 



r e quir e d 



0 



Fixativ e 



Act i on 



Output dot as i s. 



Cl e ar fixat i ve p l an e . dno_dwu_data - ( e du_data) & 



Attempt to add fixative. 



Output 



dnc dwu data ~ e du data 



"(FixativoMaskI | F i xat i voMask2) 



i f (Fixat i v e MaskI & DnMask) !- 0 
dnc_dwu_data ~ ( e du_data) | 



(FixativeMask2 & '^DnMask) 



dno_dwu_data ~ (edu_data) | 
(F i xativ e MaskI ) 



0 



0 



Output dot as is. 



dnc dwu data ~ edu data 



25 



Wh e n attempt i ng to add fixat i ve th e DNC first tr ie s to add i t into the p l an e defined by 
FixativeMaskI. How e v e r, i f this p l an e is d e ad th e n i t tri e s to add fixativ e by placing it I nto th e 
20 plane defined by FixQtiv e MQck2. Not e that i f both FixativoMaekl and Fixativ e MaGk2 ar e both a l l 



Os th e n th e dot data w i ll not bo changed. 

30 Dotl i no Writor Un i t (DWU) 

3O7I Overview 

Th e Dotlin e Writ e r Unit (DWU) r e ce i v e s 1 dot (6 bits) of co l or i nformation per cycle from tho DNC. 
Dot data rece i ved is bundled i nto 256 b i t words and transf e rr e d to th e DRAM. The DWU ( i n 
conjunction w i th tho LLU) impl e m e nts a dot l in e F I FO mechan i sm to comp e nsat e for th e phys i ca l 
placement of nozzles in a pr i nthead, and prov i d e s data rate smoothing to a ll ow for local 
complexities i n tho dot data generate pipo li no. 
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30t2 Phys i cal requircmqnt i mposed b y t h e printhead 

The physica l p l oo e m e nt of nozzl e s i n th e pr i nth e ad moans that i n ono firing soquonoo of o i l 
nozzl e s, dots wi l l b e producod over s e v e ra l print l inos. Tho printh e ad oons i sto of 12 rows of 
nozzles, ono for oaoh co l or of odd and e v e n dots. Odd and ev e n nozzlos ar e separat e d by Da 
5 print l inos and nozz l es of differ e nt colors aro separat e d by D4 print l inos. Soo F i gure 25^ for 
r e fer e nce. Tho first co l or to bo pr i nted is tho first row of nozzles e ncount e red by the i ncom i ng 
pap e r. In tho oxampio this i s co l or 0 odd, a l though i s depend e nt on th e pr i nth e ad typo (soo [10] 
for oth e r pr i nthead arrangments). Pap e r passes und e r printh e ad mov i ng downwards. 
For e xamp le i f th e phys i cal separation of oaoh ha l f row i s QO\xm e quating to 04-0^-5 print l i nos at 
10 1600dp i . This m e ans that in on e fir i ng sequ e nc e , co l or 0 odd nozzl e s wi l l f i ro on dot l ino L, color 0 
oven nozzlos wi l l firo on dotlino L D^, color 1 odd nozz le s w i ll fir e on dotlin e L D4 " D^ and so on 
ovor 6 color pianos odd and even nozz l os. Tho tota l number of lines fired over i s given as 
0*5+5 +5- 0 * 1 1x5 ^55. S ee F i gur e 255 for example diagram. 

It i s expected that tho physica l spacing of th e printhead nozzlos wil l b e SO^im (or 5 dot li n e s), 
15 although th e re is no dependency on nozzio spac i ng. Tho DWU is configurab l e to allow oth e r l ino 
nozzle spacings. 

Tab l e 20 4 . Re l ationship between Nozz le color/s e ns e and l i no firing 



Color 


Even lino encountered first 


Odd line onoountored first 








Sense 


til tu 






Color 0 




1= 


even 






Odd 


L-S 


add 




Color 1 




t-40 


even 












0d4 


l=-45 


nHH 


\=-4Q 


Color 2 




l=-20 


0 V V^l 1 












l=-2§ 


LIUU 




Color 3 


Even 


l=-30 


cvon 






044 


l=-3§ 




[_ 3Q 


Color 4 


Even 


t-40 


even 






Q44 


L-4S 




L-40 


Color 5 


Evee 


\=-%Q 


even 






Odd 




nHH 


|_ gQ 



30t3 L i ne rate de - coupl i nc 



20 Th e DWU block is r e quired to compensat e for the physical spacing b e tw e en l inos of nozzl e s. It 

do e s this by storing dot l i nos i n a F I FO ( i n DRAM) until such t i mo as thoy aro required by tho LLU 
for dot data transfer to tho pr i nth e ad i nt e rface. Colors ar e stored separat e ly b e caus e they aro 
noodod at difforont t i mes by th e LLU. Tho dot l i no storo must stor e e nough l i nes to componsat o 
for th e phys i cal li no soparation of the printh e ad but can opt i ona l ly storo more l inos to allow syst e m 
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levol data rat e variation betw ee n tho r e ad (printh e ad f e ed) and writo sid e s (dot data gonoratton 
pip eli n e ) of th e FIFOs. 

A l og i cal r e pr e s e ntation of tho F I FOs I s shown i n Figur e 256, whore N is d e fined as tho opt i onal 
number of oxtra ha l f l i nos in tho dot li ne store for data rate do - ooup l ing. 

5 Dot l i ne store storage requ i rements 

For an arb i trary page w i dth of d dots (wh e re d i s ovon), tho number of dots per half li ne is d/2. 
For intor l ino spac i ng of and intor color spacing of D4., w i th C colors of odd and oven ha l f li nos, 
tho number of ha l f lino storage is (C — 1) {D^ ^a ) + P1> 

For N e xtra half ii n o stores for oach color odd and e v e n, th e storag e is giv e n by (N * 0 * 2). 
1 0 Tho tota l storage requir e m e nt i s ((C 1 ) (D g^^Q^ ) + D1 + (N * C * 2)) * d/2 in bits. 

Noto that whon det e rm i ning th e storage requir e m e nts for tho dot l ino stor e , tho number of dots p e r 
l i no is tho page w i dth and not nooossariiy tho pr i nth e ad width. Tho page w i dth i s oft e n th e dot 
marg i n numb e r of dots le ss than the printhoad width. Th e y can b e th e samo s i ze for fu ll b le ed 
printing. 

15 For e xampl e In an A 4 pag e a l i n e consists of 1382 4 dots at 1600 dpi, or 6912 dots p e r ha l f dot 
lino. To store just e nough dot l i nos to account for an i ntor l ino nozzl e spacing of 5 dot linos i t 
would take 55 half dot l inos for color 5 odd, 50 dot linos for co l or 5 ovon and so on, g i v i ng 
55+50+^15.. .10+5+0- 330 ha l f dot li n e s i n tota l . I f i t is assum e d that N-4 th e n th o storage requ i red 
to store A e xtra half l ines per color is 1 x 12-^8, in tota l giv i ng 330+ 4 8-378 ha l f dot l i n e s. Each 

20 half dot l i n e i s 6912 dots, at 1 bit p e r dot giv e a tota l storag e r e quir e m e nt of 6912 dots x 378 ha l f 
dot li n e s / 8 bits ~ Approx 310 Kbytes. S i m il ar l y for an A3 sizo pag e with 19 4 88 dots p e r l i n e , 
974 4 dots p e r half lino x 378 half dot l inos / 8 ~ Approx 899 Kbytes. 
Tab le 205. Storage requ i r e ment for dot l in e store 



Page size 


Nozzio 












Spacing 


Lines required (N-0) 


Storage (N-0) 


Lines required 


Storage (N-4) 




Kbytes 


(N=4) 


Kbytes 


M 


4 


264 


223 


342 


253 




§ 


inn 


278 


378 


349 


A3 


4 


264 


528 




742 




g 


33Q 




378 


899 



25 Th e pot e ntial s i zo of th e dot l in e stor e mak e s i t unf e asib le to b e i mp l omontod in on - ch i p SRAM, 
requir i ng tho dot li no store to b e i mpl e m e nt e d In emb e dd e d DRAM. This allows a conf i gurable 
dot li n e stor e whero unus e d storag e can b e r e distributed for us e by other parts of tho system. 
30t5 Nozzle row skew 

Du e to construct i on li m i tations of tho b i li thic pr i nthoad i t i s poss i bl e that nozzl e rows may bo 
30 m i sal i gn e d r el ative to e ach other. Odd and ovon rows, and adjacent co l or rows may b e 

hor i zonta ll y m i sal i gned by up to 2 dot pos i t i ons. Vert i cal misa li gnmont can a l so occur but is 
componsatod for i n the LLU and not cons i d e r e d her e . Th e DWU is requ i r e d to comp e nsate for the 
hor i zonta l m i sa li gnmont. 
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Dot data from th e HCU (through tho DNC) produces a dot of 6 colors a l l destinod for the samo 
physical l ocation on paper. I f th e nozz le rows i n tho printhoad ar e a l ign e d as shown In Figur e 25 4 
th e n no adjustment of tho dot data Is noodod. 

A conceptua l m i saligned printhead is shown i n Figuro 257. Tho oxact shap e of tho row alignm e nt 
5 i s arbitrary, a l though i s most lik el y to b e s l op i ng ( i f s l oping, i t cou l d b e s l op i ng In o i thor d i rect i on). 
Tho DWU is roquirod to adjust tho shape of tho dot streams to toko account of the jo i n between 
pr i nthoad I C s . Th e introduction of th e join shape before the data is wr i tt e n to tho DRAM means 
that tho PH I SOD S a si ng l e crossover point i n tho data since all l ines are the same length and the 

10 samo t i me for al l ovon rows, and at tho samo tim e for a l l odd rows as shown i n F i gur e 258. 

To insert tho shape of tho jo i n into tho dot str e am, for e ach l i n e we must f i rst i ns e rt th e dots for 
non - pr i ntabl e ar e a 1 , then th e printab l e area data (from th e DNC), and then final l y th e dots for 
non printable ar e a 2. This can also b e cons i dered as: first produc e th e dots for nen pr i ntable area 
1 for lino n, and th e n a r e p e tit i on of: 

15 produc e the dots for tho pr i ntab le ar e a for li n e n (from tho DNC) 

^ produc e the dots for th e non - printabl e ar e a 2 (for l ino n) follow e d by th e dots of non - 
pr i ntabl e ar e a 1 (for lin e n+1) 
Th e r e ason for consid e r i ng th e problem this way Is that r e gard l ess of the shopo of the jo i n, th e 
shape of non - printab le ar e a 2 m e rg e d w i th tho shape of non pr i ntab l e area 1 w ill always b e a 

20 roctang l o sinc e th e widths of non printable areas 1 and 2 aro ident i cal and th e le ngths of each row 
ar e I dontical. Honco st e p 2 can b e accomp l ished by simply inserting a constant number 
{MaxNozzloSkQw) of 0 dots into tho stream. 

For example, i f tho color n e ven row non pr i ntable area 1 i s of l ength X, th e n th e l ength of color n 
ev e n row noh - printab le ar e a 2 wil l b e of l ength MaxNozz le Skew X. Tho split between non 

25 pr i ntabl e ar e as 1 and 2 i s defined by tho Nozzl e Sk e w r e gist e rs. 

Data from th e DNC is d e st i n e d for th e pr i ntab le area on l y, tho DWU must gen e rat e th e data 
d e st i n e d for th e non printab l e ar e as, and ins e rt DNC dot data correctly i nto the dot data stream 
b e fore writing dot data to the fifos. Th e DWU inserts th e shap e of th e m i salignment Into the dot 
stream by delaying dot data d e stin e d to different nozzl e rows by th e r e lat i v e misal i gnm e nt skew 

30 amount. 

30t6 Local b uffer i ng 

An embedded DRAM Is expected to bo of the order of 256 bits wide, which r e su l ts in 27 words per 
ha l f li no of an A^ pag e , and 54 words por half l ino of A3. Th i s requires 27 words x 12 half co l ors 
(6 co l ors odd and ovon) ~ 32 4 x 256 b i t DRAM access e s ov e r a dot li ne pr i nt tim e , e quat i ng to 6 
35 bits per cyc le ( e qual to DNC gen e rate rate of 6 bits p e r cycl e ). Each half color is required to bo 
double buffered, whi le fi l l i ng one buffer tho othor buffer is being written to DRAM. This r e sults i n 
256 b i ts X 2 buffers x 12 half co l ors i . e . 61 44 b i ts i n tota l . 

Tho buffer requirement can bo reduced, by us i ng 1 .5 buffer i ng, wh e r e the DWU is fi lli ng 128 b i ts 
whi l e the remain i ng 256 bits aro being written to DRAM. Wh i l e this r e duc e s tho requ i r e d buffer i ng 
40 local l y i t i ncroasos tho peak bandwidth requ i r e m e nt to the DRAM. With 2x buffering the av e rag e 
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and poak DRAM bandw i dth roqu i r e m e nt i s th e sam e and i s 6 bits per oyolo, a l t e rnat i v e ly with 1 .5x 
buff e ring th e av e rag e DRAM bandw i dth requ i r e m e nt is 6 b i ts por cyc le but tho poak bandw i dth 
roqu i romont i s 12 bits p e r cycl e . Tho amount of buff e ring us e d w ill d e p e nd on the DRAM 
bandwidth avai l ab l e to th e DWU unit. 
5 Should the DWU fai l to get th e r e qu i red DRAM acc e ss w i th i n th e sp e cifi e d t i mo, tho DWU wi ll sta l l 
tho DNC data gen e ration. Th e DWU wi ll i ssue th e stal l i n suffic i ent t i m e for the DNC to r e spond 
and st i ll not caus e a FIFO ov e rrun. Should tho stall p e rs i st for a suffici e ntly long time, th e PHI wi ll 
bo starv e d of data and b e unabl e to d eli ver data to th e printh e ad i n tim e . Th e s i zing of tho dotlino 
store F I FO and int e rna l FIFOs shou l d be chosen so as to prevent such a sta ll happ e n i ng. 

10 SGtT DOTL I NE DATA IN MEMORY 

Tho dot data shift r e gist e r ord e r in th e printh e ad i s shown i n Figur e 254 (tho transmit ordor is tho 
opposite of th e sh i ft r e gist e r ord e r). I n th e e xamp l e tho typo 0 printh e ad IC transm i t order i s 
i ncr e asing e v e n color data fo l lowed by d e creasing odd co l or data. Th e type 1 printhead IC 
transmit ord e r i s d e cr e as i ng odd co l or data follow e d by incr e as i ng e v e n co l or data. For both 
15 pr i nthead I Cs tho oven data is always i ncreasing order and odd data i s always docroos i ng. Tho 
PH I contro l s which printh e ad I C data g e ts sh i ft e d to. 

From th i s i t is b e n e fic i al to store e v e n data in i ncr e as i ng ord e r i n DRAM and odd data in 
decr e asing ord e r. Whi l e th i s ordor suits tho examp l e pr i nthoad, othor printhoads ex i st whore it 
wou l d b e b e noficia l to stor e e ven data i n d e cr e as i ng ord e r, and odd data in i ncreas i ng order, 
20 h e nc e th e ord e r i s configurable. Th e ord e r that data i s stored in m e mory i s contro lle d by s e tt i ng 
th e ColorLinoSonGO reg i ster. 

Tho dot ordor i n DRAM for increasing and d e cr e as i ng sens e is shown I n Figur e 260 and Figur e 
261 resp e ct i v el y. For each l ine i n the dot store tho order i s the same (a l though for odd linos the 
number i ng wil l be diff e r e nt th e ord e r will r e ma i n th e samo). Dot data from tho DNC is a l ways 
25 r e ce i v e d i n increas i ng dot numb e r ord e r. For incr e as i ng sens e dot data i s bund le d i nto 256 - bit 
words and writt e n in incr e as i ng ord e r in DRAM, word 0 first, then word 1 , and so on to word N, 
whore N is the number of words i n a lino. 

For decr e as i ng s e nse dot data is also bundled i nto 256 bit words, but is writt e n to DRAM i n 
d e creasing ordor, i.o. word N i s writt e n first th e n word N 1 and so on to word 0. For both 
30 i ncroasing and docroasing s e nse tho data is al i gned to b i t 0 of a word, i . e . i ncr e as i ng s e nse 
a l ways starts at bit 0, d e creasing s e nse always fin i shes at bit 0. 

Each ha l f co l or i s configured independent l y of any othor color. Tho CoiorBoGoAdr register 
sp e c i fi e s the position wh e r e data for a part i cular dot li n e F I FO w i l l beg i n wr i t i ng to. Note that for 
i ncreasing s e nse colors tho CoforBaeoAdr register specif i es th e addr e ss of the f i rst word of first 
35 li no of th e f i fe, whereas for decreas i ng sonso colors the ColorBaeoAdr register spec i fies tho 
address of l ast word of tho first li n e of the FIFO. 

Dot data rece i ved from the DNC i s bundl e d i n 256 bit words and transferred to tho DRAM. Each 
li no of data is stor e d consecut i vely i n DRAM, w i th each li ne s e parated by ColorLinelnc numb e r of 
words. 
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For oach l ine stored in DRAM th e DWU i ncr e m e nts the l i no count and ca l ou l atos tho DRAM 
addrosQ for tho noxt l i no to storo. 

Th i s proc e ss continu e s unti l CoiorFifoSize number of li n e s aro stor e d, aftor which tho DRAM 
address w i l l wrap back to tho ColorBoGoAdr address. 
5 As oach l i n e is wr i tt e n to tho F I FO, tho DWU increments tho FifoFUILovol r e gister, and as tho LLU 
r e ads a lin e from th e F I FO tho FifoFIIIL e vol register is docromontod. Tho LLU i ndicates that it has 
comp le t e d reading a lino by a high pulso on th e ifu_dwuJino_rd l ino. 

Wh e n th e number of linos stored in th e FIFO i s equa l to tho MaxWritoAhood value tho DWU w il l 
indicate to th e DNC that it is no l onger ab l e to receive data (i.e. a sta ll ) by doassort i ng tho 
10 dwujdncjroady signa l . 

Th e CoiorEnable r e g i ster detorm i nos wh i ch color pianos should bo proc e ssed, i f a p l an e is turned 
off, data i s ignored for that plan e and no DRAM accesses for that p l ane aro generatod, 
30r8 Spec i fy i ng dot FIFOs 

Th e dot li n e F I FOs when accessed by th e LLU aro specified d i fferently than wh e n accessed by 
15 tho DWU. Tho DWU uses a start address and number of l inos va l u e to specify a dot F I FO, the 
LLU us e s a start and e nd address for each dot F I FO. The m e chanisms differ to al l ow more 
e ff i c ie nt impl e mentat i ons in each block. 

As a r e sult of l imitat i ons i n tho LLU tho dot F I FOs must bo specified cont i guously and i ncreasing 
i n DRAM. Soo s o ction 31 .6 on page 1 for furth e r i nformation. 

20 30t9 I mplementat i on 

30.9.1 D e fin i t i ons of I/O 

Tab l e 206. DWU I/O. Dofinit i on 



Port nam e 



Pfns I/O Description 



C l ocks and R e sets 



\b Syst e m Clock 



prst_n 



\b System ros e t, synchronous act i ve l ow 



DNC i nt e rface 



dwu_dnc_roady 



Hi it 



Ind i cat e s that DWU i s ready to accept data from 
tho DNC. 



dnc dwu avai l 



Ift 



I ndicates va li d data present on dnojdwujdata. 



dnc__dwu_data[5:0] § 



Ift input bi l ev e l dot data in 6 i nk p l an e s. 



LLU Int e rfaco 



dwu ll u l ino wr 



Out 



DWU l i ne writ e . I nd i cat e s that th e DWU has 



comp l eted a fu ll l ino write. Active h i gh 



l lfu dwu l i no rd 



i« 



LLU li ne r e ad. Ind i cates that the LLU has 



comp le ted a l i n e road. Activ e h i gh. 



PCU I ntorfaoo 



pcu_dwu_so l 



In Block so l oct from tho PCU. When pcu_dwu_GOl is 
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high both pcu_ac(r and pcu_dataout aro valid. 






4- 


In 


Common read/not- writo signal from tho PCU. 


pGu_rwn 




pGu_adr[7:2) 


@ 


(ft 






PCU oddrosG bus. Only 6 bits are roquirod to 
decode the address spaoo for this block 




pGu_clataout[31 :0] 


S2 


In 


Shared write data buf! from the POU 








A- 


Out 






high it Indicates tho last Gyole of the oggosg. For a 


write cycle this moans pcujdatQout has boon 




rogistorod by the block and for a road cyolo this 
means the data on dwu _pcu_datQfn is valid. 




dwu_pou_datain[31 :0] 


32 


Otrt 


Read data bus to the PCU. 






DIU Intorfaco 


dwu_diu_wroq 


4- 


Otrt 


DWU requests DRAM write. A writo request must 






be accompanied by a valid write address together 
with valid write data and a write valid. 




dwu_diu_wadr[21 :5] 


47 


Out 


Write address to DIU 






17 bits wide (256 bit aligned word) 


diu_dvwj_waok 


A- 








Acknowledge from DIU that writo roquost has 
been accepted and new write address can bo 


placed on dwu_diu_wadr 


dwu_diu_data[63:01 


64 


Out 


Data from DWU to DIU. 256 bit word transfer over 




A cycles 

First 64 bits is bits 63:0 of 256 bit word 


Second 64 bits is bits 127:61 of 256 bit word 


Third 64-bits is bits 191 :128 of 256 bit word 


Fourth 64 bits is bits 255:192 of 256 bit word 




dwu_diu_wvalid 


4- 


Out 






Signal from DWU indicating that data on 
dwujdiujdata is valid. 



30.0.2 DWU part i t i on 

30.9.3 Conf i guration rog i stors 

Tho configurat i on rogistors in th e DWU ar e programm e d via th e PCU i nt e rfac e . R e f e r to sect i on 
21.8.2 on pago 1 for a descript i on of tho protoco l and timing diagrams for read i ng and wr i ting 



5 r e gist e rs i n th e DWU. Note that s i nc e addr e ss e s in SoPEC are byte aligned and th e PCU on l y 

supports 32 bit register r e ads and writes, th e l ow e r 2 b i ts of the PCU addr e ss bus aro not requir e d 
to d e code th e address space for th e DWU. When reading a reg i ster that i s l oss than 32 bits wide 
z e ros should b e returned on tho upp e r unused b i t(s) of dwu _pcu_datQ. Table 207 l i sts tho 
configuration registers i n th e DWU. 
10 Tab l e 207. DWU r e gist e rs descr i ption 



PEA23US 



495 



Contro l R e gist e rs 




0x00 



Reset 



0x4- 



Activ e l ow synchronous roo e t, coif do 



activating. A write to this register wi ll 
cause a DWU b l ock rosot. 



0x04 



6e 



0x0 



Act i v e h i gh b i t Ind i cat i ng the DWU is 
programmed and roady to us e . A l ow to 



high transition wi l l causo DWU block 



Int e rnal stat e s to resot (configurat i on 
r e gisters ar e not r e set). 



Dot L i no Stor e Configuration 



OxOS — 0x34 



dr[11:0][21: 
5} 



Co l orBas o A 



0x000 GO 



memory whoro data from a part i cu l ar 
half color (N) will — be — p l ac e d. — FeF 



i ncr e as i ng sense colors the CoIotBqgo 
Adr reg i ster opocifies the addr e ss of tho 



First word of first l i n e of th e fife, whereas 



for — d e creasing — s e nse — celeFS — the 



CoforBacoAdr — register — spocifios — the 
addr e ss of last word of tho f i rst l ino of 



tho fifo. 



Spec l f i oG tho base address ( i n words) in 



0x38 — 0x64 



Co l orF i foSiz 



45x3 



QyQQ 



I ndicates th e number of linos I n tho 



o[11:0] 



FIFO befor e th e li ne incr e ment will wrap 



around in memory. 


Bus 2,3 


>_«WII, KKW WWIWI W 


Bus 4,5 


- Even, Odd line color 1 
Evon, Odd lino color 2 


Bus 6,7 


Even, Odd line color 3 


Bus 8.9 


Evon, Odd line color 4 


Bus 10,11 


- Even. Odd line color 5 







Q y2 



Sp e cif los wh e th e r data written to DRAM 



for this — half co l or i s — incr e asing — er 



d e cr e as i ng s e ns e 
0 — D e creas i ng sens e 



1 — I ncreasing sense 



Bit 0 Def i n e s e v e n co l or senso. 



B i t 1 Def i n e s odd co l or s e nse. 



0x3 p 



I ndicates wheth e r a particular color i s 
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When inactivo no data is written to 


DRAM for thnt color 
0 — GeloF^ff 
A — Color on 

One bit por color, bit 0 is Color 0 and go 






MaxWriteAh 


8 


0x00 


Spocifies tho maxirnum number of linos 




that tlie DWU can be ahead of the LLU 




fWXd 


LineSize 


4€ 


0x000 0 








produced bv the DWU 




MaxNozzIo 


4 


QvQ 

WAV 


SpQnifjp^ ttvp niimhf^r nf Hnf nnir*^L thp* 


Skew 


DWU nopri^ to ne^nf^mfn to •flii*th thn 




non-prlntablo area of tho nrinthc^nd 




0x7C 0xA8 




42x4 


UAL/ 






Specifies the rolative skew of dot data 










Rll*^ ? Pvnn OHH linpi nnlnr 1 


Bus 4,5 Even, Odd lino color 2 


Bus 6,7 Even, Odd lino color 3 


Bus 8,9 Even, Odd line color 4 


Bus 10,11 — Even, Odd line color 5 




OxAC 


ColorLineIn 


8 


rtvnn 




8 


Spocifies tho number of words (256 bit 
words) per dot lino — 4t 


Working Registors 


QxBO 


LineDotCnt 


46 


0x000 0 








Indicates the number of remaining dots 


in the current line. (Read Only) 


OxB4 


FifoFillLevel 


8 


QyQQ 


Number of linos in tho FIFO, written to 




but not read. (Read Only) 



A low to high transition of the Go r e g i ster causes the interna l states of th e DWU to be reset. A ll 
conf i guration registers w il l rema i n tho same. Tho b l ock i ndicates the trans i t i on to othor blocks via 
ih e dwu_go _puleo signa l . 
30.9. 4 Data skew 



Th e data skew b l ock i nserts tho shape of tho pr i nth e ad jo i n into th e dot data str e am by delaying 
dot data by th e re l at i v e nozz l e skew amount (g i ven by nozzlojskow). I t gonoratos zero fil l data 
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i ntroducod i ntroduc e d into tho dot data str e am to ach ie v e tho re l at i v e skow (and also to flush dot 
data from tho de l ay r e gisters). 

Tho data skow b l ock oons i sto of 12 12 - b i t shift registers, ono por color odd and even. Tho sh i ft 
registers are in groups of 6, one group for e v e n colors, and on e for odd co l ors. Each timo a va l id 
data word is reco l vod from tho DNC tho dot data is sh i fted into either th e odd or evon group of 
shift regist e rs. Tho oddj & v e njs e l r e gister d e term i nes which group of sh i ft r e g i st e rs are va l id for 
that cycio and altornatos for each new valid data word. Whon a va l id word i s r e ceived for a group 
of shift r e g i sters, tho sh i ft regist e r i s shift e d by one l ocat i on w i th the new data word shifted into tho 
regist e rs (the top word i n tho register w il l b e discarded). 

When tho dot counter d e t e rmin e s that th e data skow block should zero fil l {zoro_fifP), tho data 
skow block wi ll sh i ft z e ro dot data i nto tho shift reg i st e rs unt il tho li no has complet e d. During this 
timo tho DNC w i l l bo sta l led by th e do ass e rtion of tho dwu_cync_roac/y signal. 
Th e data sk e w block s el ects dot data from tho sh i ft registers and is passed to th e buff e r addr e ss 
g e nerator block. The data b i ts s e l e cted is determ i n e d by th e configured ind e x valu e s i n th e 
NozzfeSk e w r e gist e rs. 

// dot ermine when data io valid 

data_valid =^ — ( ( (dnG_dwu^avail — ~ — 1) OR ( Bcro_f ill °° — 3rf-) — Ml© 

(dwu_rGady = = 1) ) 

// implement the aero fill mux 

4r€ — (gcro_fill 1) — then 

— dot_data_in - 0 

qIog 

dot_data_in = dnc_dwu_data 

// tho data delay buffcro 
•i^ — (dwu_go_j)uloG ga l) — then 

— data_dclay[l!0] [11 s O] [StO] — 0 // rooot all 

dolay buffer odd g l,QVGn = 0 

odd_cvcn_aGl =— 0- 

oloif — (data_valid 1) — then { 
— odd_QVGn_OGl ■ — ■ odd_GVGn_ool 

// updatG the odd/ovon bufforo, — with ahift 

data^dolay [odd_oven_OGl] [11 ;1] [S z O]m 

data_dGlay [odd_Gvcn_OGl] [10 iO] [5!0] // ohift data 

data_dolay [odd_GVGn_ocl] [0] [5s0] « dot_data_in [5 : 0] 

// ahift in new data 

/ / oclcGt tho GorroGt output data 

iea? — (i = 0;i<6; — i ll ) — f 

// okcw OGlGGtor 

okow a nogzlG_okcw [ { i , odd_Gvon_oGl ) 3- 

// temporary variable 
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// data ocloct array, — include data delay and input dot 

^ ^ -> 

data_oclcct [12 ; 0] = (data_dGlay [odd_cvGn_acl] [11 : 0] , 

dot_data_in ) 

// mux output the data word to next block — (13 to 1 mux) 

dot_data [i] — = data^oclcct [okcw] [i] 
f 



10 30.9.5 Fifo fil l lovo l 

The DWU k ee ps a runn i ng total of tho numb e r of li n e s in the dot stor e F I FO. Each t i m e th e DWU 
writes a l i no to DRAM (d e t e rm i n e d by th e DIU i ntorfaco subblock and signa ll od v i a line^wr) it 
i ncr e m e nts th e filllev e l and s i gnals the l ino incromont to th e LLU (pu l so on d\mi_(iu_lin e __wr). 
Converse l y if it rocoiv e s an act i v e liujdwujinojrd pu l s e from th e LLU, tho fiWovo! is 

15 dooromontod. If tho filllovol i ncreases to the programmed max l ovo l {max_writ e _QhOQd) th e n the 
DWU sta l ls and indicat e s back to th o DNC by d e- ass e rtIng th e dwu_dnc_roady signal. 
I f on e or more of tho D I U buffers f ill , tho D I U i nt e rface s i gnals tho fil l lovo l l ogic v i a tho buf_full 
signal which in turn oauscG th e DWU to de - ass e rt th e dwu_dnc_roady signal to sta l l th e DNC. Th o 
buf_full signals wi l l remain active unti l tho DIU services a pond i ng request from th e fu ll buffer, 

20 r e ducing th e buffer leve l . 

Wh e n th e dot count e r block d e t e cts that i t needs to ins e rt z e ro f i ll dots (zero_fiH equals i) th e 
DWU w i l l sta l l tho DNC wh il e tho zero dots are be i ng generated (by de - ass e rting 
dwujdncjroady), but wil l allow the data skew block to gen e rat e z e ro f il l data (tho dwujr e ady 
s i gna l ). 

25 dwu_dnG_rGady ( (buf_fulli^« 19 GR (filllcvcl ~ 

max_writG_ahcad ) — OR — (zGro_fill == 1) ) 

dwujready = ■ ( (bu£_full=« 3r^ OR (filllcvcl ~ 

max_writG_ahGQd ) ) 

Th e DWU do e s not increment th e fil l l e v el unt i l a complete li no of dot data is in DRAM not just a 
30 complete li n e r e c ei v e d from th e DNC. This e nsur e s that the LLU cannot start read i ng a part i a l li n e 
from DRAM before th e DWU has fin i shed writ i ng tho l ino. 

Tho f ill lovo l is reset to z e ro e ach tim e a new pag e i s started, on r e c e iving a pulso v i a tho 
dwujgo _puiGO s i gnal. 

Th e l i n e fifo fil l l e v el can b e road by th e CPU via tho PCU at any t i m e by acc e ssing th e 
35 FifoFiilL e v e f r e gister. 

30.9.6 Buff e r address generator 

30. 9. 6. 1 Buffer addr e ee gonorator doccription 

The buffer address generator subblock is rospons i b l o for accepting data from tho data skew b l ock 
and wr i ting it to th e D I U buffers i n the corr e ct order. 
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Th e buffer addross ond activo b i t wr i to for q particular dot data wr i to i o oalGulatod by tho buffer 
addross gen e rator based on the dot count of tho curr e nt line, programmod sonso of tho co l or and 
the l ino o i zo. 

A ll configuration r e gist e rs shou l d b e programmod whil e th e Go b i t is set to zero, once comploto 
5 the block can b e enabled by sotting tho Go bit to on e . Th e trans i t i on from zoro to one w ill caus o 
the int e rnal states to reset. 

If tho color Jinojooneo s i gnal for a color is on e (i. e . incr e asing) then th e bit wr i t e genorat i on is 
straight forward as dot data is aligned with a 256 b i t boundary. So for tho first dot i n that co l or, tho 
b i t 0 of tho wr_bit bus will be activo ( i n buffer word 0). for th e second dot bit 1 i s activo and so on 
10 to tho 255^dot wh e re b i t 63 is act i ve (in buffer word 3). This i s r e p e at e d for ail 256 bit words unt il 
tho final word whore only a part i al number of bits ar e writt e n b e for e the word is transferred to 
DRAM. 

I f GOlorJinojs e ne e s i gnal for a co l or is z e ro (i.e. decr e as i ng) the bit write generat i on for that color 
i s adjust e d by an offset calculated from tho pro programmod lino l ength (//no_s/z e ). Tho offset 
15 adjusts the bit wr i to to a l low tho l i n e to f i n i sh on a 256 bit boundary. For e xamp l e if tho lin e l e ngth 
was 100, for the first dot r e c e ived bit 7 (lino l ength is halved because of odd/even l i nos of color) of 
the wr_bit i s act i ve (buffer word 3). tho second b i t 6 (buffer word 3), to th e 200^ dot of data with bit 
0 of wrjyit act i v e (buffer word 0). 
30.9.6.2 Bit writ e d e oodo 

20 The buffer addr e ss g e n e rator contains 2 instances of the bit - writ e d e code, one configured for odd 
dot data the other for even. The count e r ( e ith e r up or down counter) used to gen e rate th o 
a ddr e ss e s i s se l ected by tho color_lino_sonso s i gna l . Each block determin e s i f i t i s act i ve on th i s 
cyc l e by comparing i ts configured typ e w i th th e current dot count addross and th e datojjotivo 
signa l . 

25 The wr_dtf bus is a d i r e ct decod i ng of tho l ower 6 count b i ts {count[6:1J), and th e D I U buffer 
addross is the remain i ng h i gher bits of the count e r {cour}t[10:7]). 
Tho signa l generation i s given as fo l lows: 

/ / dctcrmino the counter to uoc 

4r£ — (Golor_linc_aGnoc 1 ) 

30 count = up cnt[10;0] 

eloc 

count = dn_Gnt [10 s 0] 

// determine if active, baoed on inotancc typo 

wr_cn r= data^active & — (oount [0] — ~ — odd_cvGn_type ) 

35 // odd al, — even ^0 

// determine the bit writo value 

wr_bit [63 ; 0] = decode ( count [6 i 1] ) 

// determine the buffer 64 bit addreoo 
wr_adr [3 ; 0] = count [10; 7] 

40 30. 9, 6. 3 Up couritor g e r^orator 
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Tho up count e r increm e nts for e ach n e w dot and i s us e d to dotormin e tho wr i t e pos i t i on of tho dot 
in th e DIU buff e rs for i ncr e as i ng sonse data. At tho ond of e ach l in e of dot data (as indicated by 
lino Jin), tho counter is rounded up to tho noarost 256 b i t word boundary. This causes tho D I U 
buffers to be flushed to DRAM includ i ng any partia ll y fi l led 256 bit words. The counter is rosot to 
5 zero i f tho dwujgo jf^ulco i s ono. 

//Up Counter Logic 

■i^ — (dwu_go__pulac == 1) — then — {- 

up_cnt [10 : 0] — & 

10 cloif — (linc^fin 1 ) — then 

// round up 

if (up_ont [0 ; 1] — \ ^ 0) 

up_Gnt [10 5 9] M 

qIoo 

15 up_Gnt [10:9] 

// bit oolcctor 

up_Gnt [ 7 ; 0 ] = 0 

Gloif — (datQ_valid == 1) — thon 
up_Gnt [ 7 ; 0 ] I \ 

20 

30. 0. 6. 4 Down count e r g e n e rator 

Th e down count e r l ogic d e cr e m e nts for each n e w dot and i s used to determ i n e th e wr i te position 
of th e dot i n the DUI buff e rs for d e croasing sense data. When tho dwujgo j:)uIgo b i t is on e th e 
low e r b i ts ( I . e . 8 to 0) of th e count e r are res e t to l i n e s i z e valuo {Hno_Gize), and the higher b i ts to 
25 zero. Tho bits used to determ i n e th e bit wr i te va l ues and 6^ bit word addr e sses in the DIU buff e rs 
b e g i n at lin e s i z e and count down to z e ro. Th e remaining high e r bits are used to d e t e rm i ne the 
DIU buffer 256 bit address and buffer f il l l e v e l, b e gin at zero and count up. The counter is act i ve 
when valid dot data i s pr e s e nt, i. e . data_valid equals 1 . 

Wh e n tho ond of l i ne is d e t e ct e d {iino_fin equa l s 1) tho counter i s round e d to the next 256 b i t 
30 word, and th e low e r bits are reset to tho li n e s i ze valuo. 

//Down Count or Logic 

±€ — (dwu_go_j)uloG i) — thon 

dn_Gnt [ 8 t 0] « linc^oissc [8 s 0] 

dn_Gnt [10 : 9] — 9- 

35 Gloif — (linG_fin 1 ) — thon 

// perform rounding up 

if (dn_cnt[0!l] — != 0) 

dn_Gnt [10 : D] t I 

oloc 

40 dn_Gnt [10 !Q] 
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// bit oclcct io rooct 

dn_Gnt [ 8 ; 0] "a linG^oigG [ 8 ; 0] // bit QQlcct bito 

Qloif — (data_valid i) — then 

— dn_cnt [8 s 0] 

5 dn_Gnt [10 ! 9] i \ 

30.9.6.5 Dotcountor 

Th e dot counter s i mply counts e ach act i v e dot r e c ei v e d from the data skow b l ock. It soto the 
count e r to line__6izo and docromonts each time a va li d dot is r e c e iv e d. When tho count oqua l o 

10 z e ro th e linoJTin signa l is pu l sed and tho oountor i s rosot to linojQizo. 

Wh e n tho count i s le ss than tho max_nozzlo_6kow * 3 va l ue tho dot counter indiootos to tho data 
skew block to z e ro fil l tho roma i ndor of tho l in e (v i a tho zoro_fill s i gnal). Noto that tho 
max_nozz/o_ctow units are dot pa i rs as opposed to dots, honoe the by 2 multiplication for 
comparison w i th th e dot counter. 

15 Th e counter is rosot to //ne^g/z e wh e n dwu_go _puieo is 1 . 
D I U buffer 

Th e DIU buffer i s a 6 4 bit x 8 word dua l port register array with bit wr i te capabil i ty. Th e buff e r 
could bo implemented with flip flops should it prove more efficient. 
30.9.8 D I U i nt e rfac e 

20 30. 0. 8. 1 DIU interface gen e ral doecnption 

Th e D I U interfac e determ i n e s when a buffer noods a data word to be transf e rr e d to DRAM. It 
generates tho DRAM addr e ss bas e d on tho dot lin e pos i tion, tho co l or base address and th e other 
programm e d parameters. A wr i te r e qu e st i s made to DRAM and whon aoknowlodgod a 256 b i t 
data word Is transferred. The int e rfac e d e termines i f furth e r words need to b e transforrod and 

25 r e p e ats th e transfer procoss. 

I f th e FIFO in DRAM has r e ached i ts max i mum lovo l , or on e of th e buff e rs has t e mporarily fi lle d, 
the DWU w ill stal l data g e n e rat i on from tho DNC. 

A simi l ar proc e ss is ropoatod for each li ne until tho e nd of pag e i s reach e d. At th e e nd of a page 
th e CPU is requ i r e d to rosot tho interna l state of tho block befor e th e next pag e can be pr i nted. A 
30 l ow to h i gh trans i t i on of tho Go r e gister wil l caus e the internal b l ock reset, which caus e s a ll 

r e g i sters i n the block to r e set with th e e xc e pt i on of tho configurat i on r e gist e rs. Th e transit i on i s 
i ndicat e d to subb l ooks by a puls e on dwu_go __pulGO s i gna l . 
30. 9 ,8.2 Interface controllor 

Th e i ntorfaco control l er stato mach i n e waits i n Idle stat e unt i l an activ e r e qu e st is ind i cated by the 
35 r e ad point e r (v i a tho roqjactive signa l ). Wh e n an activ e r e qu e st is rooe i vod tho maohino procoods 
to th e ColorS e l e ct stato to d e t e rmine which buffers nood a data transfer. I n tho ColorSeloct stato it 
cycl e s through each co l or and determ i nes i f the co l or is e nabl e d (and consequently tho buffer 
n ee ds s e rv i c i ng), if enab l ed it jumps to tho Roquoet stato, oth e rwis e the color_cnt is incromontod 
and th e next co l or i s checked. 
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In tho Requ e st stat e th e machino i ssues a writo requ e st to th e D I U and wa i ts i n tho RoquoGt state 
unti l th e wr i to roquest is aoknowlodgod by tho D I D (diu_clwu_wQGk), Onco an acknow l odgo is 
roooivod the stat e machin e clocks through 4 cyc l es transforring 64 bit data words oaoh oyo le and 
Incr e mont i ng th e con- e sponding buff e r r e ad address. After transforr i ng tho data to tho D I U tho 
5 mach i no returns to the Co/orSe/oc^ state to d e t e rm i n e if further buffers n e ed servic i ng. On tho 
trans i tion th e control le r i nd i cates to th e address gen e rator {adrjupdato) to update tho addroso for 
that s e lected color. 

If a ll co l ors ar e transferred (color__cnt e qual to 6) tho state mach i no returns to fdio, updat i ng the 
last word flags {group_fin) and r e qu e st logic (roq^updato). 
10 Th e dwujdiu_wvolid signal i s a dolayod version of th e bufjrd_on s i gna l to allow for p i peline 
d e lays between data l e aving the buff e r and b e ing clocked through to tho DIU block. 
Tho state machin e wil l r e turn from any stat e to Idio i f th e reset or tho dwujgo jpulee Is 1 . 
30.9.8,3 Addr e ss g e norator 

Tho address generator b l ock ma i nta i ns 12 pointers {coior_Qdr[11 :0]) to DRAM corresponding to 
15 curr e nt writo address in th e dot li ne store for each half color. When a DRAM transfer occurs the 
address po i nter I s used first and then updat e d for th e n e xt transfer for that co l or. Th e po i nter used 
is s e l e ct e d by tho r o q_s e l bus, and th e point e r update is initiated by th e adrjupdato signal from 
the i nterface contro l ler. 

Th e po i nt e r update is dep e ndent on th o s e ns e of th e color of that pointer, the pointer position i n a 
20 l in e and the l i no pos i tion in th e F I FO. The programming of th e CQ/or_/?ago_adr n e ods to bo 

adjusted dep e nd i ng of tho sense of tho colors. For increasing sens e co l ors tho color^bosojadr 
spec i fi e s th e addr e ss of th e first word of first l ino of the fifo, whereas for decreas i ng sense colors 
th e coior^basojadr specifi e s the addr e ss of l ast word of tho first l in e of tho F I FO. 
For i ncr e as i ng colors, th e i nit i a li zat i on valu e ( i .e. when dwujgo jpulso is 1 ) i s tho color_baeo_adr. 
25 For oach word that is writt e n to DRAM th e point e r is incr e m e nted. I f tho word is th e last word i n a 
l in e (as i nd i cated by /ac/_wc/from that read pointers) the pointer is a l so i noromonted. If tho word is 
th e last word in a lino, and th e l ino is tho l ast l ine i n th e FIFO ( i ndicat e d by fffo_ond from the line 
counter) th e point e r i s rosot to color_boG e _adr. 

I n tho caso of docroas i ng s e nse colors, tho init i al i zat i on value ( i .o. wh e n dwujgo jjuls e is 1) i s tho 
30 color_baGo_Qdr. For e ach l in e of docroasing s e nse color data tho point e r starts at tho l i no ond and 
decrements to th e l i n e start. For each word that is written to DRAM tho point e r is decremented. I f 
the word i s the last word in a l ine tho point e r is i ncr e m e nt e d by colorjinejr^c * 2 + 1 . On e l i ne 
length to account for th e lin e of data just wr i tten, and another li n e le ngth for the next li n e to be 
written. I f the word is the l ast word in a li ne, and the l in e i s the last l in e in the F I FO th e po i nter i s 
35 r e s e t to th e in i t i alization value ( i . e . coior_bas e jadr). 
The address is calcu l ated as follows: 

i-i — (dwu_go_pulaQ °= 1) — then 

color_adr [11;0] — = color_baoc_adr [11 ; 0] [21 : 5] 

40 Gloif — (adr_updQtc 1) — then { 
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// dQtcrminc the color 

color " rcq_ocl[3 g 0] 

// line end and fifo wrap 

if ( (f if o_cnd [color] 1) AND (laot_wd ■» « 1)) then { 
// lino end and fifo wrap 

Golor__adr [color] — « color_baoQ_adr [color] [21 : 5] 

— y 



Gloif ( laat_wd = ■ = 1) — then { 

// juat Q lino end no fifo wrap 

10 (color line ocnac [color % 3r) then /-/■ 

incrcaoing acnoc 

color_adr [color] — m- 

oloo // dccroaoing 

ocnac 

15 Golor_Qdr [color] color_adr [color] 1 f 

color_linG_inc * 2) — i — i 

)- 

cloc — {- 

/ / regular word write 

20 if (color line oenoc [color % 2^ ~ 3r) ttien 

incrcaoing ocnoe 
color adr [color] i i 



cloe // dccrcaoing ocnac 

color adr [color] 



4 



// oelcct tlie correct addrcao, — for tliio transfer 
dwu_diu_wadr = color_adr [req_ocl] 
30.9.8.4 Lino count 

30 The l i n e counter log i c counts the number of dot data l inos stored in DRAM for each co l or. A 

s e parat e pointer i s ma i nta i nod for oach color. A l in e po i nter i s updat e d e ach t i me the fina l word of 
a li n e i s transf e rr e d to DRAM. This i s d e term i ned by a combinat i on of adrjupdat e and laGt_wd 
signals. The pointer to update i s ind i cated by th e r e q_eol bus. 

Wh e n an update occurs to a po i nter it is comparod to zero, if i t i s non - z e ro th e count i s 
35 docromontod. otherwise the counter i s res e t to color _f if o_Giz e , If a count e r i s zero the fifojond 
signals is sot high to i nd i cates to th e address g e n e rator b l ock that th e li n e is th e l ast l i ne of th i s 
colors fife. 

I f th e dwu jgo jpulso s i gna l is one the counters are reset to color_Jifo_Gizo. 

40 4ri — (dwu_go_puloc 1) tlicn 

line_Gnt [11;0] » color fifo oi 5 sc[ll i O] 
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Qlaif ( (adr_updatc 1) MH) (laot_wd 1)) then ( 

// dctGrminc the pointer to operate on 

color ° rcq_oel [3 i 0] 

// update the pointer 

— arf — (linc_cnt [color] — " 0) — then 

line_cnt [color] — =» Golor_f if o^oiae [color] 

eloc 

line cnt [i] 



1 0 // count io zero ita the laat line of fifo 
for(i«0 ;i <12;i i i ) { 
fifo end[i] — « — (line cnt [i] — «■ 0) 



30.9.8.5 R e ad Pointer 

15 The read po i nter l og i c mainta i ns th e buffer road address po i ntors. Tho road po i ntor i o used to 
det e rmine which 64 bit words to r e ad from th e buffer for transf e r to DRAM. 
Th e r e ad pointor logic compares th e r e ad and write po i nters of each D I U buffer to determ i n e 
which buff e rs r e quir e data to b e transf e rr e d to DRAM, and wh i ch buff e rs ar e full (th e buf_full 
signal). 

20 Buffers are grouped into odd and even buffers groups. If an odd buff e r requir e s DRAM access the 
odd _pond signals w ill b e act i v e , i f an e v e n buff e r requir e s DRAM access tho ovon jjend signals 
wi ll b e active. I f both odd and e v e n buffers r e qu i r e DRAM acc e ss at e xactly th e sam e tim e , th e 
ovon buffers w i l l got serv i ced f i rst. If a group of odd buffers oro being sorvicod and an even buffer 
b e com e s p e nd i ng, th e odd group of buff e rs w ill b e compl e t e d before the start i ng th e e v e n group, 

25 and v i ce versa. 

I f any buffer requires a DRAM transfer, the logic will i ndicat e to tho interface control l er v i a the 
roq_QGtivo s i gnal, w i th th e odd_pvonjsol signa l d e t e rmining which group of buff e rs get serv i c e d. 
Th e i nt e rfac e controll e r will ch e ck th e co/or_enabl e signa l and issue DRAM transf e rs for al l 
o nab l od co l ors in a group. Wh e n th e transfers aro comp l et e it t e l l s th e read po i nt e r l og i c to updat e 
30 tho requests pend i ng v i a r e qjupdat e signal. 

Th e reqjB e l[3:0] s i gnal t e l l s th e addr e ss gen e rator which buffer i s b ei ng sorvicod, it i s constructed 
from th e oddj a v e njsel signa l and the cotor_cnt[2:0] bus from the interface contro l ler. Wh e n data 
i s bo i ng tran s f e rr e d to DRAM tho word point e r and r e ad pointer for th e corr e spond i ng buff e r ar e 
updated. Tho roqjsol determines wh i ch pointer shou l d be i ncremontod. 
35 // determine if requeot io active even 

if ( wr_adr[0] [3; 2] — i = rd_adr[0] [3 s 2] — )- 

cvcn_pend ^ 1 

elQc 

cvcn_j)cnd 0 

40 // determine if requeot io active odd 
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20 



30 



35 



40 



if ( wr_adr[l] [3 ; 2] — rd_adr[l] [3:2] ) 

cvonjcnd « 1 

cloc 

cvcn_pond ^ 0 

// determine if any buffer io full 

if ( (wr_adr [0] [3 : 0] rd_adr [0] [3 ! 0] ) » 7) OR ( (wr_adr [1] [3 ! 0] 

— rd_adr[l] [3:0] )> 7)) then 

buf^full = 1 

-/¥ fixed — ocrvicing — order, only — update — when — controller 

dictateo ao 

— (req_update °= 1) — then { 

i€ — (evenjend ■« 1) — then // even alwayo firot 

odd even oel ■ 0 



recLactive 



eloif — (oddjend 1 ) — then 
odd even ael = 0 



// then check odd 



req_active 



eloe 



// nothing active 



odd even oel 



req_active 



4 



// oelcGted recpieator 
req_oel [3:0] « (color_cnt [2:0] 



odd_even_oel ) 

conca tent at ion 

25 Th e r e ad addr e ss po i nt e r log i c cons i sts of 2 2 bit count e rs and a word s e l e ct pointer. Tho pointers 
ar e rosot when dwu_go _pulG e i s on e . Th e word po i nter {word _ptr) is comnnon to al l buffers and is 
us e d to road out tho 6 4 bit words from the D I U buffer. I t I s incr e mont e d wh e n buf_rd_on I s act i vo. 
Wh e n a group of buffers are updat e d th e stat e mach i no increments the road po i nter 
{rdjf}tr[odd_QvonjDolJ) via tho group JTm signa l . A concatenat i on of th e r e ad pointer and th e word 
point e r are uso to construct tho buffer road addr e ss. Th e road po i nt e rs aro not rosot at th e e nd of 
e ach l i n e . 

// determine which pointer to update 

— (ditfu_go_pul3e 1) — then 
rd_jptr [1:0] 



word_ptr =— & 

eloif — (buf_rd_en i) — then { 
word_ptr « \ 



eloif — (group_fin ■ « 1) — then 
— rd_ptr [odd_even_oel] i i 



// word pointer update 



— update — fefee — road 



pointer 

// create the addreao from the pointer, and word reader 
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rd_adr [odd_Gvon_OQl] — «= — { rd_j)tr [odd_ovQn_OQl] , wordjtr ] // 

concatenation 

Th e r e ad po i ntor block det e rm i nes i f the word boing r e ad from the DIU buffers is the last word of a 
li no. The buffer addroso gonorator i nd i cato the last dot i s bo i ng writt e n Into th e buffers v i a th e 
5 lino_fm s i gnal. Whon received tho l ogic marks the 256 b i t word in the buffers as the l ast word. 
Wh e n the last word is road from the D I U buffer and transferr e d to DRAM, the flag for that word i s 
r e fl e ct e d to the address gonorator. 

// line end oct the flago 
■37^ — (dwu_go^uloc 1) — then 

10 laot_flag[l;0] [1 : 0] ^ 0 

cloif — (linc_fin "° 1 ) — then 

^ — determineo — fefee — current — 256 bit word even been written 

te 

laot_flag[0] [wr_adr[0] [23] ^. 1 // even group flag 

15 // determineo the current 256 bit word odd been written to 

laot_flag[l] [wr_adr[l] [2] 3 ^ 1 // odd group flag 

/ / laat word rof lection to addrcoo gonorator 
laot_wd = lQot_f lag [odd_even_oel] [rd_^tr [req_oel] [0]] 
// clear the flag 
20 4=€ — (group - _fin « ■ 1 ) — then 

laot_f lag [odd_even_oel] [rd_j>tr [req^oel] [0] ] — «— ^ 

Wh e n a compl e t e l i n e has been wr i tt e n into tho D I U buff e rs (but has not y e t b e en transf e rr e d to 
DRAM), th e buffer address g e nerator block wi l l pu l se tho tlnoJTm signal. Th e DWU must wa i t until 

25 a l l enab l ed buffers ar e transferr e d to DRAM boforo signal i ng tho LLU that a oomp l oto lino is 

avai l ab l e in tho dot l ino storo (dwu_//u_//no_wr s i gnal). Wh e n th e line_fln Is receiv e d all buffers w ill 
requ i r e transf e r to DRAM. Du e to tho arbitrat i on, tho oven group wil l get s e rvic e d first then tho 
odd. As a r e su l t tho l ino finish puls e to th e LLU i s g e n e rat e d from tho last_ffag of th e odd group. 

// muot be odd, odd group tranofcr complete and the laot word 

30 dwu_llu_linc_wr ° odd_even_ool AtJD group_fin AND laot_wd 

L i no Loader Un i t (LLU) 

*W Overview 

The L i ne Loader Un i t (LLU) reads dot data from the l i ne buffers i n DRAM and structures tho data 
i nto even and odd dot chann e ls destined for th e sam e print time. Th e b l ocks of dot data are 
35 transf e rred to tho PHI and thon to tho pr i nthead. Figure 267 shows a high l e v e l data flow d i agram 
of th e LLU i n context. 

34-r2 Physical requirement i mposed b y t h e nniNTHEiAP 

Tho DWU re ord e rs dot data i nto 12 s e parat e dot data l in e FIFOs i n tho DRAM. Each F I FO 
corr e sponds to 6 co l ors of odd and ovon data. The LLU r e ads th e dot data li n e F I FOs and sends 
40 th e data to th e pr i nthead i nterfac e . Tho LLU d e c i des when data shou l d bo road from tho dot data 
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li n e FIFOs to correspond w i th tho timo that tho particular nozzio on tho printhead is passing th e 
current l i no. The int e ract i on of th e DWU and LLU with the dot lino F I FOs oomp e nsatoo for tho 
physical spread of nozz l es firing ov e r severa l li n e s at onco. For furth e r explanation goo S e ction 30 
Dotline Writer Unit (DWU) and S e ction 32 PrIntHead Intorfoco (PH I ). F i gure 268 shows tho 
5 physica l re l ationship of nozz le rows and th e lin e t i mo tho LLU starts read i ng from the dot l ino 

Within e ach li ne of dot data tho LLU i s required to generat e an even and odd dot data stream to 
th e PH I b l ock. Figure 269 shows tho even and dot streams as th e y wou l d map to an example b i 
l i thic printhead. The PHI block dotorminos which stream shou l d be d i rected to wh i ch printh e ad 1 0. 

10 ^4-7^ Dot generate and tran s mit order 

Th e structur e of the printhead I Cs dictate th e dot transmit order to each printh e ad 1 0. Th e LLU 
r e ads data from tho dot lin e F I FO, gonoratos an ovon and odd dot str e am which is thon re 
ordered ( i n th e PH I ) I nto tho transmit order for transfer to th e printhead. 
The DWU s e parates dot data i nto e v e n and odd half lines for oach color and stores them in 

15 DRAM. I t can store odd or ev e n dot data I n increasing or docroas i ng order i n DRAM. The ord e r is 
programmabl e but for descript i v e purposes assume e ven in incr e as i ng order and odd i n 
decreasing order. Tho dot order structur e in DRAM i s shown in F i gure 261 . 
The LLU contains 2 dot generator units> Each dot g e nerator reads dot data from DRAM and 
g e n e rat e s a str e am of odd or e v e n dots. Tho dot order may be increasing or d e cr e asing 

20 d e p e nding on how th e DWU was programm e d to writ e data to DRAM. An exampl e of th e e v e n 

and odd dot data streams to DRAM is shown in Figure 270. In th e examp l e the odd dot generator 
i s configured to produce odd dot data in decr e as i ng order and th e e v e n dot generator produces 
dot data in increasing order. 

Th e PHI b l ock accepts the evon and odd dot data streams and rooonstructs tho streams into 
25 transmit ordor to tho printhead. 

Th e LLU l i n e sizo refers to tho pag e width i n dots and not necessari l y tho printhoad w i dth. The 
page width is often the dot margin numb e r of dots l oss than th e printhead width. Th e y can bo the 
same size for fu ll b l eed printing. 

34^4 LLU START UP 

30 At th e start of a page th e LLU must wa i t for tho dot li no store in DRAM to fi ll to a configured l evel 
(g i ven by FifoR e adThroshold) befor e starting to read dot data. Onc e th e LLU starts proc e ss i ng dot 
data for a page i t must cont i nu e unt il th e e nd of a page, the DWU (and oth e r PEP b l ocks i n th e 
pipe l ine) must e nsure there i s always data i n tho dot li no stor e for the LLU to read, oth e rw i s e th e 
LLU w il l sta ll , causing the PH I to stal l and pot e nt i ally generate a print e rror. Th e 

35 FifoRoadThreehofd shou l d bo choson to allow for data rate mismatches between the DWU wr i te 
sido and tho LLU road s i d e of tho dot li ne F I FO. Th e LLU wi ll not gen e rat e any dot data unt i l 
FifoRoadThroGhofd level in tho dot li n e FIFO is r e ach e d. 

Onc e th e FffoR e adThroehoid is r e ach e d th e LLU b e gins pago processing, th e FifoR e adThr e ehold 
i s ignored from then on. 
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When tho LLU begins page processing it producos dot data for all colors (although somo dot data 
co l or may bo nul l data). Tho LLU compares tho line count of the current page, when the lin e count 
e xceeds tho ColorRolLin e configur e d va l u e for a part i cular co l or the LLU will start reading from 
that co l ors FIFO in DRAM. For co l ors that have not oxce e dod th e CoiorR e iUno va l u e tho LLU wi ll 
5 g e n e rate null data (zero data) and not road from DRAM for that co l or. ColorRolUno[N] spocifios 
th e number of l inos separating the N* * ^ half co l or and the first half co l or to print on that page. 
For the exampl e pr i nthoad shown in Figure 268, color 0 odd w i ll start at lino 0, tho remaining 
co l ors wi ll all have null data. Co l or 0 odd w il l continuo w i th r e a l data unt il li n e 5, whon color 0 odd 
and ovon will contain rea l data th e romain i ng colors wi l l contain null data. At lino 10, co l or 0 odd 
10 and ovon and color 1 odd w i ll contain real data, w i th r e main i ng co l ors containing nul l data. Ev e ry 
5 l i nos a now ha l f color w il l contain roal data and tho r e main i ng half co l ors nu l l data until lin e 55, 
wh e n al l colors w il l contain roa l data. In tho examp l e ColorRelUno[0] -5, ColorRolLino[1] ^0, 
ColorRolUno[2]-^d, CoforR e /Uno[3] .. etc. 

I t is possib le to turn off any one of tho co l or p l anes of data (via th e ColorEnablo register), in such 
15 cas e s the LLU wi ll gen e rate zero e d dot data Informat i on to tho PH I as normal but wil l not read 
data from the DRAM. 
31.^1.1 LLU bandw i dth roquir e monts 

Tho LLU is required to g e n e rate data for food i ng to th e pr i nth e ad int e rfac e , the rate r e quired I s 
dependent on tho printh e ad construction and on th e lino rat e configured. Tho maximum data rate 

20 th e LLU can produce is 12 b i ts of dot data per cycle, but tho PH I consumes at 12 b i ts every 2 pclk 
cycles out of 3, i.e. 8 b i ts p e r pclk cyc l e. Therefore the DRAM bandwidth requir e ment for a doub l e 
buffered LLU I s 8 bits per cycle on avorago. I f 1 .5 buffering I s used thon th e p e ak bandwidth 
r e quirement is doub l ed to 16 b i ts p e r cycl e but tho ov e rage remains at 8 b i ts p e r cyc l e. Note that 
wh il e the LLU and PH I could produce data at the 8 b i ts per cyc l e rate, the DWU can on l y produce 

25 data at 6 bits p e r cyc le rat e . 
34t5 Vertical row skew 

Due to construction lim i tations of the b i l i thic printh e ad it is poss i ble that nozzle rows may bo 
m i sa li gned relative to each othor. Odd and e v e n rows, and adjacent co l or rows may bo 
hor i zontally m i sa li gnod by up to 2 dot positions. Vort i ca l m i sa l ignment can a l so occur between 

30 both pr i nthoad I Cs used to construct th e pr i nthoad. Th e DWU compensat e s for the hor i zonta l 
m i sal i gnment (see Section 30.5), and th e LLU compensat e s for the vertical misalignment. 
For e ach co l or odd and even tho LLU ma i ntains 2 po i nters i nto DRAM, one for feeding printhead 
A (CurrontPtrA) and other for feed i ng printhead B (CurrontPtrB). Both po i nters ar e updated and 
i ncr e m e nt e d in e xactly tho same way, but differ in the i r i n i t i a l va l ue programm i ng. They differ by 

35 vert i cal skew number of l i nes, but po i nt to tho same re l ative posit i on within a l in e . 

At th e start of a li n e th e LLU reads from tho F I FO us i ng CurrontPtrA unt il th e join point between 
th e printh e ad ICs is reached (specified by JoinPoint), after which tho LLU reads from DRAM using 
Curr e ntPtrB. I f th e Jo'mPoint co i nc i dos w i th a 256 b i t word boundary, th e swap ovor from po i nter A 
to pointer B is straightforward. I f tho JoinPoint i s not on a 256 b i t word boundary, the LLU must 

40 road the 256 b i t word of data from CurrontPtrA locat i on, g e nerat e th e dot data up to th e join po i nt 
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and thon road the 256 bit word of data from CurrontPtrB locat i on dnd gonorato dot data from tho 
join po i nt to tho word ond. Th i s moono that i f tho JoinPoint is not on a 256 b i t boundary th e n th e 
LLU i s roquirod to perform an oxtra road from DRAM at tho join po i nt and not i noromont tho 
address pointers. 

31.5.1 Dot li n e F I FO initial i zat i on 

For each dot l ino F I FO there are 2 po i nters reading from i t, each skewed by a number of dot l i nos 
i n relation to tho othor (tho skew amount cou l d bo positiv e or nogativo). Determining tho exact 
numb e r of val i d linos i n tho dot l in e stor e is comp l icat e d by two point e rs r e ading from different 
positions in the F I FO. I t i s conv e nient to romovo tho problem by pro-zero i ng th e dot lin e F I FOs 
e ffoctivo l y remov i ng th e n e ed to dotormin e e xact data valid i ty. Tho dot FIFOs can bo i n i tialized in 
a number of ways, i ncluding 
th e CPU wr i t i ng Os, 

tho LBD/SFU wr i t i ng a s e t of 0 lines (16 b i ts p e r cycle), 

^ tho HGU/DNG/DWU be i ng programm e d to produce 0 data 



15 



Spec i fying dot F I FOs 



Th e dot l i n e F I FOs when accessed by th e LLU are sp e cif ie d differently than wh e n acc e ssed by 
the DWU. The DWU us e s a start addr e ss and number of linos va l ue to spocify a dot F I FO, the 
LLU us e s a start and e nd address for each dot F I FO. Th e m e chanisms differ to a l low more 
efficient implementations in each block. 

20 Th e start address for each half color N is sp e c i fi e d by th e ColorBasoAdr[N] reg i st e rs and th e e nd 
addr e ss (actua ll y tho ond address plus 1 ) i s spec i fied by th e CoiorBQGQAdr[N+1]. Note there are 
12 colors i n tota l , 0 to 1 1, th e CoiorBa6oAdr[1 2] r e gist e r specif i es th e e nd of the co l or 1 1 dot F I FO 
and not the start of a n e w dot FIFO. As a r e sult th e dot F I FOs must b e specif i ed cont i guous l y and 
i ncreasing in DRAM. 

25 34.r7 I mplementat i on 

34^7^1 LLU partition 

31.7.2 D e finitions of I/O 

Table 208. LLU I /O defin i t i on 



Port namo 



I II lU II \^ 



D e scription 



Clocks and Resets 



Syst e m clock 



prst_n 



In 



System reset, synchronous active l ow 



PH I I nterface 



l i u_ph i _data[1 :0][5:0] 



2x 6 



Otrt 



Dot Data from LLU to th e PH I , e ach b i t is a 



co l or plane 5 downto 0. 



Bus 0 Even dot data stream 



Bus 1 — Odd dot data str e am 



Data i s act i ve whon corrocpond i ng bit i s activo 
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in II u _phi Qvoil bus 


phiJlu_roody[1 :0] 


2 


In 






Indicates that PHI is ready to accept data from 
the LLU 

0 ■ Even dot data stream 
4 — Odd dot data stream 


llu_j3hLavail[1 :0] 


2 


Out 


Indicates valid data present on corresponding 




flu jphijdQto. 

0 — Even dot data stream 

4 — Odd dot data stream 


DIU interface 


llu^diu^rroq 


4- 


Oi it 






LLU requests DRAM read. A read request must 


be acoompanied by a valid read address. 


llu_diu_raclr[21:5] 




Out 


Road addroGG to DIU 




17 bits wido (256 bit alignod word). 




diujlu_rack 


^ 


In 


Acknowlodgo from DIU that road request has 






boon accepted and new read address can bo 
placed on llujeHajradr 


diu_data[63:0] 


64 


In 


Data from DIU to LLU. Each access is 256 bits 




received over 4 clock cycles 

First 64 bits is bits 63:0 of 256 bit word 


Second 64- bits is bits 127:64 of 256 bit word 


Third 64-bits is bits 191 :128 of 256 bit word 


Fourth 64 bits is bits 255:192 of 256 bit word 




diujlu_rvalid 


1- 


In 






Signal from DIU telling LLU that valid road data 
is on the diajdota bus 


DWU Interface 


dwujlujine_wr 


4- 


In 


DWU lino write. Indicates that the DWU has 




completed a full lino write. Active high 




llu_dwuJlno_rd 


4- 




LLU line read. Indicates that the LLU has 






completed a line read. Active high. 


PCU Interface 




4- 


In 




pcuJlu_sol 


Block select from the PCU. When pcu_llu__€ol is 
high both pou_adr and pcajdataout are valid. 








In 


Common read/not whto signal from the PCU. 


pcu_rwn 




pcu_adr[7:2] 


§ 


In 






PCU address bus. Only 6 bits are required to 
decode the address space for this block. 




pGu_dataout[31 :0] 




In 


Shared write data bus from the PCU. 






liu_pGU_rdy 


4- 


Out 






Roady signal to the PCU. Whon llu __pcujrdy is 


high it indicates the last cycle of the access. For 
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a writo oyclo this moano pcu_dataout hao boon 




rogistorod by tho block and for a road oyolo this 
means the data on Uu ^cu_datain is valid. 




llu_pou_datain[31 :0] 


32 


Qui 


Read data bus to tho PCU. 



31 .7.3 Conf i gurat i on r e g i st e rs 

Th e conf i gurat i on r e gist e rs i n th e LLU ar e programm e d v i a tho PCU int e rfac e . Refor to sootion 
21 .8.2 on pago 1 for a doscr i ption of the protoco l and t i ming d i agrams for read i ng and wr i ting 
r e g i st e rs in tho LLU. Note that s i nc e addr e sses in SoPEC ar e byt e a l ign e d and tho PCU on l y 
5 supports 32 - bit r e gist e r r e ads and writes, th e low e r 2 bits of the PCU addr e ss bus ar e not roquirod 
to decode tho addr e ss spac e for th e LLU. Wh e n r e ading a r e gister that i s le ss than 32 bits w i d o 
zeros shou l d b e returned on tho upp e r unused b i t(s) of ffu _pcu_datain. Tabl e 209 li sts tho 
configurat i on registers I n th e LLU. 

Tab le 209. LLU registers doscr i pt i on 



Atidress 














Control Registers 


QxOQ 


Reset 


1- 








Active low synchronous reset, self do 


activating. A write to this register will 
cause a LLU block reset. 


0x04 


Qe 


4- 


0x0 


Active high bit Indicating tho LLU Is 


programmed and ready to use. A low to 


high transition will cause LLU block 


internal states to reset. 


Configuration 


0x08 0x38 


ColorBasoAdr[12:0][ 




oxooo-oe 












Specifies the base address (in words) in 


244^ 


memory whore data from a particular 

half color (N) will bo placed. 

Also specifies tho end address * 1 (256 


bit words) in memory whore fifo data for 


a particular half color ends. For color N 


tho start address Is ColerBaseAdr[N] 


and the end address +1 is ColorBase 


Adr[N-M] 


0x3G 


ColorEnable 


@ 








Indicates whether a particular color is 
active or not. 

When inactive no data is written to 


DRAM for that color. 
0 Color off 
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1 — Color on 

One bit por ooior, bit 0 iG Color 0 and so 






LineSize 




0x000 0 








Indicates the numbor of dots per line. 


0)^44 


FifoRoadThreshold 


8 


QyQQ 


SpccifieE the numbor of linnn ihn\ f^hniilH 




bo In tho FIFO bofore tho LLU otorto 


rf*?iriinn 


0x^8 0x71 


ColorRolLino[1 1 :0] 


^2x8 


0x00 










v¥aii iruffritic iiibi PoTOio sturting to rsao 
dot data from the conrosponding dot data 


PIPQ 


PUS u, t even, ^>^gq line coior u 


Bus 4,5 Even, Odd lino color 2 








0x78 - 0x7C 


JoinPoint 




QxOO&« 










Spooifios tho join point In dots botwoon 
both nrlnthf^'^ri \C*pl 


^us 1 - Qdd dot gpnorntnr inin nnint 




0x80 0x84 


JoinWord 


OyQ 


P^QQ 








Spocifios the join point in words between 

cn.^tt 1 yj\ It III iv.«ciVJ t\jrO' 

Rii*^ n Fvf^n Hot nf^nrr'^trir inin nnint 






0x90-0xBC 


CurrontAdrA[11:0][2 




0x000-0 














Bus 2,3 Even, Odd line color 1 


Riig* A ^ - F\/p>n OHH tinp^ r^nlnr ? 


Bus 6,7 Even, Odd lino color 3 


Rii'i ft Q F\/on OHH linf^ pnlnr /l 


l_yuO L_VOII, III Ol^ll^l *t 

Rii*=i 10 11 F\/f*n OHH linr* pnlnr ^ 


i-'Uo 'Vj 1 1 ^vv.^rij III 1^ oi-fiv^i \j 

WVnrkinn r^ni^tpr^ 


Q^fGO 


CuiTontAdrB[11:0][2 




DxQOO 0 




QxEG 








Current Address pointers associatod 
with printhoad B 

Bus 0,1 Even, Odd line color 0 


Bus 2,3 Even, Odd lino color 1 




1 ^"""'^ 
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Bus 6,7 Even, Odd line color 3 


Bus 8,9 Even, Odd lino color 4 


Bus 10,11 — Even, Odd lino color 5 


Working registers 


Working Registers 


QxFO 


FifoFIIILevol 


g 




Number of lines in the dot lino FIFO, lino 




written in but not road out. (Road Only) 





A l ow to h i gh trans i tion of tho Go r e gist e r causes the int e rnal stat e s of th e LLU to bo rosot. A l l 
configuration r e gist e rs w i ll remain tho sam e . The b l ock i nd i cates tho transition to othor blocks v i a 
tho llu_go jjule e s i gnal. 
31.7.4 Dot g e n e rator 



5 Tho dot gonorator b l ock i s respons i ble for read i ng dot data from tho D I U buffers and send i ng tho 
dot data in th e corr e ct order to th e PH I block. Th e dot g e nerator waits for Uu__on signa l from tho 
fife f i ll leve l b l ock, onc e active it starts r e ad i ng data from th e 6 D I U buffers and generat i ng dot 
data for fooding to tho PH I . 

In tho LLU th e r e ar e two I nstanc e s of the dot gonorator, ono g e n e rating odd data and tho othor 
10 g e n e rating ovon data. 

At any tim e the ready bit from th e PH I could b e d e ass e rted, if this happ e ns th e dot g e nerator wil l 
stop generating data, and wait for tho roady b i t to b e re assorted. 
31.7.^.1 Dot count 

I n norma l operation th e dot count e r wil l wa i t for tho llu_ e n and th e roady to b e act i ve boforo 
15 starting to count. Th e dot count w i ll produc e data as long as th e phiJlujroQdy is activ e . I f th e 
p/?/_//ty_r e acyy signal go e s l ow the count wil l b e sta l led. 

Th e dot count e r i ncr e ments for oach dot that is proc e ss e d p e r lino. I t I s us e d to determine tho l ino 
fin i sh posit i on, and tho b i t so l oct value for read i ng from the DIU buff e rs. The counter i s r e set after 
e ach li ne is procossod {Un e jn signa l ). I t d e t e rmines when a l in e i s finishod by compar i ng th e dot 
20 count with tho conf i gured l ino sizo divided by 2 (note that odd numbers of dots wi ll bo roundod 
down). 

// dcfino the line finioh 

if (dot_Gnt [11 : 0] linQ_aigc[15;l] ) then 

linc^fin = 1 

25 cloc 

linc__fin = 0 

// dctcrminG if word io valid 

dot^activG — — ( (llu_cn — ~ — 1-) — ANB — ( phi_l lu_rGady — ~ — M — 
(buf_Gmp =° 0)) 
30 // Gountor logic 

i# — (llu_go_puloG =B 1) — then 

dot_cnt = — 9- 

cloif — ( (do tractive l)Al?fD (linQ_fin 1) ) — then 
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dot_Gnt e— a 

cloif — (dot^activo =«=■ 1) — then 

dot_Gnt ° dot_cnt — i — i 

cloc 

5 dot_Gnt ° dot_Gnt 

// calculate the word oclcct bito 

bit_ool [5 : 0] dot_ont[5 5 0] 

Th e dot generator a l so mainta i ns a r o ad buffer point e r which i s incromontod each tim e a 6 4 b i t 
word is prooessod. The pointer is us e d to address the oorroct 6d - b i t dot data word within the DIU 
10 buff e rs. The pointer is r e s e t when iiu_go _puico is 1 . Un l iko tho dot oountor tho road po i nter is not 
r e set e ach li n e but round e d up tho noarost 266 bit word. This al l ows for more offioiont use of the 
DIU buffers at l i n e f i n i sh. 

Wh e n tho dot counter r e ach e s the jo i n point for tho dot gonorator {join jjoint), i t jumps to tho next 
266 bit word i n tho D I U buffer but continu e s to r e ad from tho n e xt bit pos i t i on within that word. I f 
15 th e join point coincid e s with a word boundary, no 256 bit incromont i s roquirod. 

// read pointor logic 

— (llu_go_pulaQ == 1) — then 
road^adr = — 0- 

cloif ( (dot_aGtivc == 1) A1>TD ( (dot_cnt [7 ; 0] — == 255) OR ( linG_f in 
20 1) ) ) then 

// end of line round up 

road^adr [3 ; 2] — m- 

rcad_adr [1 ; 0] — 

oloif ( ( detract ivG ~ 1) AtJD (dot_Gnt = 

25 join_point)7\ND(dot_Gnt [5 : 0] — 6 3) ) — then 
// join point jump 25 6 bito 

rcQd_adr [1: 0] — m // 

regular incrcmGnt 

read__adr [3 :2] — h // join 

30 point 25 6 inarcmont 

eloif ( (dot^active — 1 ) AND ( dot_cnt =« 

j oin joint )J\ND(dot_Gnt [5:0] — 63) ) tlien 

// join point jump 256 bito, bottom bito remain tlie oame 

rGad_adr [3 ; 2] — m // join 

35 point 25 6 increment only 

eloif ((dot_activc == 1) AND (dot_cnt [5 : 0] °= 63)) then 

road_adr [3:0] — m 

regular increment 
34t7t5 FIfofi ll lovol 

40 Th e LLU keops a runn i ng tota l of tho numb e r of l i nos in tho dot l i no stor e F I FO. Ev e ry t i me tho 

DWU signa l s a lino ond {dwuJIuJinojM- activ e pu l s e ) i t i noromonts tho filll e vel. Conv e rso l y i f tho 
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LLU dotocts a l i no ond {linojrd pu l Go) th e filll e v e l i s d e cr e m e nted and tho li no road is oigna ll od to 
th e DWU via tho llujdwujinojrd signal. 

Th e LLU f i ll lev e l block i s us e d to det e rm i n e wh e n tho dot l ino has enough data stored befor e th e 
LLU shou l d b e gin to start read i ng. Tho LLU at pago start i s disab le d. It waits for tho DWU to writ e 
5 lines to the dot l i n e F I FO, and for tho fi l l lovol to i ncroaso. Tho LLU remains disabled until tho f i ll 
l ev e l has r e ach e d the programm e d thr e sho l d {fifo_j e aclJthr e G). Wh e n tho thresho l d i s roaohod it 
s i gna l s tho LLU to start procosoing th e pag e by s e tting llu_on high. Onco tho LLU has started 
proc e ssing dot data for a pago it wil l not stop if th e ff/// e y e / falls be l ow tho thr e shold, but w il l stal l is 
fflllovol foWo to zoro. 

10 Th e l i n e f i fo fil l l e v e l can b e read by tho CPU v i a th e PCU at any tim e by accoss i ng tho 

FifoFillLovol register. Th e CPU must toggle tho Go r e g i ster in th e LLU for tho block to bo corr e ctly 
i n i tia l ized at pago start and th e fifo lovol r e s e t to z e ro. 

— (llu_go_puloG °° 1) — then 
15 filllevel = 0 

Gloif — ( (linc_rd °= 1) — AND — (dwu_llu_linc_wr 1) ) — then 

// do nothing 

claif — (linG_rd === 1) — then 

filllevel 

20 claif — (dwu_llu_linc_wr == 1) — then 

f illlGVGl I I 

// dGtortninc tho thrcohold, — and act the LLU going 
if (llu_go_puloc °= 1) OR (filllevel 0 ) ) then 
llu_Gn ■ 0 

25 Gloif (filllevel f if o_rGad_thrGahold ) then 

llu_Gn a 1 

31.7.6 DIU int e rfac e 

31.7.6.1 DIU interface doscription 

Th e DIU i nterfaco block is r e spons i bl e for d e t e rmining when dot data noods to be r e ad from 
30 DRAM, k ee ping th e dot g e n e rators supplied w i th data and calculating th e DRAM road address 
bas e d on configur e d param e ters, FIFO fi ll leve l s and pos i tion i n a lino. 

Th e fill l e v e l block enab l es DIU requ e sts by act i vat i ng {fu_ e n signa l . Th e DIU i nt e rfac e contro l l e r 
th e n i ssu e s r e qu e sts to th e D I U for th e LLU buffers to bo filled w i th dot l i ne data (or fi ll tho LLU 
buff e rs with nu ll data w i thout request i ng DRAM access, I f r e qu i red). 
35 At pag e start th e D I U Int e rfac e det e rm i nes which buffers should bo fi l led with nu l l data and which 
should request DRAM access. Now requests are issu e d unt il the dot li ne i s oomplotoly r e ad from 
DRAM. 

For oach r e qu e st to th e DRAM tho address generator calcu l at e s wh e r e In th e DRAM tho dot data 
shou l d b e read from. Tho coior_enQbio bus determin e s which colors aro onab l od, th e int e rfac e 
40 never l osuos DRAM roquosto for disab l ed colors. 

PEA23US 516 



31.7.6.2 Int e rfac e controfl e r 

Tho intorfaoe control le r co ord i nat e s and issu e s r e qu e sts for data transf e rs from DRAM. Tho stat e 
maohino wa i ts i n fdle stat e unt il I t is enab l ed by the LLU contro ll er {ilujon) and a roquost for data 
transfer is roco i vod from tho wr i te po i nter b l ock. 
5 When an active r e qu e st is rece i v e d {r e q_activ e e qua l s 1 ) th e stat e machin e jumps to th e 

ColorSel e ct stat e to d e term i n e wh i ch colors {color_cnt) in th e group need a data transfer. A group 
i s defin e d as al l odd co l ors or a ll oven colors, tf the color i sn't e nabl e d (Golorjonablo) tho count 
just incr e m e nts, and no data I s transferred. I f tho color is e nabl e d, th e stat e mach i n e tak e s on e of 
two options, ei ther a nul l data transfer or an actua l data transf e r from DRAM. A nu l l data transf e r 
10 wr i tes zero data to tho DIU buffer and docs not issue a roquost to DRAM. 

Th e stat e machine determin e s if a nu ll transf e r i s requir e d by ch e ck i ng th e color_start signa l for 
that color. 

I f a null transf e r is r e qu i red the stat e mach i n e do e sn't n ee d to issu e a requ e st to th e D I U and so 
jumps d i rectly to tho data transfer states {DataO to DataS). The machin e c l ocks through tho A 

15 stat e s each tim e wr i t i ng a nul l 64 - bit data word to the buff e r. Onc e comp le t e th e stat e machin e 
returns to th e ColorS e l e ct stat e to d e t e rm i ne if further transf e rs ar e requir e d. 
I f tho colorjDtart is activo then a data transfer is r e quir e d. Th e stat e machine jumps to th e 
Requ e st stat e and issu e a r e qu e st to the D I U controll e r for DRAM acc e ss by s e tting llu_dfu_rroq 
h i gh. Th e D I U r e sponds by acknowl e dg i ng th e r e qu e s t {di u jiujrack equals 1) and th e n s e nd i ng 1 

20 6 4 bit words of data. Th e transit i on from R e quest to D a taO state signals th e address g e n e rator to 
updat e th e a ddr e ss po i nt e r {adr_updat e ). Th e stat e machin e c l ocks through DataO to Data3 stat e s 
e ach t i m e writ i ng th e 64 bit data Into th e buffer sel e ct e d by th e r e q_e e l bus. Onc e compl e t e th e 
stat e machin e r e turns to th e ColorS e lect state to d e t e rmin e if furth e r transf e rs ar e r e qu i r e d. 
When in tho ColorSoloct state and al l data transfers for colors in that group have boon sorviood 

25 (i.e. wh e n color_cnt is 6) th e stat e machine will return to th e Idl e stat e . On trans i t i on i t w i l l update 
th e word count e r l ogic {word_d e c) and enab le d the r e qu e st l ogic {r e q_updat e ). 
A reset or llu_go _pulGO sot to 1 wil l caus e th e state machin e to jump directly to Idl e . Tho controll e r 
wil l remain in Idle state until i t is enab le d by th e LLU control le r via tho llu_ e n signal. This prevents 
th e DIU att e mpt i ng th e fill th e DIU buff e rs b e for e th e dot l i ne store FIFO has filled ov e r its 

30 thr e shold l e v e l. 

31.7.6.3 Color activate 

The color activat e l ogic maintains an abso l ut e lin e count i ndicat i ng th e l i n e number current l y being 
processed by the LLU. The count e r is res e t wh e n th e llu_go jf)ulee i s 1 and incr e mented each 
timo a Imojrd pu l se is roco i vod. The count va l ue {lino_cnt) is us e d to d e term i n e when to start 
35 reading data for a co l or. 

Tho count is imp l emented as fo ll ows: 

4r€ — ( llu_go_pulaQ °° 1) — then 

lino_cnt => 0 

claif — ( — linc_rd 1) — then 
40 line cnt — hh 
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Th e color activat e logic comparos lino count w i th tho rolativ e l i no valu e to dot e rm i no whon tho 
LLU should start reading data from DRAM for a particular half color. I t s i gna l s th e i ntorfaco 
controllor block wh i ch co l ors aro active for th i s dot li no I n a pag e (via the coior_etart bus). I t i s 
us e d by the i nterface control l er to dotorm i n e which D I U buff e rs r e qu i r e nu ll data. 
5 Onc e th e colorjstart bit for a co l or is s e t it cannot bo cleared in tho norma l page process i ng 
process. Th e b i ts must b e r e s e t by th e CPU at th e e nd of a pag e by transitioning the Go b i t and 
causing a pulso on th e llujgo jjule e s i gnal. 

Any co l or not enab l od by tho color^ e nab/ e bus wi ll never have its colorjDtart b i t sot. 

^ea? — (i = 0 ; — i<12 ; i I I ) { 

10 ar# — ( llu_go_pulac 1) — then 

col_on [i] — sa— 0^ 

Gloif — ( color_GnablG [i % 6 ] — == 1 ) — then 

Gol_on [i] — = — 0- 

Gloif — ( linG_Gnt color_rGl_linc [i] ) — thon 

1 5 col_on [i] — 

// aclcct cither odd or cvon colora 

•3r^ — ( odd_Qvcn_aGl i ) — then — // odd aclcctcd 

Golor_otart [5 ! 0] — = 

20 {col_on[ll] ,col_on[Q] ,col_on[7] ,Gol_on[5] ,col_on[3] ,Gol_on[l 

H 

clac // Gvon OGlGotcd 

Golor_otart [5 = 0] 

{GOl_on[10] ,Gol_on[8] ,col_on[G] ,Gol_on[4] ,Gol_on[2] ,Gol_on[0 

25 H 

31.7.6.4 Addr e ss g e n e rator 

Tho oddroGs gonorator block ma i ntains 2 4 pointQro {curront_odr_o[11 :0] and curr e nt_adr_b[11 :0J) 
to DRAM corr e spond i ng to 2 road addrossos in tho dot l in e F I FO for oach half co l or. The 

30 Gurrontjadrja group of pointers are used when tho dot g e nerator is f ee ding pr i nth e ad ohanno l A, 
and tho curr e r)t_adr_b group of po i nt e rs ar e us e d wh e n th e dot generator i s feeding printhoad 
channe l B. For each DRAM acc e ss th e 2 addr e ss point e rs ar e updat e d but only on e can bo used 
for an acc e ss. Th e word counter block dotorm i nos which pointer group shou l d bo usod to access 
DRAM, v i a the po i nter sel e ct s i gnals (ptr_Gol). I n certain cas e s ( e .g. tho jo i n point i s not 256 - b i t 

35 a l ign e d and th e word is on tho join point) the address po i nters shou l d not be updated for an 
access, the word count e r block d e t e rm i nes tho oxcoption cas e s and indicat e s to th e addr e ss 
generator to skip th e update via tho join_6t a /l signa l . 

Whon a DRAM transfer occuro th e addroso pointor is used f i rst and th e n updat e d for tho next 
transf e r for th e color. The pointer used i s se l ected by th e r e qjsol and ptrjs e l bus e s, and tho 
40 po i ntor update is in i tiated by tho adrjapdato signal from th e i nterface contro l l e r. 
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The addroGQ update is caloulatod as fol l owo (pointer group A l ogic i s shown but tho samo logic i s 
usod to update the B pointer group a clock cycl e lator): 
// update the A pointcro 

-i^ — (ptra_wr_cn — 1-) — then // write — from the 

configuration block 

ourront_aclr_a [ptr_adr] — ^ ptr_wr_data; 

claif — ( adr_updatc_a °^ 1) — then [ // addrcoo update from 

otatc machine 

if ((rcq_OGl = = ^TULL ) OR (join_otall 1)) then 

// do nothing 

clac 

// tcmporar:y^ variable oetup 

ncxt_adr — = current_adr_a [rcq^oel] — i — i 

otart_adr « color_baoe_adr [roq^ael] 

ond_adr ° color_baoc_adr [rcq_ocl — i — 3r}- 

// determine how to update the pointer 

±r€ — (nGxt_Qdr == cnd_adr) — then 

Gurrcnt_adr_a [rcq__ocl] — = atart_adr 

clac 

currcnt_adr_a [req_ocl] — ■ ncxt_adr 

The correct address to uso for a tronof e r i s s e l e cted by tho ptr_eel signa l s from tho word counter 
b l ock. Th e y i nd i cate wh i ch s e t of address point e rs shou l d bo usod based on tho current word 
be i ng transf e rred from the DRAM and th e configurod join po i nt values {join_word), 

/ / ocloet the addrooo pointer to uoe for aoeooo 

4^ — (rcq_ocl [0] — == 1) — then // odd 

pointer oclcctor 

if (ptr_oel[l3 1) then 

llu_diu_radr ° currcnt_adr_b [rec[__oel] // latter part 

of lino 
eloc 

llu_diu_radr ° current_adr_a [rQC[_oel] // former part 

of line 

clac / / even 

pointer oclcctor 

if (ptr_aGl[03 — 1) then 

llu_diu_radr = current_adr_b [req_oel3 // latter part 

of line 
eloe 

llu_diu_radr ° current_adr_a [rcq_oel] // former part 

of line 
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31.7.6.5 Writopointor 

Th e wr i te point e r l og i c maintains th e buffer writo addr e ss pointors, d e torm i noo whon tho D I U 
bufforo nood a data transfer and s i gnals when th e D I U buffers ar e e mpty. The writo po i nter 
5 det e rm i nes the addr e ss I n tho D I U buffer that th e data shou l d bo transforrod to. 

Tho writo pointer logic compares the r e ad and wr i t e po i nt e rs of e ach DIU buff e r to d e t e rmin e 
wh i ch buff e rs require data to bo transf e rred from DRAM, and which buffers are ompty (tho 
buf_ e mp signals). 

Buffers ar e group e d into odd and e v e n buffers, i f an odd buff e r r e quires DRAM aocoss tho 
10 odd _pond signals wil l b e act i ve, i f an oven buffer r e qu i res DRAM acc e ss th e e von jjond s i gnals 
wi ll bo active. I f both odd and oven buffers require DRAM access at exact l y tho sam e t i me, tho 
even buffers wi l l get serviced f i rst. If a group of odd buff e rs are being servicod and an even buffer 
becomes p e nd i ng, th e odd group of buff e rs wi l l b e completed before tho starting tho ovon group, 
and v i ce versa. 

15 If any buffer requires a DRAM transf e r, th e l og i c wil l indicate to tho interface contro l ler v i a tho 

r e q_activ e s i gna l , with tho odd_ovon_Gol s i gna l d e term i ning wh i ch group of buffers get serviced. 
The interface contro l ler will chock th e colorj B nablo s i gna l and issue DRAM transfers for all 
e nabled colors i n a group. Whon tho transf e rs are comploto it t el ls. th e wr i to point e r log i c to update 
tho roquost ponding v i a roq_updato s i gna l . 

20 Th e r e q_6el[3:0] signal t e l l s tho addr e ss gen e rator wh i ch buff e r is being serv i ced, i t I s construct o d 
from the odd_ovon_GQl signal and tho color_cnt[2:0] bus from tho interface contro ll er. Whon data 
is being transforrod to DRAM tho word po i nt e r and wr i to pointer for the corresponding buffer are 
updat e d. The roqjsol d e termines wh i ch pointer shou l d bo incr e m e nted. 
Th e write po i nter l og i c operates tho some way r e gardl e ss of wh e ther the transfer is nu ll or not. 



25 



30 



// dctcrtninc which bufforo need updatco 
buf_cmp [1 ! 0] — — & 

oddjcnd =— 0^ 

cvcn_jpQnd =— G- 

if ( wr_adr[0] [3:2] rd_adr[0] [3; 2] ) 



Gvon_j>cnd = 1 

if ( wr_adr[l] [3 5 2] °» rd_adr[l] [3i2] ) 



35 



odd_j)Qnd — »— i 

// dotcrmino if bufforo arc empty 

if ( (wr_adr [0] [3!0] — rd_adr [0] [3 ! 0] ) ) then 



buf_cmp [0] — =— i 

if ((vfr_adr[l3 [3!03 rd adr[l] [3 ! 0])) then 



40 



buf_cmp [1] — 

-H- fixed — oervicing — order, only — update — when — controller 

dictateo oo 
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■ar€ — (rcq^updatc °= 1) — then ( 

2r€ — (Qvcn_pQnd "-^ 1) then // even alwayo firot 

odd_Gvcn_OGl « o 

rcq^activG 

5 oloif (oddjcnd °° 1 ) then // then chcGlc odd 

odd_GVGn_OGl ° 0 

rcq_aQtivG ■= 1 

elac // nothing activG 

odd_c vcn_o el = — 0- 

10 roq^activG =— 9- 

— }- 

// OGlGQtod rcqucotor 

rcq^ocl [3:0] { Golor_Gnt [2 ; 0] , odd_GVGn_acl ) H- 

concatcntation 

15 

Th e wr i t e addr e ss pointor log i c consists of 2 2 b i t count e rs and o word soloct po i nt e r. The 
count e rs ar e r e s e t wh e n \\u_go jpulso i s ono. Tho word point e r (word _ptr) is common to all buffers 
and i s usod to wr i to 6*1 bit words into tho D I U buff e r. I t is Incromontod wh e n buf_rd__pn is active. 
Whon a group of buffers aro updated tho stat e mach i no i ncrom e nts the writo po i ntor 
20 {wr_ptr[odd_qvon_€ e i]) v i a tho groupJTin signa l . A concat e nation of tho writo pointor and tho word 
point e r ar e us e to construct tho buffer wr i to address. The writ e pointers ar e not r e s e t at tho e nd of 
e ach l ino. 

// dGtcrmino which pointer to update 
25 — (llu_go_puloe 1) — then 

wr_ptr [1 : 0] «— 9- 

word jtr =—9 

eloif — (buf_rd_Gn -= 1) — then 

— word_jc)tr + * 
30 — wren [req^ocH — 

oloif — (group_fin = 1 ) — then 

— wr_ptr [odd_even_oel] i t 

-H- — create — the — addreoo — from — the — write — pointer — a^id — word 
35 pointer 

wr_adr [odd_cvGn_oel] — = — [wr jtr [odd_Gven_ael] ,word_jptr) // 

concatenation 

31.7.6.6 Word count 

40 Th e word count logic ma i ntains 2 countorc to track th e number of words transferred from DRAM 
per lino, ono counter for odd data, and on e count e r for e ven. On rece i pt of a //u_go jputoo, tho 
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count e rs aro initia li z e d to a Join_word va l ue (numb e r of words to th e join po i nt for that pr i nthoad 
channel) and the point e r s e lect values to z e ro {ptrjpof). When a group of words oro transforrod to 
DRAM as indicated by the wordjdoG s i gna l from tho interfaco contro l lor, tho corrosponding 
counter i s docrom e nt e d. The counter to decromont is indicated by tho odcl_ovon_Goi s i gnal from 
5 the wr i t e po i nt e r b l ock (ev e n ~ 0, odd " 1). 

Wh e n a count e r I s z e ro and th e ptrjsol is zero, tho counter is ro in i t i al i zod to tho second 
join_word va l uo and ptrjGol i s inverted. Tho counter continues to count down to z e ro each t i mo a 
word_d e c signal is r e c ei v e d. When a counter is z e ro and th e ptrjsel I s on e , it signals th e e nd of a 
lino (tho lQst_wd s i gnal) and initia ll zos tho counter to tho first join jpoint valuo for tho noxt l ino 
10 transf e r. 

Th e ptrjs e l s i gnal is used i n the addr e ss g e nerator to s e lect th e correct address po i nter to us e for 
that part i cular acc e ss. 

// dot ermine which counter to dGcrcmcnt 

i-f — (llu_go_puloG == 1) — then 
1 5 word_cnt [0] ° j o in_word [ 0 ] // oven coiint 

— ptr_ocl [0] =— 9 // even 

gonorator otarta with pointer A 

word_cnt [1] = join_word[l] // odd count - 

— ptr_ocl [1] =—9 // odd generator 

20 otarto with pointer A 

claif — (word_dcG == 1) — then — { // need to 

dGGrement one word counter 

i€ — (odd_Gvcn_ocl " 0) — then // even counter 

update 

25 if (wQrd_cnt[03 — °= 0) then 

word_cnt CO] — = j oin_word [ptr_OGl [ 0 ] 3 // re initialize 

pointer 

ptr_aGl [03 = (ptr_ocl [03 ) 

— (ptr_aGl [03 =« 1) — then — // dGtcrminc j r# 

30 thio the laot word 

laot_wd — =— i 

gIog 

word_cnt [0] // norm al 

dGGrement 

35 GloG // odd counter 

update 

if — (word_Gnt [13 — °= 0 ) — thGn 

word cnt [13 — 4 oin — word [ptr — ocl [13 3 /t^ — — initialize 

pointer 

40 ptr_oGl [13 (ptr__OGl[l] ) 
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— (ptr_ocl [1] 1) — then // dctGrminc if 

thia the laot word 

laot^wd — «— i 

cloc 

word_cnt [1] -hf — normal 

dGcrcmcnt 

-^- 

Th e word count l og i c also det e rm i nos if tho current word to bo transf e rred is th e join word, and if 
so it det e rm i n e s if i t is al i gn e d on a 256 bit boundary or not. If th e jo i n po i nt i s aligned to a 
boundary thoro i s no nood to provont tho address countor from i ncromonting, othorwiso tho 
addr e ss po i nt e rs ar e sta lle d for that word transf e r (/o/n_sto//). 

join_otall ° — ( ( (ptr_OGl [0] — ~ — 0)AND — (word_cnt [0] — ~ — 0) AtJD 

( join_point [0] [7 : 0] — 0) ) 

j^«9 — ( (ptr_OGl [1] ~ — 0)AND — (word_Gnt [1] ~ — 0)AND 

(join_j3oint [1] [7:0] — 1« 0) ) ) 

Th e word count log i c a l so det e rmin e s wh e n a comp le t e l in e has b ee n r e ad from DRAM, it th e n 
signals tho fifo fil l lov ol logi c i n both th o LLU and DWU (via I'mojrd signa l ) that a comp l ete l ino has 
boon road by tho LLU {llu_clwu_line_r€f}. 

// lino finioh logic 

4z€ — (llu go p uloG " 1) — thon 

lino^fin = 0 

linc_rd — & 

cloif — ( (laot_wd == 1) AND — (linc_f in == 0) ) — then 

linQ_f in — « — i ^ — firot group — laot_wd 

finiah pulac 
linQ_rd = — 9- 

cloif ( (laot_wd 1) A^TD (lino^fin 1)) thon 

linc_fin = — 0 / / OGCond group — laot_wd 

finioh puloG 

linc^rd — i 

cloc 

linG_fin ■ linc^fin // otay the oamc 

linG_rd — 0- 

32 PrintH e ad I nterface (PH I ) 

32t1 Overview 

Th e Printhoad i nterfac e (PH I ) acc e pts dot data from th e LLU and transmits tho dot data to tho 
printhead, us i ng the pr i nthoad i nterface mochaniom. Tho PH I gonoratos tho contro l and timing 
s i gna l s necessary to l oad and dr i vo tho bl ll th i o pr i nthoad. Tho CPU d e t e rmin e s th e li n e updat e 
rate to tho printhoad and adjusts tho lin e sync frequonoy to produco tho max i mum pr i nt spood to 
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account for tho pr i nthead IC's s i z e rat i o and inh e r e nt l at e ncies i n the syncing syst e m across 
multiple SoPECg. 

Tho PH I also noods to cons i der tho ordor i n which dot data is l oaded I n tho pr i nthoad. This is 
dependent on tho construct i on of tho pr i nthead and the re l ative sizes of printhoad I Cs usod to 
5 create the pr i nth e ad. S ee Bi li th i o Printhead R e ference document for a comp l eto d e scr i ption of 
printhead typos [10]. 

Tho pr i nting proc e ss i s a r e a l t i mo process. Once tho printing process has started, th e next 

Pr i ntline's data must b e transf e rr e d to the pr i nth e ad b e for e tho next l in e sync puls e is rocoivod by 

th e printhoad. Oth e rw i s e th e pr i nting proc e ss wi ll term i nat e with a buff e r und e rrun e rror. 
10 Tho PH I can bo configurod to dr i v e a s i ngle printh e ad 1 0 w i th or w i thout synchron i zat i on to other 

SoPECs. For e xampl e the PH I could dr i ve a s i ngl e IC printhead ( i . e . a pr i nthoad constuctod with 

one I C on l y), or dua l 1 0 printhead with one SePEC d e vic e dr i ving each printhead I C. 

Th e PH I i nterface provid e s a mechanism for th e OPU to d i r e ct l y control th e PHI interface p i ns, 

allowing tho CPU to acc e ss tho b i - li thic pr i nthoad to: 
15 det e rmin e printhead t e mp e rature 

tost for and determ i n e d e ad nozzles for e ach printhead 10 

i n i tia li z e e ach printhead 1 0 

^ pr e heat each printh e ad 10 

Figur e 277 shows a high l e ve l data flew d i agram of th e PHI in context. 

20 32^2 Print h ead modes or opEHATiON 

The printhoad has 8 diff e rent modos of op e rations (a l though some mod e s ar e r e- us e d). Th e mode 
of operation is dcfinod by th e state of tho output p i ns phijeynol and phijroQdl and the interna l 
printhead mode reg i st e r. Th e modos of op e ration are defined i n Table 210. 
Tab le 21 0. Printh e ad modes of operation 



Name 


Internal Mode 






State 








phi _re 
acU 


phljs 


Description 


NORMAL 


XXX 


4- 


4- 


N/A 


Normal print mode, dot data is 




clocked into the printhead shift 
register, on each falling edge of 

phijDrclk 


DOT LOAD/ 


XXX 


4- 


e 


phf_frclk^O 


Dot Load Mode, data stored in tho 


FIREJNIT 








dot shift register is transferred into 
the dot latch on the falling edge of 


phi_lsynd, and latched in on the 


rising edge of phijsynci 










phi_ercfk-^ 


Fire load mode. Parameter for 




generating fire pattern are leaded 


into generator, data on 
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p/?/ pft f/otaAf '0//iQ7 is clookod into 




the generator on each rising odge of 
pNjfroik 


NOZZLE_RE 
SIT 


004- 


0 


4- 


N/A 


state on nozzle test. 


CMOS_TEST 


m 


0 


4- 


M/A 
lull 


CMOS test mode 








FIRE GEN 


000 


0 


4- 


N/SA 


Fire Initialise modo. The initialised 






and shift select pattern The pattern 


is clocked into the firo shift register 


and Goloct shift rogistor on tho rising 


edge of phi_frclk 


TEMP TEST 


r>i n 


0 


0 








Temperature tost output. 


NOZZLE TE 


004- 


0 


0 


N/A 






Nozzle test output. 


Tho rosult of a nozzle test is output 
on phi_frc/k_L 



Data rate equal i zat i on 

Tho LLU can gonorato dot data at the rat e of 12 bits p e r cycl e , where a cyc le i s at the system 
clock froquoncy. In order to achiovo tho target print rate of 30 sheets por minuto, tho pr i nthoad 
5 noods to pr i nt a l ino every 100|xs (calculated from 300mm @ 65.2 dots/mm divid e d by 2 seconds 
lOO^isoc). For a 7:3 constructed pr i nthead this m o ans that 974^ cycles at 320Mhz is qu i ck 
e nough to transfer the 6 bit dot data (at 2 b i ts p e r cyc le ). Th e i nput F I FOs ar e us e d to do couple 
tho r e ad and wr i t e clock domains as wel l as provide for d i ffer e nc e s b e tw ee n consum e and fi l l 
rates of the PH I and LLU. 

10 Nomina ll y tho system clock (pc/k) i s run at 160Mhz and tho printh e ad i nterface c l ock (doclk) i s at 
320Mhz. 

I f th e PH I was to transf e r data at th e ful l printh e ad I nt e rfac e rato, tho transfer of data to tho chortor 
pr i nth e ad IC wou l d bo compl e t e d soon e r than th e long e r pr i nth e ad IC. Wh ile I n i ts e lf this i sn't an 
i ssue it requ i r e s that tho LLU bo ab le to supply data at th e maximum rato for short durat i on, this 
15 requires uneven bursty access to DRAM wh i ch is undesirab l e. To smooth th e LLU DRAM acc e ss 
requ i rements over tim e th e PHI transfers dot data to the pr i nth e ad at a pr e programmed rato, 
proport i onal to tho ratio of tho short e r to long e r printhead ICs. 

Th e printh e ad data rato equal i zation is contro l led by PrintHoadRatofl .0} rog i oiortj (one per 
printh e ad IC). Tho register is a 16 b i t bitmap of activ e clock cycles i n a 16 c l ock cycle w i ndow. For 
20 e xampl e i f th e rogistor is sot to OxFFFF then tho output rat e to th e printhead will b e fu ll rate, if if s 
sot to OxFOFO then tho output rat e is 50% wh e r e th e r e i s 4 act i ve cyc le s fo ll owed by 4 i nactiv e 
cyc le s and so on. I f tho r e gister was set to 0x0000 th e rat e would b e 0%. The r el ative data 
transf e r rato of tho pr i nthoad con bo var i ed from 0 - 100% w i th a granular i ty of 1/16 st e ps. 
Tab l e 21 1 . Examp l e rato equa li zat i on va l u e s for common pr i nth e ads 
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Printhoad Ratio A:B 



Printh e ad A rato 



Printh e ad B rato (%) 



8^ 



QjlFFFF (100%) 



0x1111 (25%) 



7f3 



OxFFFF (100%) 



0x5551 (13.7%) 



OxFFFF (100 9^ 



0xFlF2 (6 8 .7%) 



OxFFFF (100%) 



OxFFFF (lOOro) 



I f both pr i ntli e ad ICs ar e th e sam e size ( o .g. a 5:5 printh e ad) I t may bo desirab l e to roduco tho 
data rato to both pr i nthoad I Cs, to roduco th e r e ad bandwidth from tho DRAM. 

5 32t4 Dot generate and transm i t order 

S e v e ral printhead typos and arrangomonts exists (soo [10] for othor arrang e m e nts). Tho PHI is 
capabl e of driv i ng a l l poss i b le configurat i ons, but for th e purpos e s of simp l ic i ty only on e 
arrang e m e nt (arrangement 1 — soo [10] for d e finition) i s descr i b e d i n th e following e xamp l es. 
The structure of tho printhoad ICs dictate tho dot transm i t ordor to e ach printhoad IC. The PHI 

10 aooopts two streams of dot data from th e LLU, ono e v e n stream th e other odd. Tho PHI 

constructs tho dot transmit ordor streams from tho dot gonorato ordor received from tho LLU. 
Each stream of data has a l ready boon arrang e d i n i ncreas i ng or decreas i ng dot ord e r sense by 
the DWU. Tho exact sonso choice is d e p e nd e nt on tho typo of pr i nthoad ICs used to oonotruct tho 
pr i nth e ad, but r e gardless of configurat i on tho odd and oven stream should be of oppos i ng s e ns e . 

15 Th e dot transm i t order is s hown in F i gure 281 . Dot data I s sh i ft e d i nto tho printhead In th e 
d i r e ct i on of th e arrow, so from th e diagram (tak i ng the typo 0 pr i nthead IC) e v e n dot data i s 
transferred in increas i ng ordor to th e m i d point first (0, 2, 4 , m 6, m 4, m 2), then odd dot data 
i n d e cr e asing ordor Is transferred (m - 1, m - 3. m 5,...., 5, 3, 1). For tho typo 1 pr i nth e ad I C th e ordor 
I s reversed, with odd dots in incr e as i ng ord e r transmitted first, fo l lowed by e ven dot data in 

20 d e creas i ng ord e r. Note for any givon co l or tho odd and oven dot data transferr e d to th e pr i nth e ad 
I Cs ar e from different dot lines, i n tho exampl e in tho d i agram they aro s e parat e d by 5 dot l i nos. 
Tab le 21 2 shows the transm i t dot ordor for som e common A4 printhoads. D i ff e rent type 
pr i ntheads may have tho sonso r e versed and may have an odd b e fore oven transm i t ord e r or v i ce 



25 



Tabl e 212. Examp i o pr i nthoad ICo, ond dot data tranom i t ordor for A 4 (1382 4 dots) pag e 



Va' v7 C7\7C9 



Dot OrdoF 



Typ e 0 Printh e ad I C 



8 



444€0 



0,2,'1,8 557 . 1,5576,5578 



5570.5577,5575 7,5,3.1 



0.2.1.8 ^1866,^868,^870 



1871,4860,4867 7.5,3.1 



8328 0.2.1.8 1158.1160. ' 1162 



1163,4161.4150 7.5.3.1 



S842 0,2.1.8 3150.3152.3151 



3166,3163,3151 7.6.3,1 



S486 0.2.1,8 2712.2711,2716 



2817,2845.2813 7.5.3.1 
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Typo 1 Pr i nth e ad I C 



8 



§ 



0,2, ^ 1,8 ,203^,2036,2038 



2039,2037,2035 7,5.3,1 



0,2,4,8 1326,1328,1330 



1331,1329,1327 7,5,3,1 



Q3 23 



m60 



4Q3Q 
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13823,13821,13810 



.,1337,1335,1333 



20,13822 



13823,13821,13810 
..,,2015,2013,2041 



2040,2042,204 1 1 381 8, 1 38 



20,13822 



13823,13821,13810 



2848,2850,2852 1 381 8, 1 38 



.,2853,2851,2840 



20,13822 



13823,13821,13810 



.,3 4 61,3459,3457 



3823,13821.13810 



..4160,4167.4165 



3823.13821,13810 
,4877,4875,4873 



13823,13821,13810 



.,5585,5583,5581 



1 332, 1 334 , 1 336 1 38 1 8, 1 38 



34 56,3458,3460 1 381 8, 1 38 



20,13822 



4164,4166, 4 168 13818,138 



20,13822 



4872,4874.4876 13818,138 



20,13822 



5580,5582,5584 1 381 8, 1 38 



20,13822 



32.4.1 Dua l Printhoad I C 

Th e LLU contains 2 dot g e n e rator un i ts. Each dot g e n e rator roado dot data from DRAM and 
g e noratos a str e am of dots in I noroao i ng or docroasing order. A dot generator can b e conf i gured 
to produco odd or e ven dot data str e ams, and the dot s e nse is also configurablo. In Figure 281 
5 tho odd dot generator is configured to produc e odd dot data in d e cr e asing order and th e e v e n dot 
g e n e rator produc e s dot data in i ncr e as i ng order. Th e LLU tak e s care of any vert i ca l misal l gnmont 
betwoon th o 2 printhoad ICs, presenting th e PH I w i th tho appropr i ate data r e ady to b e transm i tted 
to th e pr i nthoad. 

I n ord e r to reconstruct the dot data streams from tho g e nerate ord e r to th e transmit order, tho 
10 connoct i on between tho gonorators and transmitt e rs n ee ds to bo switched at the m i d point. At lin e 
start the odd dot g e nerator foods th e type 1 printhoad, and tho ev e n dot g e nerator foods tho typo 
0 printh e ad. Th i s cont i nues until both pr i nthoads have rece i v e d ha l f th e number of dots they 
r e qu i r e (defin e d as th e mid point). Th e mid po i nt is calculated from the configured printh e ad s i z e 
r e gisters {PrintH e adSizo). Onc e both printhoads have reached tho m i d point, th e PHI switch e s the 
15 conn e ctions between tho dot g e n e rators and th e pr i nthoad. so now tho odd dot generator foods 
th e type 0 pr i nthoad and tho ov e n dot generator feeds tho type 1 pr i nthead. This continues unti l 
th e e nd of the lin o . 

It is poss i b l e that both pr i nthoads wi ll not be tho same size and as a result one dot generator may 
reach th e m i d po i nt b e fore tho oth e r. I n such cases th e quicker dot generator is stal l ed until both 
20 dot g e n e rators reach tho mid po i nt, the conn e ct i ons are switched and both dot gonorators are 
r e start e d. 
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Noto that i n the oxampio shown in Figure 281 the dot gonorators cou l d gonorate an l ino of 
data in 6912 cycl e s, but bocauoo of th e mismatch i n the pr i nthood IC s i zos tho transmit t i m e tak e s 
07^1 cyolos. 

32. 4 .2 Sing le pr i nthead IC 

5 I n somo casos only ono printhoad I C may be connoct e d to tho PH I . In F i gur e 282 tho dot 
gonorato and transm i t ord e r is shown for a s i ngl e I C pr i nth e ad of 971^ dots width. Wh il o tho 
oxomp i o shows tho pr i nthoad IC conn e ct e d to channe l A, oithor channel could b e used. Tho LLU 
g e n e rat e s odd and ovon dot streams as normal, i t has no know l odgo of the phys i cal printhoad 
configuration. Th e PH I is configur e d with the printh e ad size {PrintHoQdSize[1] reg i ster) for 

10 chann el B s e t to zero and chann el A is sot to 97 AA. 

Not e that in th e e xamp le shown i n Figure 283 the dot gonorators cou l d gen e rat e an 7 i nch l i no of 
data in 4 872 cyc l es, but b e cause th e printhoad is us i ng ono I C, th e transmit t i m e takes 97^1 
cyc le s, th e sam e speed as an A^ li no with a 7:3 pr i nthoad. 
32.^.3 Summary of g e n e rate and transmit ordor r e qulromonts 

15 I n ord e r to support al l tho poss i b l e printh e ad arrang e m e nts, tho PH I (In conjuction w i th the 
LLU/DWU) must bo capab l e of ro ordering the bits according to the follow i ng criteria: 

Bo ab le to output the e ven or odd p i ano first. 

Bo able to output ov e n and odd planes ind e pendently, 

^ B e able to r e v e rs e th e s e qu e nc e in wh i ch th e color plan e s of a sing l e dot ar e output to tho 

20 pr i nthoad. 

32t5 Print sequence 

Th e PH I i s respons i ble for accepting dot data streams from th e LLU. restructur i ng th e dot data 
s e qu e nc e and transf e rring tho dot data to each printhead within a l i no timo (i. e b e fore the n e xt l i ne 
' sync). 

25 B e for e a pag e can bo print e d th e printhoad ICs must b e I nit i al i z e d. Th e e xact i nit i alization 

s e qu e nc e is configurat i on dependent, but wil l involve the fire pattern generat i on i n i tialization and 
othor opt i onal stops. Th e i n i tia li zation s e quence i s i mpl e ment e d in software. 
Onco tho first lino of data has boon transforrod to tho printhoad, the PH I w i ll I nterrupt the CPU by 
ass e rt i ng tho phijou _j:>nnt_rdy& \ gna \ . The interrupt can bo opt i onal l y masked i n tho I CU and tho 

30 CPU can po ll tho s i gnal v i a tho PCU or th e ICU. Tho CPU must wait for a print ready s i gna l in all 
pr i nt i ng SoPECs b e fore stort i ng pr i nting. 

Onco tho CPU in tho Pr i ntMast e r SoPEC i s sat i sfi e d that print i ng shou l d start, it triggers th e 
L i n e SyncMastor SoPEC by wr i ting to the PrintStart rogistor of al l pr i nting SoPECs. Tho transit i on 
of the PrintStart r e gist e r i n th e L i noSyncMast e r SoPEC wi ll tr i gger th e start of feynci pu l se 
35 g e neration. Tho Pr i ntMaster and L i neSyncMastor SoPEC ar e not nec e ssar i ly th e sam e dov i co, 

but often are tho same. For a mor e in depth d e fin i t i on see sect i on 12.1 .1 Mult i SoPEC systems on 
page 1 . 

Wr i t i ng a 1 to tho PrintStart rogistor enab l es th e g e n e ration of th e li n e sync In th e L i n e SyncMast e r 
which i s i n turn us e d to align a ll SoPECs i n a mu l t i- SoPEC system. Al l printhead signa li ng is 
40 a li gn e d to tho lino sync. Tho PrintStart i s only used to align tho first l i n e sync i n a page. 
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Whon a SoPEC r e c e iv e s a li ne sync pulso it moans that tho l ino proviouo l y transforr e d to the 
pr i nthoad is now pr i nt i ng, so th e PH I can beg i n to transfer tho noxt l i no of data to tho printhoad. 
Wh e n the transf e r is comp le t e the PH I w il l wait for th e noxt lin e sync pu l s e b e fore repeating tho 
cycl e . I f a li no sync arr i v e s b e fore a compl e t e li n e i s transforrod to tho pr i nthoad ( i .o. a buffer 
5 e rror) th e PHI gonorates a buffer undorrun i nterrupt, and halts tho b l ock. 

For e ach li no i n a page th e PH I must transf e r a ful l l ino of data to tho printhoad before tho noxt 
lino sync is generated or rece i ved. 

32.5.1 Sync pulso control 

if tho PHI i s conf i gur e d as tho Lin e SynoMaster SoPEC it w il l start g o norating l ino sync signa l s 
10 LeyncPre number of pclk cyc le s aft e r PrIntStart r e gister r i s i ng trans i tion i s dotoctod. A l l oth e r 
signa l s i n th e PH I interface ar e r e f e r e nc e d from the rising edg e of phijeyncl s i gnal. 
I f th e SoPEC is i n l i n e sync slav e mode i t wil l r e c e iv e a l ino sync puls e from th e LinoSyncMastor 
SoPEC through tho phljcynol p i n which wi l l bo programm e d i nto i nput mode. Tho phijsync/ i nput 
pin i s tr e at e d as an asynchronous i nput and is pass e d through a d e glitch c i rcu i t of programmabl e 
15 d e- g l itch durat i on {LeyncDoglitchCnt), 

Th e phijeyncl \N \ \ \ r e main l ow for LsyocLow cyc le s, and then h i gh for LeyncHigh cycles. Tho 
phijeyncl profile is repeated unti l tho page is comploto. Tho period of tho phijeyncl is g i ven by 
LsyncLow + Lsynctiigh cyc l es. Not e that th e LeyncPro va l ue is only us e d to vary the time 
botwoon th o gonorat i on of tho first phijeynci and the PageStart i nd i cation from the CPU. See 
20 F i gur e 28 ^ for r e f e r e nc e diagram. 

I f th e SoPEC dev i ce is i n li ne sync slavo mode, th o LeyncHigh r e gister sp e cifi e s the m i n i mum 
al l ow e d phijeyncl per i od. Any phijeynci puls e s r e c e iv e d b e fore tho LeyncHigh has e xp i r e d w ill 
trigg e r a buff e r undorrun error. 

32.5.2 Sh i ft register signal control 

25 Onc e th e PH I receiv e s th e l in e sync puls e , tho sequ e nc e of data transf e r to th e pr i nthoad b e g i ns. 
Al l PHI contro l signa l s are specified from tho ris i ng odgo of tho lino sync. 

Th e phi_erclk (and cons e quently phi_ph_datQ) is contro ll od by tho SrclkPr e , SrcikPoet r e gist e rs. 
Tho SrclkPr e spocif i os tho number of pclk cycloo to wa i t boforo beg i nn i ng to transf e r data to tho 
pr i nthoad. Onc e data transfer has start e d, th e prof il e of th e phi_erclk i s contro ll ed by 

30 PrintHeadRat o r e g i st e r and tho status of tho PH I i nput F I FO. For example it i s poss i ble that tho 
i nput F I FO could e mpty and no data would bo transforrod to tho printhoad while tho PHI was 
wait i ng. After a ll th e data for a pr i nth o ad i s transf e rr e d to th e PHI, i t counts SrcikPoet number of 
pclk cyc l es. If a now pArMsync/ fa l ling odgo arr i ves boforo tho count I s comp le t e the PH I w ill 
gen e rat e a buff e r underrun i nterrupt (phijcu^underrun). 

35 32.6.3 Fir i ng soquonoo signal contro l 

Tho profi l e of tho phijrcik pu l ses per lino is det e rmin e d by 4 regist e rs FrclkPr e , FrclkLow, 
FrclkHigh, FrclkNum, The FrclkPr e r e gister sp e c i fies the numb e r of cycles botwoon lino sync 
r i sing edg e and tho phijrcik pu l so h i gh. I t remains high for FrclkHigh cycl e s and then l ow for 
FrclkLow cyc\QQ. Tho number of pu l s e s gen e rat e d p e r li no i s determ i n e d by FrclkNum rog i stor. 
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Th e total numb e r of cycl e s requir e d to comp le t e a f i ring s e qu e nc e shou l d bo l oss than tho 
phijsyncf p e riod i . e . {{FrclkHigh * FrcfkLow) * FrolkNum)^ FrolkPro < {LcyncLow * LeyncHIgh). 
Not e that wh e n i n CPU direct control mod e {PrintHoadCpuC&M) Qnd PrintHeadCpuCtriMod e [xJ 
-1 , tho frclk generator is tr i ggorod by tho transition of tho FiroGonSoftTriggerfO] b i t from 0 to 1 . 
5 F i gur e 28 4 d e ta il s th e t i ming param e t e rs contro ll ing th e PHI. All timing paramotors aro measured 
i n numb e r of pofk cyc l es. 
32.5. 4 Pago complete 

The PHI counts tho number of l inos proc e ssod through the IntorfQco. The lino count is i n i tia l ised to 
the PagoLonLino and docroments e ach time a l ine i s proc e ssed . When th e l i ne count is zero it 
10 pu l ses tho phijcu _pago_finiGh s i gna l . A puls e on th e phijcu _page_fini6h automat i cQ ll y roseto 

the PHI Go register, and can optionally caus e an int e rrupt to the CPU. Shou l d th e pag e terminate 
abnormal l y, i .e. a buff e r undorrun, tho Go regist e r wi l l b e res e t and an i nterrupt g e n e rat e d. 
32.5.5 L i ne sync i nterrupt 

Th e PH I w i l l gen e rate an i nterrupt to tho CPU after a pred e f i n e d numb e r of l in e syncs have 
15 occur e d. Th e number of l i ne syncs to count is configur e d by th e Un e Syncintorrupt r e g i st e r. The 

i nt e rrupt can bo d i sab le d by sotting the register to zero. 

32t€ Dot line margin 

Th e PHI block allows th e generat i on of margins either side of the received pag e from th e LLU 
b l ock. This al l ows the pag e w i dth us e d within PEP blocks to differ from tho phys i ca l printhead 
20 sizsr 

This a ll ows SoPEC to store data for a pag e m i nus the margins, r e su l t i ng in less storag e 
r e qu i r e m e nts i n tho shared DRAM and reduced memory bandwidth requ i rements. The 
d i ff e r e nc e b e tween th e dot data l in e s i z e and tho lin e l ength gen e rat e d by the PH I is th e dot lin e 
margin l e ngth. There ar e two marg i ns specif i ed for any shoot, a marg i n per pr i nthead IC side. 
25 Th e margin va l uo is sot by programm i ng th e DotMargin r e g i st e r per pr i nth e ad i C. I t should be 

noted that th e DotMargin reg i ster r e presents ha l f th e w i dth of th e actua l margin ( ei th e r l eft or right 
marg i n depending on paper flow direction). For e xample, if the marg i n in dots is 1 i nch (1600 
dots), then DotMargin shou l d be set to 800. The reason for this is that th e PH I only supports 
margin cr e ation cases 1 and 3 described bo l ow. 
30 S ee example i n F i gure 28 4 . 

I n the example the margin for the type 0 pr i nthead I C is set at 100 dots {DotMargin — 100), 
imp l y i ng on actual margin of 200 dots. 

If case ono is used tho PH I takos a tota l of 07 A A phijorcik cyc le s to load th e dot data i nto the type 
0 pr i nthead. it also r e quires 97/14 dots of data from th e LLU which in turn g e ts read from tho 
35 DRAM. I n this caso tho first 100 and last 100 dots would be z e ro but ar e proc e ssed though tho 
SoPEC system consum i ng memory and DRAM bandwidth at each st e p. 

In caso 2 the LLU no long e r generates tho margin dots, the PH I generates the zorood out dots for 
the marg i ning. The phi_crclk still needs to toggle 97 44 t i mes per l i ne, although th e LLU only 
needs to generate 05 44 dots g i ving tho reduct i on i n DRAM storag e and associat e d bandwidth. 
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Tho caso 2 senar i o is not support e d by th e PH I booauso th e samo offoct can bo supportod by 
m e ans of cas e 1 and case 3. 

I f case 3 is usod tho bonofits of caso 2 aro achiovod, but tho phi^ercfk no longer noods to togg l e 
the fu ll 9744 c l ock cyc le s. Tho phijsrolk cycl e s count can bo reduced by tho margin amount (in 
5 this caso 0744 100-0644 dots), and duo to the reduct i on i n phi_6rclk cyc l es tho phljsynci p e r i od 
could also b e r e duc e d, i ncreasing the l i n e process i ng rate and consequent l y i ncroas i ng pr i nt 
spood. Caso 3 works by sh i ft i ng th e odd (or ovon) dots of a marg i n from li n e Y to becom e the 
evon (or odd) dots of tho margin for lino Y 4, (Y 5 adjusted du e to b ei ng printed ono l i no l ator). 
This works for al l l inos w i th tho e xc e pt i on of tho first l in e whoro thoro has boon no previous l i no to 
10 g e nerate tho zorood out marg i n. Th i s s i tuation i s handl e d by adding tho l in e r e set soquonco to tho 
printhead in i t i a l ization procedure, and i s repeated between pag e s of a document. 
327? Dot counter 

For e ach co l or tho PH I k e eps a dot usage count for e ach of tho co l or plan e s (called 

AccumDotCount). I f a dot i s usod i n particu l ar co l or plane tho corr e spond i ng counter i s 
15 incr e ment e d. Each counter is 32 bits w i d e and saturat e s i f not reset. A wr i te to th e DotCountSnap 

r e g i st e r causes tho AcoumDotCount[N] wqIuog to bo transferr e d to tho DotCount[N] r e g i st e rs 

(wh e r e N is 5 to 0, on e p e r co l or). Th e AccumDotCount registers ar e cioar o d on va l ue transfer. 

Tho DotCountfN] regist e rs can be written to or r e ad from by tho CPU at any time. On r e s e t tho 

countoro ar e reset to zero. 
20 Tho dot count e r on l y counts dots that aro passed from th e LLU through tho PHI to the pr i nthead. 

Any dots gonoratod by direct CPU contro l of th e PH I pins w i ll not b e counted. 

32t8 CPU lO GONTnOL 

Th e PH I i nterfac e prov i d e s a mechan i sm for the CPU to direct l y contro l tho PH I i nterfac e p i ns, 
a l lowing tho CPU to acc e ss th e b i l ithio pr i nthoad: 

25 D e t e rmine printh e ad temperature 

^ T e st for and d e t e rm i n e doad nozz l es for each pr i nthead I C 

Printhoad I C initia li zat i on 

Pr i nth e ad pro heat function 

The CPU can gain direct control of tho printhoad i nterface connections by setting tho 
30 Pn'ntHoadCpuCtrl regist e r to on e . Onc e e nab l ed th e pr i nthead bits ar e dr i ven d i roct l y by the 

PrintH e adCpuOut control rogistor, whero tho values i n the reg i st e r ar e r e fl e cted d i rectly on th e 
pr i nthoad p i ns and the status of tho pr i nthoad input pins can b e r e ad diroct l y from tho 
PrintH e adCpufn. Tho direct i on of pins is contro l led by programming PrintH e adCpuDir r e gist e r. 
Tho rogistor to pin mapping is as fo ll ows: 
35 Tab le 213. CPU contro l and status reg i sters mapp i ng to pr i nth e ad int e rface 



Register Name 


bits 


Printhead pin 


PrintHeadCpuOut 


0 


phiJsyncl_o 




1- 


phi_frclk_o 
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o 






phi jh_data_o[0][1 :0] 




phi_ph_data_o[1][1:0] 




phi_srclk[1 :0] 


8 


phi_readl 


PrintHeadCpuDir 




phiJsynoLo diroction control 
1 output modo 

0 — input modo 




4- 


phi_froik_,e diroction control 


1 — output mode 
0 — Input mode 


2 


Reserved 


PrintHeadCpuIn 








phiJsyncM 




+ 


phi_frclkj 


2 


Rosorvod 



I t i s important to note that onoo in PrintHoadCpuCtr/ mod e it i s tho rosponsibility 
of tho CPU to dr i vo tho printhead correctly and not cr e ate situations wh e re tho 
printhead cou l d bo dostroyod such as act i vating a l l nozz l es together. 
Th e phijorclk is a double data rate clock (DDR) and as such wil l clock data on 
both e dg e s in tho printhead. 

Not e th e fo ll ow i ng procedures aro based on current printhead capab il it ie s, and 
ar e subject to change. 

^2t9 I mplementat i on 

32.9.1 Def i n i t i ons of I /O 

Table 2^^. Printhead i nt e rfac o I/O d e fin i t i on 



Port name 






Description 


Clocks and Resets 


Pelk 


4- 


In 


System Clock 


PqqII^ 


4- 


In 


Data out clock (2x pclk) used to transfer data to 


printhead 


prst_n 


\ 


In 






System resot, synchronous active low. Synchronous to 


dorst_n 


\ 


In 






System reset, synchronous active low. Synchronous to 


General 


phljcu_prlnt_rdy 


4- 


Out 


Indicates that the first lino of data is transforrod to tho 




printhead Active high. 


phijcu _pago_finiGh 


X 


Out 






Indicates that data for a complete page has transferred. 
Activo high 
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phijcu_underrun 


4- 


Out 


Indicates the PHI has dotoctod a buffer undorrun. Active 
• "y • * 


phiJcuJinoGynoJnt 


4- 


Out 


Indicates the PHI has dotootod LinoSynointorrupt 
number of lino syncs. 


Debug 


dobug_data_valid 


4- 


If) 


Output debug data valid to bo muxod on to the PHI pin 






debug_cntrl 


4- 


In 


Control signal for the PHI to Indicate whether or not the 






debug data valid (and pcfk) should be selected by the 
pin mux. Active high. 


LLU Interface 


ilujhLdQta[1:0][5:0] 


2x6 


In 






Dot Data from LLU to the PHI, each bit is a color plane 
5 downto 0. 

Bus 0 — Even dot data stroam 

Bus 1 — Odd dot data stream 

Data is active when corresponding bit is active in 


Hu _phi_avaH bus 


phiJlu_roady[1 :0] 


2 


Otrt 






Indicates that PHI is ready to accept data from the LLU 
9 — Even dot data stream 
4 — Odd dot data stream 


llu jhLavaii[1 :0] 


2 


In 






Indicates valid data present on corresponding 

flu _phi_data, 

0 — Even dot data stream 

4 — Odd dot data stream 


Printhead Interfaco 


phi_ph_data[1:Q][1:0] 


2x2 


Out 


Dot data output to printhead. Each bus to each 




printhead contains 2 bits of data 


Bus 0 Printhoad channel A 
Bus 1 — Printhead channel B 


phi_srclk[1 :0] 


2 


Out 






Dot data shift clock used to clock in printhead data, data 


is shifted on both edges of clock(i.e. double data rate 

QDR)r 

Bus 0 — Printhead channel A 
Bus 1 — Printhead channel B 


phi_readi 


4- 


rv-ii 


Common printhoad mode control. Used in conjunction 




with phijeyncl to determine the printhoad mode 




0 — SoPEC receiving, printhead driving 
4 — SoPEC driving, printhead receiving 


phLfroik^o 


4 


Out 


Common Fire pattern clock needs to toggle onco per 




firo cycio 
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phi_frclk_e 


4- 


\B 


phi_frcikjo output enable, when high phijfrclk_o pin is 




driving 


phi_frGlk_l 


4- 


[ft 


phijhrcikj input from printhead 




4- 




Capture dot data for next print line, output modo 


phiJsynoLo 




phiJsyncl_o 


1- 


i« 


phUeynci output enable, whon high phijeyncl pin Is 
driving 


phijsynclj 


A- 


In 


Lino Syno Pulso from Master SoPEC 






PCU Interface 


pcu_phLsol 


4- 




Block Goloot from the PCU. Whon pou _phi_sel is high 




both pcujadr and pcu_dataout are valid. 






4- 


In 




pcu_rwn 


Common road/not write signal from the PCU. 


pou_adr[7:2] 


6 


In 


PCU address bus. Only 6 bits are required to decode 
the address spaoo for this block. 




pcu_dataout[31:0] 


32 


In 


Shared write data bus from tho PCU. 






phi_pcu_rdy 


4- 


Oj if 


Ready signal to the PCU. When phi_pcu_rdy is high it 






indicates tho last cycle of the access. For a write cycle 


this means pcu_dataout has been registered by tho 
block and for a road cycio this moans tho data on 


phijpcujdata'in is valid. 


phi_j)Gu_datain[31 :0] 


32 


Out 


Read data bus to tho PCU. 







32.9.2 PH I sub - b l ock part i t i on 

32.9.3 Configurat i on registers 

Tho configurat i on regist e rs in th e PHI ar e programm e d via the PCU interface. R e fer to section 
21 .8.2 on pago 1 for a descript i on of tho protoco l and t i ming d i agrams for read i ng and wr i ting 
5 registors in th e PH I . Note that since addrossos in SoPEC ar e byt e a l ign e d and th e PCU on l y 

supports 32 b i t reg i st e r r e ads and wr i t e s, th e low e r 2 b i ts of th e PCU a ddr e ss bus are not requ i red 
to decode th e addr e ss spac e for th e PH I . When read i ng a r e gist e r that is l ess than 32 b i ts w i de 
z e ros shou l d b e r e turn e d on tho upper unus e d b i t(s) of phi_j>cu_dQtQln, Tab le 215 l i sts th e 
configurat i on registers in tho PHI 
10 Tabl e 215. PH I r e gist e rs doscriptlon 



2SIH5SSSIiHHHHHill 




its 




■iMMWillMjiii^ 


Control Registers 


0x00 




4- 




Active low synchronous reset, self de- 




activating. A write to this register will 
cause a PHI block reset. 




6e 


4- 


nvo 


Active high bit indicating the PHI is 




programmed and ready to use. A low 
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to high tranoition will causo PHI block 


intornal Gtato to rosot. Will bo 


automatioaHy reset if a pago finish or a 
buffer underrun is detected. 


Gonoral Control 


0x08 


PageLenLine 


32 


DxOODO 


Specifies the number of dot lines in a 




-«oeo 


page. 

Indicatos the number of linos loft to 


procoss In this page while the PHI is 


running (Working register) 


OxOc 


PrintStart 


1- 


0x0 






A high lovel enables printing to start 
via tho gonoration of line syncs in a 




master, and acceptance of lino syncs 
in a slave. Can be set in advance of 


the print ready signal. 


0x10 0x1^ 


DotMargin[1 :0] 


2x4€ 


0x0000 


Specifies for each printhead IC, tho 










Width of the margin in dots divided by 

2. 


Value must be divisible by 2 (i.o. tho 

low bit must be 0) 

0 - Printhoad IC Channel A 

H — KrinineaQ lu L/nannei p 


0x1 8 0x2C 


DotCount[5:0] 




0x0000 


Indicatos tho number of Dots used for 






-0000 






a particular color, where N specifies a 
color from 0 to 5. Voluo valid after a 


write access to DotCountSnap 


9x36 


DotCountSnap 


4- 


0x0 


Write access causes tho 




AccumuoiK^ount values to Be 
transferred to tho DotCount registers. 


The AccumDotCount are reset 
afterwards.(Reads as zero) 


Qx3A 


PhiHeadSwap 


1- 


0x0 






Controls which signals are connected 

to printhoad channels A and B 

Q — Normal, spocifios bit 0 is channel A, 


bit 1 Is channel B 

^ — Swapped, specifies bit 0 is channel 


B, bit 1 is channel A. 


0x38 


PhiModo 


4- 


0x0 






Indicates whether the PHI is operating 
in master or slave mode 
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0 — Slave Modo 


Ox3C 0x40 


PhiSorialOrdor 




9x0 












rfnf/''?''^/ thf*n Hnff^'/ll If '*rt tn nnf* thon 


fhf* nrrlf^r Hntf^-^l rlnff'^''^l Hnffi -HI 




0x44 0x48 


PrintHoadSizo 


2x4€ 


0x0000 












Specifies tho numbor of non margin 


uois in ine prinineaQ tk^s-^rniis-i-oe 


evenj. it margining is to oe useo men 
the configured PrintHeadSize should 




be adjusted by tho dot margin valuo 
i.e. PrintHeadSize ~ {Phyeicai 
PrintHoadSizo (DotMargin * 2)). 




Value must be divisiblo by 2 (i.o. tho 
low bit must be 0) 
Bus 0 — Spooifies printhead on 
Channol A 

Bug 1 — Spocifios printhead on 
Channol B 


CPU Diroot PHI Control (Soo Tablo 213.) 


^n4G 


PhntHoadCpul 


3 


\Jn\J 








PHI interface pins input status. Only 


active in direct CPU mode (Read Only 
Register) 


-Ox§0 


PrIntHoadCpuD 


3 


0x0 






\f 




PHI interface pins direction control. 
Only active In direct CPU modo 


9x§4 


PrintHeadCpu 




OxOOO 


PHI interface pins output control. Only 
activo in direct CPU mode 


0x53 




4- 


0x4- 


Control direct access CPU access to 


PrintHeadCpuC 
If4 




the PHI pins 

0 — Normal Modo 

1 — Direct CPU Control mode 




Pfi«t- 




0x0 




HeadCpuCtrlM 


Specifies if tho pin is controlled by the 




PrintHoadCpuOut rogistor or by the 
FIro gonorator logic. Only activo whon 


PrintHeadCpuCtri is 1 and pin is in 


output modo. 
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Bit 0 GontrolG the frcik pin 
When the bit is 

0 — Pin is oontrolled by 
PrintHeadCpuOut 

1 — Pin is controlled by Fire Gonorator 


Logic 


Line Sync Control 




LsyncHigli 


24 


0x00 0 


In Master modo specifics the number 




000 




OT pciK cycles pni_iGynci snouiQ remain 
high. 

In Slave mode specifies the minimum 




iiuifiucr \j\ fjuin uyuics putwoQn isynG 


period will cause tho PHI to halt duo to 


buffer underrun. 




LoyncLow 




0x0000 








Number of pclk cycles phijeynci 
should remain low. 




LsynoPre 




0x0000 








Number of pclk cycles botwoon 
PhntStart rising transition and tho 


generated p/?/_/sync/ falling odgo 


QxQC 


LsyncDeglitchC 


4 


0x3 








Number of pclk cycles to filtor tho 
incoming Leync pulso from the master. 


Only used in slave mode. 


QxJQ 


LineSynointorru 


4€ 


0x0000 


Number of lino syncs to occur boforo 








generating an interrupt. When sot to 


zero interrupt is disabled. 


Shift Register Control 


-0x74 


SrclitPro 


44 


0x0000 










Number of pclk cycles between 
pfaWsync/ falling edge and phijBrclk 




pulse generation, or printhead data 
transfer 


Qx78 


SrcllcPost 


44 


OxOOOO 








Number of pclk cycles allowed margin 
from last srcik pulse in a line to before 


next lino sync 


Ox7C 0x80 


PnntHeadRato[ 


2x46 


OxFFFF 












Specifios the active to inactive ratio of 
phijEirclk for tho printhead ICs. A 1 


indicatos Active. 

Bus 0 — Printhead IC channel A 

Bus 1 — Printhead IC channel B 
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0x84 


DotOrdorModo 


4- 




Spoclfios the dot transmit order to the 




printhoad Channel A. Printhoad 
Channol B is always the opposing 


order. 

0 Even before Odd dots 
4 — Odd before Even dots 


Fire Control 


rwQQ 


FrclkPro 


44 


9x0060 








Number of pcfk cycles after Isynol 
transitions from 0 to 1 to phijfrcik 


niiltf* nf^nonfir^n 




FrclkLow 


44 


0x0000 








iNumuer or pctn cycies pni^TrctK snouiQ 
rtjtiiaiii low. 




FrclkHIgh 


44 


0x0000 








Number of pcik cycles ph'i_frGlk should 
remain high. 




FroikNum 


46 


0x0000 








Number of phl_frclk pulses per lino 




FireGonSoftTri 


4- 








Only aotivo when 

PrintHoadCpuCtr/Mode is set to 1, 


PrintHoadCpuCtrf is 1 and pin is in 
output modo. 

Bit 0 controls frclk generator. 

A 0 to 1 transition on a bit triggers the 


corresponding generator to create the 




programmed pulse profile (configured 
by 


FrclkNum,FrolkHigh,FrclkLow,FrclkPro 


registers) when complete the bit gets 
resot to 0. 


Working Rogistoro 


OxAC OxBO 


LinoDotCnt 


2x4« 


9xQQ0Q 










Indicates the number of dot procossod 

in the current line 

Bus 0 — Printhoad Channel A 

Bus 1 — Printhead Channel B 

(Read Only Registers) 



The configuration regist e rs in the PHI b l ock are c l ocked at pclk rates but some b l ocks i n the PH I 
aro c l ockod by d i fforont and asynchronous c l ocks. Conf i gurat i on valu e s ar e not r e synchron i zed, i t 
i s thoroforo i mportant that tho Go reg i ster bo cot to zero wh ile updat i ng configuration values. Th i s 
prevents logic from enter i ng unknown stat e s duo to motastable c l ock domain transfers. 
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Some rogistors can bo wr i tten to at any time such as tho direct CPU contro l r e gistorQ 
{PrintHoadCpuln, PrintHoadCpuDir, PrintHoadCpuOut and PrintHoadCpuCtrf), tho Go rogiotor 
and th e PrintStart r e gister. Al l regist e rs can b e r e ad from at any t i mo. 
32.Q.^ Dot counter 

5 Th e dot counter koops a runn i ng count of the numb e r of dots firod for oach color p l ane. Tho 
countors are 32 bits wide and w il l saturate. When th e CPU wants to read tho dot count for a 
particular co l or piano i t must writo to tho DotCountSnap regist e r. This caus e s a l l 6 runn i ng counter 
va l ues to be transferr e d to the DotCount rogistors in the configuration r e g i sters block. Tho running 
count e r valu e s aro reset. 
10 // rcoct if being onappcd 

— (dot_Gnt_onap 1) — thcnf 

— dot_count [5 i 0] o accum_dot_GOxmt [5 = 0] 

— accum_dot_count [5 ! 0] =«— ©■ 

-4 

15 // update the count o 

4ea? — (color=0 ; color < 6 ; colon i ) — f 

— (aGGum_dot_GOunt [color] — ! =» Oxffff_ffff) — f 

// data valid, — firot dot otrcam 

data_valid = ( (phi_llu_rcady [0] =« 3^^ AN© 

20 (llu_j3hi_avail [0] 1)) 

3r* — ( (data_valid — ~ — ^ — MifB — (llu_phi_data [0] [Qolor] — ~ 

1)) then 

accum_dot_count [color] — m- 

// data valid, — OQCond dot otrcam 

25 data_valid = ((phi llu ready [1] ~ ^ MfB 

(llu_plii_avail [1] =^ 1)) 

— ( (data_valid — = — M — AND — (llu_plii_data [1] [color] 

1) ) then 

aGGUTn_dot_count [color] — m- 

30 y 

32.9.5 Sync generator 

Th e sync g e n e rator log i c has two mod e s of operation, master and o i avo mode. In master mode 
(configured by tho PhiModo regist e r) i t gen e rat e s the leyncljo output based on conf i gured va l u e s 
35 and contro l triggers from tho PH I control le r. In s l av e mode it do glitches th e i ncom i ng toync/_/ 
signal, and f i lt e rs th e /sync/ signal with th e m i nimum conf i gured per i od. 

After reset or a puloo on phi_go jjuiG e the mach i n e returns to th e Rosot state, r e gard l ess of what 
state i t's curr e nt l y i n. 

Th e stat e mach i n e waits unti l it's enabl e d {eync_ e n — 1 ) by the PH I contro ll er stat e mach i ne. 
40 When enab l ed i t can proceed to tho SyncPro or SyncWait depend i ng on wheth e r the state 
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maoh i no is configurod i n mast e r or s l av e mod e . In mastor modo it gonoratos the leyncl pu i sos, in 
slav e mod e i t rocolvos and f i lters th e teync/ pu l s e s from tho mastor sync gonorator. 
On transition to tho SyncPro stat e a count e r is loaded with tho LGyncPro va l ue, and whi l o in tho 
SyncPr e th e counter i s docrom e nt e d. Wh e n the count i s zero tho mach i ne proooods to tho 
5 SyncLow stato loading tho count e r w i th LeyncLow va l u e . 

The mach i n e waits i n th e SyncLow stat e unt il the counter has docromontod to zero. I t procoods to 
the SyncHigh stat e pu l sing the lino_et signal on transition and counts LeyncHigh numb e r of 
cycl e s. Th i s i ndicates to th e PH I control l or tho l i no start a li gned to th e leyncl posit i ve e dge. Whilo 
i n LsyncLow stat e tho lsyncl_o output i s sot to 0 and in SyncHigh th e leyncljo output i s sot to 1 . 
10 Wh e n th e count is z e ro and th e curr e nt lino i s not the last (laetjino — 0), tho machine r e turns to 
tho SyncLow stato to beg i n generat i ng a now l ino sync pu l se. The transit i on puls e s tho linoJTin 
signa l to the PHI contro ll or. 

Th e loop I s r e p e at e d unt i l th e current l ino is tho last {laetjino — 1), and tho mach i ne returns to tho 
RoGOt state to wait for th e n e xt pag e start. 

15 In slav e mod e th e stato mach i ne procoods to tho SyncWait Giaio whon enabled. I t waits i n this 

stato until a loync _pulGO_rico i s received from the input d e gl i tch circuit. Wh e n a pu l se is det e ctod 
the machine jumps to tho SyncPoriod stato and begins counting down th e LsyncHIgh number of 
clock cycles b e for e r e turn i ng to the SyncWqit state. Note in s l avo mod e th e LGyncHigh sp e cifies 
th e min i mum number of pclk cycl e s botwoon Loync pulses. On transit i on from tho SyncWait io tho 

20 SyncP e riod stato tho line_Gt signa l to tho PH I contro lle r is pu l sed to i ndicat e the line start. Whi le i n 
th e SyncPoriod state if a iGync _pulGO_fall is detected tho state machine wil l signa l a sync e rror 
(via cyncjorr) to tho PHI controllor and cause a buffer undorrun interrupt. 
32. 0. 5. 1 LGyncI Input d e glitch 

Th e teync_/ i nput is consid e red an asynchronous input to tho PH I , and is pass e d through a 
25 synchron i zer to reduce tho poss i bi li ty of m e tastab le stat e s occurr i ng b e fore be i ng passed to tho 
do g li tch l ogic. 

Th e i nput d e g l itch logic rejects i nput states of durat i on loss than tho configur e d numb e r of clock 
cycl e s {lGync_d e glitch_cnt), i nput states of greater duration ore reflected on the output, and ar e 
negativ o and positive e dg e detect e d to produce th e Isync jDuls e _fall and toync _pulGO_riGO signal 
30 to th e main gonorator stato machine. Th e counter log i c is g i v e n by 

if — ( lo>mc_i — 1 = loync_i_dQlay) — thon 

eafe lo>TiG_dcglitGh_cnt 

output_Qn =■ 0 

cloif — (ont " 0 ) — then 
35 eat « ont 

output_cn = 1 

eftfe 

output_cn u3 0 

40 32.0.5,2 Line Sync Interrupt logic 
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Th e l in e sync int e rrupt l ogic counts th e numb e r of lin e syncs that occur (eith e r interna ll y or 
oxtornally genoratod l i ne syncs) and dotorm l nos wh e th e r to gonorato an interrupt or not. Tho 
number of l i no syncs it counts boforo an i nterrupt i s generated I s conf i gured by tho 
LinoSynGlntorrupt r e g i st e r. Th e int e rrupt Is disab le d i f Un e Syncinterrupt is sot to zero. 
5 // implement the interrupt counter 

■irf — (phi_go_puloc ■■!) — then 

1 inG_count « 0 

cloif — (linc_ot -= 1) — AN© — (linc_count " 0) ) — then 

linc_count = linccount^int 

10 Gloif ((linc_ot 1) MiUD (linc^count 0)) then 
line_count 

// determine when to puloc the interrupt 
if — (lineoync_int 0 ) — then // interrupt dioablcd. 
— phi_icu_linGoynG_int ° 0; 
15 oloif — ( (line^at °= 1) — A^ffi — (line_count == 1) ) — then 
— phi_icu_linooynG_int = 1 
32.9.6 F i r e g e n e rator 

Th e fir e g e n e rator bloc l < cr e ates tho signal profi l e for tho phi_frclk signal to tho printhoad. The 
frclk i s based on configured valu e s and I s timed in r e lation to th e fir e __st puls e from th e PH I 
20 controi l or block. Should tho phijh-clk stat e machine rece i v e a fir e jst pu l s e before it has comp l eted 
th e s e qu e nc e th e machine wil l r e start r e gard le ss of i ts current state. 

Alt e rnat i v el y th e frc ll ^ stato mach i n e can b e tr i gg e r e d to gonorato their configured pulse profile by 
software. A l ow to h i gh transition on the FiroGonSoftTriggor r e g i st e r w i l l cause a pulse on 
6oft_frcfk_et trigg e ring the stato machine to b e g i n g e n e rat i ng tho pu l so profil e . When tho stato 
25 mach i n e has comp le t e d i ts sequence it w i l l cl e ar th e Fir e G e nSoftTriggor register b i t (v i a 

eoft_firo_clr signal). Th e Fir e G e nSoftTrigger r e gister wil l on l y b e active when tho pr i nthoad 
i nt e rfac e i s i n CPU direct contro l mod e {PrintH e adCpuCtrf - 1) , tho firo generator is in software 
tr i gger mode {PrintHeadCpuCtrfModofx} - 1) and th e p i n is configured to b e output mode 
{PrintHoQdCpuDir[x} - 1). 

30 Th e fire generator consists of a state machine for creating the phijhrclk s i gna l . Tho phi^frolk s i gna l 
is generated relat i ve to tho teync?/ signal. 

Th e machin e is r e s e t to th e Roe e t stat e wh e n phijgo jpulGO — 1 or tho r e s e t is act i ve, regard l ess 
of tho curr e nt stat e . 

The machine waits i n tho reset stat e unt il it rec e iv e s a fir e jst pu l s e from th e PH I contro l l e r (or an 
35 Goft_firo_Gt froxw tho conf i guration r e gist e rs). Th e controi l or will gonorato a firo_Gt pu l s e at th e 
beginn i ng of e ach dot l ine. On tho state transition tho cyc l e counter is l oaded with th e FrolkPr e 
va l uo and th e r e p e at counter i s loaded w i th tho FrclkNum valu e . 

Tho stat e machin e waits i n tho Fir e Pro stato unti l tho cycle counter is zero, after which it jumps to 
tho Fir e High state and loads tho cycio count e r with FrclkHigh valu e . Again tho stato machine 
40 wa i ts unt il the count is zero and then proceeds to tho FiroLow stat e . On transition tho cyc l e 
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count e r i s l oad e d w i th th e F/reLow va l ue. Tho stato machino waits in the FireLow stato wh i lo tho 
cyo le count e r i s d e cr e m e nt e d. 

When th e oyo l o counter r e aches z e ro and tho ropoQt_count is non zoro, th e r e poQt_GOunt is 
decr e ment e d, th e cyc le counter i s l oadod with the FrcfkHigh value and tho stato mach i no jumps to 
5 tho FiroHigh state to repeat tho phi_frcik g e n e ration cycl e . Th e l oop is r e p e at e d unt i l tho 
r e peat_count is zoro. I n such cas e s the state machine goos to tho rosot stato rosott i ng 
FiroGonSoftTriggor (v i a tho eoftJRr e jCilr s i gnal) r e gister on the trans i t i on and wa i ts for tho next 
fire_6t puls e . 

Whon in tho Roset stat e the firo_rdy signa l is active to indicat e to tho controller that tho firo 
10 g e nerator i s r e ady. 

32.9.7 PHI controll e r 

Th e PHI contro l l e r i s r e sponsible for controlling a ll funct i ons of tho PH I block on a li n e by l i n e 
basis. I t controls and synchron i zos tho sync generator, tho firo g e n e rator, and datapath un i t, as 
well as s i gnalling back to th e CPU tho PH I status. I t also contains a lin e counter to d e t e rm i n e 

15 wh e n a ful l pago has comp le t e d printing. 

Tho PHI contro l l e r stat e mach i n e is reset to R e s e t state by a r e s e t or phijgo jpulee — 1 . 
I t w il l romoln I n rosot unti l tho block is onab l od by phi_go — 1 . Onc e e nab l ed th e state machino 
w i ll jump to th e FiretUn e stato, trigg e r tho transf e r of one lino of data to th e pr i nthoad {data_6t — 
1 ) and the lin e count e r will bo i nitia l iz e d to tho pago l ength (PagoLonLino). Onco th e l i ne i s 

20 transferred {d a taJTm from tho datapath unit) tho machin e wil l go to Printetart stato and signa l tho 
CPU us i ng an interrupt that tho PHI Is ready to bogin printing (phijcu _print_rdy). Th e l i n e count e r 
wil l also b e docromontod. It w il l then wa i t i n tho Printotart stat e unti l the CPU acknowlodgos tho 
pr i nt r e ady signal and e nables pr i nt i ng by writ i ng to th e PrintStart reg i ster. 
Th e s tat e machino procoodc to tho SynclVatf state and waits for a lino start cond i tion {lin e jst 

25 — 1). Tho l in e start cond i t i on is different depending on whether tho PH I i s configur e d as b ei ng i n a 
mast e r or s l avo SoPEC (tho PhiMod e r e g i st e r). I n e i ther case tho sync gonorator determ i nes tho 
oorroct lino start sourc e and signals th e PHI contro l lor via tho linojst signal. Onc e r e c ei v e d th e 
machino procoods to th e UnoTranc stato, with tho transition triggering tho firo gonorator to start 
{firo_Gt), tho datapath unit to start {data_6t) and tho sync g e n e rator to start (sync_st). 

30 Whi l o in th e LinoTrane stato tho firo, sync and datapath un i t w ill bo producing li no data. When 

fin i sh e d process i ng a l in e th e datapath un i t wi ll as s ort th e l in e finished {dataJTin) s i gna l . If th e li n e 
count e r is not equa l to 1 ( i .e. not th e l ast li n e ) tho state machin e wil l jump back to th e SyncWait 
stato and wa i t for tho start condit i on for tho next lino. Tho l i no counter w ill bo decr e m e nt e d. I f th e 
l in e counter i s one then tho mach i n e wi ll proc ee d to the LastLino stato. 

35 Th e LastLino stato g e n e rates one more l ine of f i ro pulses to print tho last li ne held in the sh i ft 
registers of th e pr i nthoad. Once complete {fir e jRn — 1) th e stato mach i no r e turns to the rosot 
state and waits for th e next page of data. On pag e compl e tion tho state mach i no generates a 
phiJcu_pago_JinfGh interrupt to signa l to th e CPU that th e pago has complet e d, th e 
phi_icu_page_finiGh wi l l a l so caus e tho Go r e gist e r to r e s e t automatical l y. 
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Wh il o the stato mach i no i s in tho LinoTrane stato (or i n FirotUno stato and tho PH I i o in o l avo 
mod e ) and wait i ng for tho datapath unit to oomp l ote li ne procoso i ng, it is possib l e (o>g. an 
e xc e ss i v e PEP stall) that a l ino f i n i sh condit i on occurs jJinoJTin — 1) but the datapath unit is not 
r e ady. I n this case an undorrun error is g e nerated. Th e state machino go e s to tho Undorrun stato 
and gen e rat e s a phijoujundorrun i nterrupt to tho CPU. Tho PH I cannot r e cover from a buffer 
und e rrun error, tho CPU must rosot tho PEP b l ocks and ro start printing. Tho phijcujunderrun 
wi l l also oauso tho Go register to rosot automatically. 
32.9.8 CPU IO contro l 

Th e CPU I O control block is r e spons i ble for provid i ng d i rect CPU control of tho I O pins v i a tho 
conf i guration regist e rs. It also accepts th e i nput signals from tho printhoad and re synchron i zos 
th e m to tho pclk domain, and d e bug s i gna l s from the RDU and muxos th e m to output p i ns. 
Table — contains th e dir e ct mapp i ng of conf i gurat i on registers to pr i nthoad IO pins. Dir e ct CPU 
contro l is enabled only when PrintHoadCpuCtrl is sot to ono. In normal op e rat i on (i.e. 
PrintHoQdCpuCtrl — 0) tho printhoad frclk p i n is always i n output mode {phi_Jrcik_o-1 ), tho 
phijsynci wi ll b e i n output if tho SoPEC is tho master, i . e . phi_teynci_o - phf_modo, and roadfW i W 
b e s e t h i gh. 

The PrintH e adCpuCtrlMod e r e g i ster d o t e rmino wh e ther tho frclk pin shou l d be dr i v e n by tho f i re 
gonorator logic or d i r e ct from tho CPU PrintH e adCpuOut register. 
Th e ps e udocode for tho CPU I O control Is: 

^ — (printhcad_Gpu__ctrl = = 1) — then — // CPU accooo enable d: 

// output o 

(PrintHeadCpuCtrlMode [0] ~ — ^ then /-/^ — fire 



generator controlled 

phi_f rcl]t__o 

eloe 



frclk 



/ / normal 



direct CPU control 














phi_f rcl]^:_o 






a printhead^ 


cpu_ 


out [1] 




phi jh_data_o [0] 






= printhGad_ 


cpu 


out [4 : 




phi_ph_da ta_o [ 1 ] 

— phi_orclk [1; 0] 






= printhoad 
= printhcad_ 


_GpU^ 

cpu 


_Out [6 ; 
out [8 : 





phi_rcadl 



printhcad_cpu_out [9] 



// direction control 
phi_l aync l_c 



printhead_Gpu_dir [0] 



phi_f rcl3c_e 



= printhead_cpu_dir [1] 

// input aoaignmento 

printhGad_cpu_in [0] oynchroniae (phi_lo^Ticl_i ) 

— printhGad_cpu_in [1] = oynchronissc (phi_f rclk_i) 

eloQ — // normal connect ions 
// output 3 

— phi_ph_data_o[0] [1:0] ° ph_data[0] [I s O] 
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phi_ph_data_Q[l] [liO] ph_data [1] [IsO] 

phi_l oync l_o « loync_o 

phi_rGadl «— i 



phi_orclk[l!0] ° orclk[l!0] 

5 — phi_f rclk^o ° frclk 

// direction control 

phi_f rclk^c a»— i 

phi_l Dymc 1_g = phi^modc // dopcnda on Mao tor 

or Slave mode 

10 / / input o 

loyncl^i » — phi_loync_i — /-/^ — connected 

rogardleoo 

// debug overrideo any other connectiono 
if (debug_cntrl [ 0 ] — == 1) then 
15 — phi_frGl]c_o ■ dGbug_data_valid 

phi_f rGllc_e =— i 



phi_rcadl = polk 

The debug signal l ing i s contro l lod by tho RDU b l ock (soo Soct i on 1 1 .8 R o altim e Debug Unit 
(RDU)), th e I Q control i n tho PHI mux e s debug data onto the PHI pins based on the contro l 
20 s i gna l s from th e RDU. 

3Z0.0 Datapoth Un i t 

32.9. 1 0 Dot ordor oontro ll or 

Tho dot order oontrol l or is responsibl e for control li ng the dot order blocks. I t mon i tors tho status of 
e ach block and dotormlnos tho switch ovor point, at wh i ch tho oonnoct i ons from odd and ev e n dot 

25 streams to printhoad channe l s ar e swapped. 

Tho mach i ne Is reset to the Roeot state when phijgo _pufGo — 1 or tho reset is act i ve. The 
mach i n e will wa i t until i t receives a dQta_ct pulse from tho PH I contro l l e r b e for e proc ee d i ng to th e 
LinoStart state. On th e transit i on to the LinoStart state it w i l l reset the dot counter in each dot 
ordor block via tho clot_ont_rct signa l . 

30 Whi le in th e LinoStart state both dot ordor b l ocks are enabled (genjon — 1 ). Tho dot ordor b l ocks 
process data until oach of th e m roach tho i r mid point. Th e m i d point of a li ne i s d e fin e d by th e 
configured printhoad s i z e (i. e . printjh e adjsizo). When a dot ordor block reaches tho m i d point i t 
I mmediately stops processing and wa i ts for th e r e main i ng dot ordor block. Wh e n both dot ord e r 
blocks are at the m i d po i nt (m'idjpt — 11) the contro ll er c l ocks through tho LinoMid state to al l ow 

35 th e p i p el in e to empty and imm e diate l y go e s to Lin e End state. 

I n th e LinoEnd state th e modo_eol is switched and the dot ord e r b l ocks r e-e nab le d, i n th i s state 
the dot order b l ocks are read i ng data from the opposite LLU dot data str e am as i n LinoStart state. 
The contro ll er r e mains in the LinoEnd state unti l both dot order b l ocks hav e processed a lin e i . e . 
h'n e fm — 11. 
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On complot i on of both blocks tho contro l ler returns to th e R e set stato and again awoito tho noxt 

data_Gt pu l s e from th e PH I contro lle r. When in Reset stat e the machino s i gna l o tho PH I oontrol l or 

that if s roady to b e g i n process i ng dot data via th e dot_ord e r_rdy signa l . 

Th e dot ord e r control le r solocts wh i ch dot str e ams should food wh i ch printh e ad channe l s. The 

order can bo changed by configuring tho DotOrderModo rogistor. I n a ll cases Chann el A and 

Channel B must b e i n oppos i ng dot ord e r modes. Table 216 shows tho possib l e mod e s of 

operation. 

Tab l e 216. Modo se l ect i on in Dot order contro l lor. 



Channel 


Moclo_sol 


DotOrderModo 


Dottronomitordor 


A 


Q 


0 


Even before Odd (EBO mode), even dot 


stream foods Channol A printhead. first half 






Q 


4- 


Odd before Even (QBE modo), odd dot 


stream feeds Channel A printhead, first half 




1- 


Q 


Even before Odd (EBO mode), even dot 




stream foods Channol A printhead, second 
half lino. 


4- 




Odd before Even (QBE modo), odd dot 


Stream feeds Channel A pnnthead, second 


half lino. 


B 


Q 


9 


Odd before Even (QBE mode), odd dot 


stream feeds Channel B printhead, second 


half line 




0 


4^ 


Even before Odd (EBO modo), even dot 


stream feeds Channel B printhead, second 


half line. 


4- 




Odd boforo Evon (OBE mode), odd dot 
stream foods Channol B printhead, first half 




4- 




Evon before Odd (EBO modo), oven dot 


stream foods Channel B printhead, first half 


1 jjr^Q 



32.9. 10.1 Dot ord e r unit 



Th e dot ord e r control accepts dot data from o i thor dot stream from th e LLU and wr i tes tho dot 
data i nto th e dot buff e r. I t has two modes of oporat i on, odd b e for e e von (OBE) and evon boforo 
odd (EBO). In the OBE modo data from th e odd str e am dot data i s accept e d first th e n e von, i n 
EBO mod e i t's vic e v e rsa. Tho mode I s conf i gurab le by th e DotOrd e rMod e r e gister. 
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Th e dot ord e r un i t maintains a dot count that is docrGm e ntod oach t i m e a n e w dot is rec ei ved from 
th e LLU. Th e dot ord e r contro l l e r r e s e ts th e dot count e r to th e print Ji e adjslzoll 5:0] at th e start of 
a n e w li n e v i a the dot_cnt_ret signa l . Th e dot count is compar e d with tho printhoad sizo 
(pn'nt_h e ad_6fz e [15:0] divid e d by 2) to d e t e rmin e th e mid point {mid joQ and tho line f i nish point 
5 (iinojFin) whon tho dot counter is zero. 

Th e mid po i nt i s d e fin e d as th e ha l f th e number of dots I n a particu l ar pr i nth e ad, and i s deriv e d 
from th e th e print_h e Qd_Gizo bus by d i vid i ng by 2 and round i ng down. 
// dcfino tho mid point 

4=€ — (dot_Gnt [15 ! 0] — == print_hQad__oigQ [15 1 1] — ) then 

10 mid_pt = 1 

cloo 

— mid_j)t = 0 

Th e dot ord e r unit l og i c mainta i ns the dot data wr i t e point e r. Each tim e a n e w dot is wr i tt e n to th e 
dot buff e r th e writ e po i nt e r i s incr e mented. Th e f ill le v el of th e dot buff e r is dotorm i nod by 
15 compar i ng th e read and wr i t e pointers. The fi l l l e v e l is us e d to d e t e rmin e wh e n to backprossuro 
th e LLU {r e ady signa l ) duo to th e dot buff e r fi l ling. A su i tab le threshold value is det e rmin e d to 
allow for th e fu l l LLU pipolino to empty into th e dot buff e r. 
The dot ord e r sta ll ing contro l i s g i von by: 

-/-/ — dGtcrminc — fcfee — ready/ avai 1 — oignal — fee — uoc, — baocd — ©h — mode 
20 OOlGGt 

i€ — (modc_acl °= 1) — then 

dot_aativc ■ llu_j>hi_avail [03 — liND ready 

— wr_data = 1 lu_phi_da t a [ 0 ] 

eloc 

25 dot^aetivc ■ llu_phi_avail [1] — 7\ND ready 

— wr_data ■ 1 lu_phi_dat a [ 1 ] 

// update the oountcro 

4r€ — (dot_aGtive -= 1) — then { 

wr_en = — t 

30 — wr_adr — m- 

if — (dot_Gnt °= 0) — then 

dot_Gnt « print_head_oige 

ClOG 

dot cnt — 



35 — f 

Th e dot wr i t e r noods to d e t e rm i ne wh e n to sta ll th e LLU dot data stream. A numb e r of factors 
could stal l tho dot otroam in tho LLU such ao buffer fil li ng, wa i t i ng for tho m i d po i nt, waiting for th e 
line fin i sh or tho dot ordor controHor is wa i t i ng for tho l i no start cond i tion from tho PH I controllor. 
Tho sta ll l og i c is givon by: 

40 // determine when to a tall the LIiU generator 
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fill_lcvQl = wr_adr rd_adr 

4r€ — (fill_lGVGl > — THRBCIIOLD ) ) then // THRESIIOIiD io 

open value 

ready « 0 // buffer io clooe 

5 to full 

eloif — ( gen_en " 0) — then 

ready » 0 // otalled by the 

datapath controller 
cloc 

1 0 ready ° — 1 ^ — everything good 

no otall 
32.9.10.2 Data g e nerator 

Th e data generator b l ock r e ads data from th e dot buffer and foods dot data to th e printhead at a 
configur e d rat e (s e t by th e Pn'nth e adRat e ). It a l so gonoratos tho marg i n z e ro data and al i gns th e 

15 dot data genoration to the synchronization pulso from tho PH I contro lle r. 

Th e data gonorator controllor wa i ts i n Rooot state until it rocoiv o s a l i n e start puls e from th e PHI 
controllor {dQtQ_Gt s i gnal). Once a start pu l s e is r e c e ived i t procoods to th o SrclkPro state load i ng 
a counter w i th tho SrclkPro valu e . Whi le in t h is s tat e it d e cr e m e nts the count e r. No data is road or 
output at th i s stag e . Wh e n the count i s z e ro th o mach i n e proc ee ds to th e DataG e nl stat e . 

20 On trans i t i on i t loads th e count e r with th e printh e ad size {pnnt_hoad_siz e ). If margin i ng i s to b e 
u se d th e n th e configured pr'mtjh e adjsize should bo adjust e d by th e dot marg i n valu e i . e . 
print_hoQd_eizo " {phyGioal _prmtJhoad_cizo {dotjnarg'm * 2)). 

Dot data is transf e rr e d to th e pr i nth e ad ser i a li zer i n dot - pa i rs, w i th on e dot - pair transf e rr e d e v e ry 3 
pc l k cycles. To construct a dot data pair th e stat e mach i n e r e ads on e dot In th e DataGonI stato, 

25 one dot I n the DataG e n2 stat e and waits for ono clock cyc le in th e DataG e nS wh i l e th e data I s 

transferred to tho data sorial i z e r. Th e count e r will docromont for ovory dot data word transf e rr e d. 
Th e e xact data rat e is d i ctat e d by th e dot buffer fi ll le v e ls and tho configured pr i nth e ad rat e 
{Printh e ad Rat e ). Wh e n in DataG e n3 stato the mach i n e d e t e rm i n e s if it shou l d wa i ts for 3 cyc l es or 
transfer anoth e r dot pa i r to the data s e rial i zer. Th e generator determines th e rat e by comparing 

30 th e rat e count e r (rat e _cnt) w i th the configurod PrinthoadRato value. If tho bit select e d by th e 

rat e jont in the print_hoadjroto bus is on e data I s transf e rred, oth e rw i s e th e 3 cycles are skipped 
(Woit1,Woit2 and Wait3). I f tho PrintHeadRate Is sot to a ll zeros then no data w i l l ever get 
transferr e d. Th e rate counter Is docromontod {rate_cnt) whi le in th e DataG e n2 and Wait2 states. 
Tho rat e count e r is o ll owod to wrap norma ll y. 

35 Tho pseudo cod e for the rato contro l DQtaG e n3 (or Wait3) stat e i s giv e n by: 
// decrement the rate count 

rate_ent // happcno in DataGen2, — 

Wait2 

// determine if data ohould be read 
40 // firot determine if data io available in buffer 
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4r§ — (rd_adr !« wr_adr ) — then 

— (print_hQad_ratQ [ratc_Gnt] — °= 1 ) — then 

dot_aativG « 1 

gatG_arclk o i 

5 count 

nc3ct_otatG ° DataGcnl 

gIgq 

dot_aGtivG = 0 

gatG_orGlk « 0 

10 nGxt_otatc a Waitl 

i3G 

— dot_aQtivc a 0 
gatG_orcl3c = 0 
— ncxt_otatc ■ Waitl 
15 Wh e n the dot countor r e aches zero th e state mach i n e will jump to tho MarginGonl stato i f tho 
configur e d margin valu e i s non z e ro, otherw i se i t will jump directly to the SrdkPoet state. On 
transition to MarginGonl state it loads the cycl e countor w i th tho dot_margin value, and b e gins to 
count down. Whi l e in the MarginG e nI ,MarginG e n2 and MarginG e nS stat e machine l oop the data 
generator log i c b l ock writes dot data to the printhoad but do e s not r e ad from tho dot buff e rs. I t 
20 oroatos zero dot data words for tho margin duration. As w i th norma l dot data, It cr e at e s on e dot i n 
MarginG e nl and MarginG e n2 states, thon wa i t a clock cycle to al l ow th e transf e r to tho data 
s e ria li z e r to comploto. 

When tho count e r r e ach e s z e ro th e machin e jumps to th e SrclkPoet stato, l oads th e c l ock countor 
w i th tho SrclkPoGt va l ue and docr e m e nts. When tho count is finished tho state mach i ne returns to 
25 the RoGOt and awa i ts th e n e xt start pu l s e . Shou l d a lino sync arr i ve b e fore the data generators 
have complet e d (dQtQ_fln s i gna l ) th e PH I controller wi l l d e t e ct a print e rror and stal l th e PH I 

I nt e rface. 

As a cons e qu e nc e of tho data transf e r m e chanism of dot pair cycles followed by a wa i t state, the 
printh e ad s i z e {print_hoad_Gfzo) and dot marg i n (dotjmorgin) must a l ways b e ev e n dot valu e s. 
30 32. 0. 10.3 Data G e haiizer 

Th e data serializ e r block oonvorts 12 - b l t dot data Qi pclk rates (nomina ll y 160 MHz) to 2 bit data at 
doclk rotos (nomina ll y 320 MHz). 

Th e srclk i s on l y act i v e when data i s avai l able for transfer to tho printhoad, as enab l ed by th e 
gatojBrolk s i gna l . The data rato mechanism in tho data generator b l ock w i l l moan that data is not 

35 transferr e d to the printh e ad on ev e ry s e t of 3 pclk cycles. Both tho dotjdata and gatojGrGlk 

signals are contro ll ed by tho data gen e rator block and can on l y chang e on a fixed 3 pclk cycle 
boundary. Dat a i s tr a nsferred to the printhead on both edg e s of srclk ( i .e doub le data rat e DDR). 
Direct l y aft e r a li ne sync pulse th e mux contro l logic and the erclk generat i on log i c are r e set to a 
known state (the erclk i s s e t high). B e fore data can b e gin transf e r to th e pr i nth e ad i t must 

40 generate a l ine setup edge on Grclk, caus i ng Grclk to go low. Th e l ine sotup edge happens 
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SrclkPr e numbor of pclk cyc l es after the l i no sync falling edge ( i ndicatod by tho erjnit signal from 
the data g e n e rator block). 

Al l data transf e rs to th e printhead w i l l bo in groups of 6 2 - bit data words, oaoh word clock e d on an 
edgo of erolk. For ooch group erolk w il l start low and ond l ow. 
5 At tho ond of a full li n e of data transfer th e erolk must gonorate a l i no compl e t e edgo to return tho 
Grclk to a h i gh state bofore the next lino sync pulse. The data g e nerator block g e n e rates a erjoom 
s i gna l to indicat e that tho data transfer to the pr i nthoad has comp le t e d and that the l ino comploto 
e dg e can b e Ins e rt e d. Tho Gr_com s i gna l I s g e n e rated boforo tho SrClkPoet period . 
Tho data ser i a l iz e r block allows e asy separation of clock gat i ng and c l ock to logic structures from 

10 th e r e st of the PHI i ntorfaco. 

Th e mux l ogic d e t e rmines which data bits from th e dotjdlata bus shou l d b e s e lected for output on 
tho phjdatQ bus to tho pr i nth e ad. Th e mux soloctor i s i n i t i a li z e d by an e dg e d e tect on th e srjnit 
signal from tho data generator. 

// dctGnninc wrap and init pointo 

15 — (phi_OGrial_ordor 1) — thon 



mux_ 


wrap = 
init ■ 


=— 5- 


mux_ 

clac 




^— 0- 


mux_ 

— mux 


wrap = 
init g 





// tho mux oclGGtor logic 

if — ( (or_init_cdgQ °° l)OR( m\ix_OGl mux_wrap )) — then 
mux_OGl = mu3C_init 

cloif — ( phi_DGrial_ordcr 1 ) — then 

25 — m\ix ocl // dccrGmGnt order 

cloc 

mu3c_acl I I // inorGmcnt order 

Th e dot data s e ria l ization ordor can bo configured by PhiSohalOrd e r rog i stor. I f tho 
30 PhiS e riaiOrd e r is z e ro tho ordor is dot[1:0], th e n dot[3:2] thon dot[5:4]. If tho regist e r i s on e th e n 
tho ordor is dot[5:1l dot[3:2l dot[1:0J. 

The srclk contro l log i c i s initia l izod to 1 when a lino_Gt positiv e e dg e i s detect e d. If e i th e r 
er_com_ e dge, erJinit_ e dgo or gatojBrclk ar e e qual to on e erolk is transit i on e d, erolk i s a l ways 
clocked out to tho output pins on the negat i v e e dge of doolk to p l ace th e c l ock e dg e In th e c e ntre 
35 of th e data. 

The psoudo code for tho control logic is: 

— (linG_ot_cdgG = - 1 ) — then 
orGl]c_gQn = 1 

eloif ( (gatG_orclk GR ( or_ini t_GdgG= = 1 ) 9R 

40 (or_Gom_GdgQ ° °l) ) — thon 
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orclk_gcn = orGlk_gGn 

gIoo 

// hold 

5 33 Package and Test 
Test Units 

33r1 JTAG INTERFACE 

A standard JTAG (Joint T e st Action Group) I nterfac o i s i nc l ud e d i n SoPEC for Bonding and l O 
test i ng purpos e s. Th e JTAG port w i ll prov i de accoss to a i l int e rna l B I ST (Bu i lt In S el f Tost) 
10 structur e s. 

33t2 Scan Te s t I /O 

Th e SoPEC d e v i c e wi ll r e qu i r e s e v e ra l test l O's for runn i ng scan t e sts. I n g e n e ral scan i n and 
scan out p i ns wi ll b e mu l tipl e x e d with funct i onal p i ns. 

33t3 Analog Te s t Un i ts 

15 33r3r1 USB PHY Tooting 

Tho USB phy analog macro, w ill contain built in in tost structure, which can bo access by o i thor 
th e CPU or through the JTAG port. 
33.3.2 Embedded PLL Test i ng 

Th e embedd e d clock g e n e rator PLL will roquiro tost accoss from JTAG port. 

20 34 SoPEC Pinning and Packag e 

347^ Overv i ew 

I t is int e nd e d that th e SoPEC packag e b e a 100 p i n LQFP. Any sparo pins in th e packag e may bo 
us e d by i ncreasing the numb e r of avai l abl e GP I O p i ns or add i ng extra power and ground pin. Tho 
p i n l ist shows th e m i nimum p i n r e qu i r e m e nt for th e SoPEC d e v i ce. 
25 Tab l o 217. SoPEC P i n L i st (100 LQFP) 





Pin Name 






Type 




r/O Pntp- 








Test 

Function 


X Vol 

Macro 




//pin s 


Freq 


Description 


lO Cell Typo 








Function 


Clocks and resets 




■VJ M. \y M- Ld> X* 


Xtalin 


4- 


( 




N/A 


KT/ A 








Nono 






Crystal 
Input pin 


AINSA_PM_ 
A 






Xtalout 


4- 


Q 




N/A 


















Crystal 
output pin 


i\BNST_PM 
-A 




reset n 


4- 


I 


LVTT 
h 




9 












Asynohron 
ous active 
low reset 


IT33LTPUT_ 
PM_A 


LT (loalcagc 
test) 


PrintHead Interface 














Q 




1t§¥ 


d 




Print head 




Neae 




Group 3 


phead_dat 






QLVDSI5_P 
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a 
















M::A 








Srcllc 


4 


Q 










Print head 




None 






clock 


OLVDS15_P 
M-At 








4- 


0 


LVTT 
L 




S 




Common 
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B I L I THIC PR I NTHEADS 
A Background 

5 S i lv e rbrook's bllithio Memjot™ printhoads oro tho targot pr i ntheads for printing syst e ms which will 
bo controllod by SoPEC and MoPEC dev l cos. 

This documont pr e s e nts tho format and structure of those pr i ntheads, and d e scrib e s tho the i r 
possib l e arrangements i n the targot systems. I t a l so defines a set of terms used to diff e r e ntiate 
b e twe e n th e types of printh e ads and the syst e ms which us e them. 

10 

B i L I T H IC PR I NTHEAD CONF I GURATIONS 

2 D e finitions 

This documont pr e s e nts term i no l ogy and defin i tions used to describ e tho b i l i th i c pr i nthoad 
syst e ms. These terms and defin i tions are as follows: 

15 ^ Pr i nthoad Tvo e - Th e r e are 3 param e t e rs which defin e the typo of printhoad uGod in n 

syst e m: 

Direct ion of tho data flow through tho printhoad (aloGlcwioc 

or anti cloolwiao, — with tho printhoad ohooting ink down onto 
tho page) . 

20 Location of tho loft moot dot — (upper row or lowor row^ with 

rcopcct to V^ ^ 

^ Printhoad footprint — (typo A or typo D, oharactorigod by tho 

data pin being on the loft or tho right of whore V^ i s at the top of 
th e pr i nthoad). 

25 Pr i nth o ad Arranoom e nt Even though thoro ar e 8 printh e ad typ e s, e anh arrnngftm ft nt hna 

to use a specific pairing of pr i ntheads, as discuss e d in Sect i on 3. This giv e s 4 pa i rs of 
pr i nth e ads. How e v e r, b e cause tho pap e r can flow in ei th e r direction with respect to the 
printheads, there are a total of eight possible arrangements, e.g. Arrangement 1 has a Type 
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0 pr i nth e ad on th e l e ft with r e spect to th e pap e r flow, and a Typo 1 printhoad on tho r i ght. 
Arrang e m e nt 2 us e s the samo pr i nth e ad pair as Arrangomont 1 , but tho papor flows i n the 
opposit e d i r e ction. 

Color 0 i s a l ways th e first color p l an e e ncount e r e d by tho papor. 

5 Dot 0 i s d e fined as the nozzle which can print a dot i n tho le ft most s i do of tho pago. 

Tho Evon Piano of a color corrosponds to th e row of nozz l es that pr i nts dot Q. 

Not e that in a ll of the r e l e vant draw i ngs, pr i nthoads should bo int e rpret e d as shooting ink down 
onto th e pago. 

10 Figur e 295 shows th e 8 diff e r e nt poss i ble pr i nth e ad typos. Typ e 0 I s ident i cal to the Right 

Printhoad pr e s e nted in F i gur e 297 i n [1], and Type 1 i s tho samo as th e L e ft Printhead as d e fined 

Whil e th e printhoads shown in Figaro 295 look to be ofoqual width (having tho sam e numb e r of 
15 nozzl e s) it is important to romemb e r that in a typical systom, a pair of unequal sized printhoads 
may be used. 

2^ — Combin i ng B i lith i g Pr i ntheads 

Although th e pr i nthoads can b e physica l ly join e d in tho mann e r shown i n F i gure 2 9 6, it i s 
proforab l o to prov i de on arrangmont that a l lows great e r spacing b e tw ee n th e 2 printh e ads wi l l b e 
20 requ i r e d for two main roasono: 

i naccurac ie s in tho backotch 

ch e aper manufacturing cost duo to decreasing tho to l oranco roqu i romonts in sea li ng tho ink 

rosorvoirs beh i nd tho printhoad 
Fa i l i ng to account for th e s e Inaccuracios and to l orancos can load to misa li gnment of tho nozz l e 
25 rows both v e rt i ca l ly and horizontal l y, as shown i n Figure 297. 

An even row of color n on printh e ad A may b e v e rt i ca l ly misal i gn e d from tho ovon row of color n 
on pr i nth e ad B by some number of dots e.g. in F i gure 297 th i s I s shown to bo 5 dots. And thoro 
can also b e hor i zonta l misa l ignm e nt, I n that th e e v e n row of color n printhead A I s not n e cessari l y 
30 a li gn e d w i th the ovon row of color n+1 on printhead A, o.g. in F i gur e 297 this hor i zonta l 
m i sa l ignment I s 6 dots. 

Th e r e sultant concoptua l printhoad def i n i t i on, shown i n F i gure 297 has prop e rt ie s that ar e 
appropriate l y parameter i z e d i n SoPEC and MoPEC to cater for th i s c l ass of printheads. 

35 

Tho preferred printh e ads can be charactoriz e d by tho fol l ow i ng features: 

A ll nozzle rows are th e same l ength (although may be hor i zontal l y d i sp l aced som e numb e r 

of dots ovon w i thin a co l or on a sing l e printh e ad) 
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Tho nozzlos for color n pr i nthoad A may not bo printing on the oamo li ne of tho pago ao tho 

nozzl e s for co l or n printhoad B. I n the oxampio ohown in Figure 207, thero i s a 5 dot 
disp l acement between adjac e nt rows of th e pr i nthoads. 

Tho oxact shape of tho join is an arb i trary shape a l though is most li k e ly to bo slop i ng (If 

5 sloping, it could bo slop i ng e i th e r dir e ction) 

Th e max i mum slop e i s 2 dots p e r row of nozzles 

Although sh i ft reg i sters arc provided i n the printh e ad at tho 2 sides of tho joined pr i nthoad, 

th e y do not dr i v e nozz l es this m e ans the printab le area is l e ss than th e actual shift 
registers, as highlighted by Figur e 2 9 8. 
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2t2 — Printhoad Arrangomonto 

Tabic 21 8 dof i nos tho phnthoad pair i ng and l ocation of the oaoh pr i nthoad typo, w i th rospoot to 
th e flow of pap e r, for th e 8 poss i bio arrang e m e nts 





Krininegg on ioti sioo, 


KrinineaQ on ngni sioo. 






Arrangement 1 


Type 0 


Typo 1 


Arrangement 2 


Type 1 


Typo 0 


Arrangomont 3 


Typo 2 


Type 3 


Arrangomont 4 


Typo 3 


Type 2 


Arrangement 5 


Type 4 


Type 5 


Arrangement 6 


Type 5 


Type 4 


Arrangomont 7 


Type 6 


Type 7 


Arrangement 8 


Typo 7 


Type 6 



5 

3 Bll i thic Pr i nth e ad Systems 

When us i ng the bi l ithic pr i nthoads, th e pos i tion of tho pow e r/gnd bars coupl e d w i th th e physical 
footprint of th e pr i nthoads m e an that wo must us e a spocif i c pa i r i ng of printhoads together for 
print i ng on tho samo side of an A 4 (or wid e r) page, e.g. w e must a l ways use a Typ e 0 pr i nth e ad 
10 with a Typ e 1 printhoad etc. 

Whi l e a given pr i nting system can us e any one of tho oight poss i bl e arrang e m e nts of pr i nthoads, 
this document only pres e nts two of th e m. Arrangement 1 and Arrangomont 2, for purposes of 
ill ustrat i on. These two arrang e ments aro d i scuss e d in subsequ e nt s e ctions of th i s documont. 
15 However, tho other 6 poss i bi l it ie s also n e ed to bo cons i d e r e d. 

Tho ma i n d i fforonco between tho two printh e ad arrang e m e nts d i scussed in th i s docum e nt i s th e 
dir e ct i on of tho paper f l ow. Because of this, th e dot data has to bo loaded differently i n 
Arrangomont 1 compared to Arrangement 2, i n ord e r to render tho pag e correctly. 

20 

Sri Example 1 : Pr i nthead Arrangement 1 

Figur e 299 shows an Arrangomont 1 print i ng setup, where tho bil i th i c pr i nthoads are arranged as 
fol l ows: 

Tho T>^c 0 printhoad io on the left with rcepQct to the 

25 direction of the paper flow, 

The T]y^Q 1 printhoad io on the right . 
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Tabl e 219 l ists th e ord e r in which tho dot data noods to bo l oadod i nto tho above printhoad 
system, to onsuro co l or 0 dot 0 appoars on tho loft s i do of tho pr i nted pago. 

Tab le 219. Ord e r i n which th e e v e n and odd dots arc l oadod for printhoad 

Arrongomont 1 

5 



Dot Sense 


Type 0 printhead 






when on tho loft 


Type 1 printhoad 




when on tho right 




Loaded second in 


Loadod — fifst — m 






dosconding order. 


descending ordor. 


1— V x^n 


Loaded — fifst — m 


Loaded second in 






ascending order. 


ascending ordor. 



F i gur e 300 shows how the dot datajs demu l tip le x e d within tho printhoads. 

Figure 301 and F i gur e 302 show tho way in which tho dot data noods to b e l oadod into th e pr i nt 
10 h e ads in Arrangement 1 , to e nsur e that co l or 0 dot 0 appoars on tho l oft s i d e of tho pr i nted pago. 
Note that no data i s transf e rr e d to the printhoads on tho first and last edges of SrC l k. 

^t2 — Example: 2: Printhead AnRANCEMENT 2 

F i gur e 303 shows an Arrangement 2 printing setup, wh e r e th e bilithic printh e ads are arranged as 
15 follows: 

The Type 1 printhoad io on the left with rcopQct to the 

direction of tho papor flow. 
The Type 0 printhoad ia on the right. 

Tabl e 220 l i sts th e order i n wh i ch th e dot data noods to be loaded into tho abov e pr i nth e ad 
20 system, to e nsur e color 0 dot 0 app e ars on th e le ft s i do of tho pr i nted pago. 

Tat) l e 220. Ordor in which tho oven and odd dots ar e l oad e d for printhoad 
Arrang e ment 2 



Dot Sense 


Type 0 printhoad 






when on tho right 


Typo 1 printhoad 
when on tho loft 








Loaded first in 


Loaded second in 






descending ordor. 


dosconding ordor. 


Fycn 


Loaded second in 


Loaded first in 






ascending order. 


ascending order. 



25 Figure 30^ shows how th e dot data is domuitiplexod w i th i n tho printhoads. 

Figure 305 and Figur e 306 show tho way i n which tho dot data ne e ds to be loaded into th e 
pr i nthoads in Arrangement 2, to onsuro that co l or 0 dot 0 appoars on tho l e ft s i d e of th e pr i nted 
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Not e that no data Is transf e rr e d to th e printh e ads on th e first and l aot edgos of SrClk. 



A Conclus i ons 

5 Compar i ng the s i gnal l ing d i agrams for Arrangomont 1 with thos e shown for Arrang e m e nt 2, it can 
be seen that th e co l or/dot s e qu e nc e output for a pr i nthoad typo in Arrangement 1 i s the r e v e rs e of 
th e s e quenc e for sam e pr i nth e ad in Arrangomont 2 in terms of tho order i n which th e co l or plan e 
data is output, as woi l as wh e th e r e ven or odd data is output first. However, the ordor within a 
color p l ane r e mains th e sam e , i . e . odd dosconding, ev e n asc e nding. 

10 

From F i gure 307 and Tab l e 221 , it can bo s ee n that the plane wh i ch has to b e load e d first ( i . e . 
ovon or odd) doponds on tho arrangomont. Also, tho ordor in which tho dots havo to bo loaded 
( e .g. ev e n ascend i ng or descending e tc.) i s dependent on th e arrangomont. 

15 As we l l as having a m e chan i sm to cope with tho shap e of the join b e tween tho printh e ads, as 

d i scuss e d i n S e ct i on 2.1 , if tho dev i c e contro l l i ng tho printheads can re ord e r the b i ts according to 
tho fo ll ow i ng criteria, then it should be able to op e rat e in all tho poss i ble pr i nth e ad arrang e m e nts: 

Bo able to output the oven or odd plane first. 

Be able to output even and odd planco in either aocending or 

20 deoccnding order ^ — independent ly . 

Be able to reverae the acquence in which the color planea of 

a oingle dot arc output to the printhead. 
Tab le 221. Ord e r i n which ovon and odd dots and p i anos aro loaded into tho various 
printhoad arrangements 

25 



Printhead 
Arrangement 


Left side of printed page 


Right side of printed pago 


Arrangomont 1 


Even ascending loaded first 


Odd dosconding loaded first 


Odd descending loaded 
seeen^ 


Even ascending loaded 
second 


Arrangement 2 


Odd descending loaded first 
Even ascending loaded 


Even ascending loaded first 


second 


Odd descending loaded 
second 


Arrangomont 3 


Odd ascending loaded first 






Even descending loaded 
second 


Evon descending loaded 
fifst 

Odd ascending loaded 




second 


Arrangomont A 








Evon descending loaded 

fifSt 


Odd ascending loaded first 
Even descending loaded 
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Odd ascending loaded 
second 


second 


Arrangement 5 


Odd ascending loaded first 
Even descending loaded 
second 


Even descending loaded 
Fifst 




Odd ascending loaded 
second 


Arrangement 6 


Even descending loaded 

f it OL 


Even descending loaded 
second 


Uda ascending loaded 
second 




Arrangement 7 


Even ascending loaded first 






Odd descending loaded 


Odd descending loaded first 


second 


Even ascending loaded 
second 


Arrangement 8 


Odd descending loaded first 
Even ascending loaded 


Even ascending loaded first 


second 


Odd descending loaded 
second 



CMOS SUPPORT ON BILITHIC PRSNTHEAD 

A Basic Requ i r e m e nts 

5 To cr e at e a two part printhoad, of A 4 /Lettor portrait w i dth to pr i nt a pago in 2 seconds. Match i ng 
L e ft/Right chips can bo of different l e ngths to mak e up this length facil i tat i ng incr e ased waf e r 
usag e , th e le ft and right chips ar e to be imag e d on an 8 inch waf e r by "St i tch i ng" retic le images. 
The memjet nozzles hav e a horizontal pitch of 32 um, two rows of nozz le s ar e used for a s i ng l e 
colour. Thoso rows hav e a horizonta l offset of 16 urn. This g i ves an effectiv e dot p i tch of 16 urn, or 
10 62.5 dots p e r mm, or 1587.5 dots p e r i nch, c l ose enough to market as 1600 dp i . 

Th e first nozz l e of tho right chip should have a 32 um hor i zonta l offset from the f i nal nozzle of the 
l e ft ch i p for th e same color row. Th e re i s no i nk nozz l e overlap (of the same colour) scheme 
e mployed. 

15 4t^ Power Supply 

VddA/pos and Ground supply is made through 30 um w i de pods along the l e ngth of th o ch i p us i ng 
conduct i ve adh e s i ve to bus bar beside tho ch i ps. Vdd/Vpos is 3.3 Volts. (12V was consid e red for 
Vpos but rout i ng of CMOS Vdd at 3.3V would be a problem over the l e ngth of the chips, but th i s 
w i l l be rev i sited). 

20 

4t2 MEMS CELLS 

Th e pr e f e rr e d memjet d e vice r e qu i res 180nJ of e n e rgy to firo, with a pu l so of cunrent for 1 usoc. 
Assum i ng 95% efficioncy, this requires a 55 ohm actuator draw i ng 57.4 mA dur i ng th i s pu l s e . 
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4t2t1 I SSUE!!! 

For 1 pagoG p e r 2 oooond, or ^300 mm * 62.5 (dots/mm) / 2 soo ^"10 kHz or 100 useo por l ino. 
With 1 us e e fire pulso oyolo, ovory 100th nozzio noods to fire at th e same t i me W e have 13824 
nozz le s across tho pago, so wo f i r e 1 38 nozz le s at a t i me. 

5 

1.2.2 64um unit cell h e ight 

This c e ll would have 4 line spac i ng b e tw ee n the odd and ovon dots, and 8 lino spacing botwoon 
adjacent colours. 

10 4t2t3 80 um un i t c el l h e ight 

Th i s col l would hovo 5 li ne spac i ng b e tw e en tho odd and e von dots, and 10 lin e spacing botwoon 
adjacont colours. 
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4t3 Vers i ons 

6 Colour 1600 dp i with 6 4 um un i t ce l l 

Loft and R i ght Ch i p. 



4t3t2 6 Colour 1600 dp i with 80 um un i t c ell 

L e ft and R i ght Chip. 

A Co l our 800 dpi with 80 um un i t co l l 

For camera app li cation. Singl e nozzle row por co l our. 

4^4 Air Supply 

Air must be suppl i ed to tho ME I VIS reg i on through ho l es in tho ch i p. 
2 H e ad S i z e s 

Tho comb i n e d h e ads havo 13821 nozzles por co l our totall i ng 221.18 4 mm of pr i nt ar e a. Enough to 
prov i d e full breadth for A 4 (210 mm) and L e tter (8.5 inch or 215. 9 mm). 

Tab l e 1. Head Combinations 



Left Head 


Right Head 


Stitch Parts 


Nozzles per Colour 


Stitch Parts 










Nozzles per Colour 


8 


W€0 


2 


2664 






7 


07 A A 


3 


4080 


6 


8328 


4 




5 


gtvio 


5 




4 




6 


8328 


3 


^QQQ 


7 


kj 1 ■ f ' ? 


2 


2664 


8 


U4m 



Nozz le s p e r Co l our is ca l culated as (("St i tch Parts" 1)*1 18+104)*12. Nozz l es per row i s half th i s 
value. Most l i ke l y the 8:2 head set w i l l not b e manufactur e d. Tho pref e rr e d wafer l ayout, manag e s 
to avo i d th i s s e t, without any l os e s. 

3 Interface 

Each pr i nt head has tho some I /O signa l s (but tho Loft and R i ght versions might have a d i fferent 
p i n out). 



Tab l e 2. I /O pine 
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Nam e 



Funct i on 



Common 



Spee4 
(MHz) 



Dala(0-4} 



Dot data for co l ours 0 — 5, us i ng D i ffer e nt i a l 



Ne 



320 



S i gna l l i ng (DataL tho complom e ntary s i gnal), 
oo l ours[0 - 2] on Data[0], co l our[3 - 5] on Data[1] 



DataL[0 - 11 



compl e m e ntary s i gna l of Data[0 1] 



SrClk 



Dot data sh i ft clock using Difforontial S i gnall i ng 



(SrClkL th e comp l omontary signal) 



SrC l kL 



complomontary s i gna l of SrClk 



ReadL 



FrClk, Pr, LSyncL output mode if signal mode 
bit i s sot 



Ffdk 



Fire pattern shift c l ock 



nozz le t e st r e sult (mode " Ob001 ). LsyncL " 0 
CMOS t e st i ng (mode - Ob1 11), LsyncL - 1 



Pr 



Pulso Profi l o for a ll colours 



Temp e rature Output (modo ~ Ob010), LsyncL - |¥e6 
Q 

CMOS t e sting (mod e - Ob11 1 ), LsyncL - 1 



i 0 ■ Captur e dot data for next pr i nt l ino 



Yes 0,V 



O CMOS testing (modo - Ob1 11), LsyncL - 1 ¥es 



P i ns mark e d as common can b e control l ed by th e sam e s i gna l from tho controller (SOPEC) 



^ — Dot fir i ng 

5 To f i ro a nozz l e, thr ee signals ar e n e eded. A dot data, a fir e signal, and a prof i l e signa l . When a l l 
s i gnals are high, tho nozzle w ill f i r e . 

The dot data i s prov i de to the chip through a dot shift r e g i st e r with i nput Pata[x], and c l ock e d into 
th e chip with SrC l k. Th e dot data is multiplex on to th e Data s i gnals, as Dot[0 - 2] on Data[0], and 
10 Dot[3 - 51 on Data[21. Aft e r th e dots ar e sh i ft e d i nto the dot shift r e gister, this data i s transfer i nto 
th e dot l atch, with a l ow pu l so i n LsyncL. Tho value i n tho dot latch forms th e dot data used to fir e 
the nozzle. Tho uso of tho dot latch allows tho noxt l i no of data to bo loaded into the dot sh i ft 
r e gister, at the same tim e th e dot pattern in the dot latch is b ee n f i r e d. 



Functiona ll y oould be oommon. but for t i ming/o l ootrioa l roacons ohou l d run po i nt to po i nt- 
Can bo shared I f ono pido has modo~ObOOO 

1 MHz oycl e . but tho roso l ution of tho mark/spaco ratio may requir e 60 ns. 



10 kHz oyo l o, with m i nimum low pulso of 10 ns (no max i mum). 
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Across the top of a co l umn of nozz l es, contain i ng 12 nozz l oo, 2 of oaoh co l our (odd ond ovon 
dots, 4 or 5 li n e s apart), i s two fire reg i ster b i ts and a soloct register b i t. Tho firo rog i ctoro forms 
tho f i re sh i ft regist e r that runs l ength of tho chip and back aga i n w i th one r e g i st e r b i t in oach 
5 dir e ct i on flow. 

The seloct regist e r forms th e S el ect Shift Regist e r that runs tho length of th e ch i p. Tho soloct 
rogistor, soloots which of tho two firo rbglGtors is used to e nables th i s co l umn. A '0' i n th i s r e gist e r 
sol e ots th e forward dir e ct i on fir e reg i ster, and a *1' s e l e cts th e r e v e rse d i rection fire register. Th i s 
output of this block provides the fire s i gnal for tho column. 

10 

Tho third signal noodod, tho profi l e, is provide for al l colours w i th input Pr across the who l e colour 
row at tho sam e tim e (with a s l ight propagat i on delay p e r co l umn). 

^ — Dot Sh i ft Reg i ster Or i entat i on 
15 Th e l eft sid e pr i nt head (ch i p) and th e right s i de print head that form complete b i iith i c print head, 
have d i fferent nozz i o arrangem e nt with resp e ct to the dot ord e r mapping of th e dot sh i ft r e g i ster to 
th e dot position on th e page. 

With this mapping, tho fol l ow i ng data streams w i l l nood to provided. 



Left Head 


Right Head 


Size 


ft-m 


dot order 


m 
















[13822,13820,13818,...,1081,4082,408Q,] line y+5 
[4081,4083,4085,...,13819,13821, 13823] lino y 




[U3,5,...,1075,1077,1079,] line y 




[1078,1076,4071,..„1,2,0] lino y+5 














[13822,13820,13818,...,5500,5198,5496,] line y+5 




[1,3,5,...,5'191,5193,5195,] lino y 


[5197,5199,5501,...,13819,13821, 13823] line y 


[5194,5492,5190,...,1,2,0] line y+5 














[13822,13820,13818,...,6916,69H,6912,] lino y^5 
[6913,6915,6917,...43819,13821, 13823] lino y 




[1,3,5,...,6907,6909,6911,] lino y 




[6910,6908,6906,...,1,2,0] Uno y+5 






[13822,13820,13818,...,8332,8330,8328J lino yi^S 












[1,3,5,...,8323,8325,8327,] lino y 


[8329,8331,8333,...,13819a3821, 13823] lino y 


[8326,8321,8322,...,1,2,0] lino y+5 






[13822,13820,13818,...,9748,9716,9711 J lino y^5 


9^M4 






[9715,97117,9719,...,13819,13821,13823] lino y 




[1,3,5,...,9739,971 1,9713,] linoy 




9712,9740,9738,...,1,2,0] lino >4^5 



20 The data noods to bo mu l tiplexed onto the data pins, such that Data[0] has {(CO, C1, C2), (CO, 
C1, C2)....) i n tho above order, and Data[1] has [(C3, C4, C5), (C3, CA, C5)....]. 

Figure 31 1 shows the t i ming of data transf e r during normal print i ng mode. Note SrC l k has a 
d e fau l t state of h i gh and data i s transferred on both edges of SrClk. I f there aro L nozzles per 
25 colour, SrClk would have L * 2 edges, whor e the f i rst and l ast edg e s do not transfer data. 

Data requ i res a setup and hold about tho both e dg e s of SrC l k. Data transf e rs starts on tho f i rst 
ris i ng after LSyncL r i sing. SrC l k defau l t state is h i gh and noods to return to high after tho l oot 
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data of th e li no. This means tho f i rst e dg e of SrClk (fa il ing) aftor LSynoL rising, and the last edg e 
of SrC l k as i t returns to th e d e fault stat e , no data is transf e rred to th e print h e ad. LSyncL r i s i ng 
requ i r e s s e tup to th e f i rst fa lli ng SrC l k, and must stay h i gh dur i ng the ent i r e li no data transfer unt i l 
after last r i s i ng SrClk. 

5 

3r3 — F i re S hi ft Reg i ster 

Th e fir e shift r e gist e r controls the rat e of nozzle firo. If tho rogistor i s fu l l of '1's th e n th e you could 
print th e e ntire print h e ad In a single FrC l k cyclo. although el e ctrical curr e nt lim i tations w ill provont 
this happ e n i ng i n any roasonab l o i mp l omontation. 

10 

I d e a l ly, a '1' is sh i ft e d i n to th e fir e shift r e gist e r, i n ev e ry pos i tion, and a '0' i n al l oth e r position. 
I n this mann e r, aft e r n cyc le s of FrClk, th e e ntir e pr i nt h e ad w il l b e pr i nt e d. 

Tho firo sh i ft rog i stor and so l oot shift rogiotoro a ll ow tho gonorat i on of a horizontal pr i nt l ine that on 
15 clos e insp e ction wou l d not hav e a discontinuity of a "saw tooth" patt e rn. Figur e 312 a) & b) but a 
"sharks tooth" patt e rn of c). 

This i s don e by f i ring 2 nozzl e s in e very 2n group of nozzio at th e sam e tim e starting from the 
outor 2 nozzlos work i ng towards th e centr e two (or th e starting from the c e ntr e , and working 
20 towards th e out e r two) at th e f i r e rate contro l lod by FrC l k. 

To ach i ovo this f i ro pattern the fire shift register and sel e ct shift reg i ster nood to b e sot up as show 
i n Figur e 313 . 

25 The patt e rn has shifted a 'V i nto tho firo shift rog i stor ovory Reposit i ons (whoro n is usua ll y Is a 
min i mum of about 100) and n '1 ' s , fo ll ow e d n 'O's in th e s ele ct sh i ft r e g i st e r. At a start of a print 
cycl e , th e s e patt e rns n ee d to be allgnod as above, with tho "1000.. of a forward half of firo shift 
reg i st e r, matching an n grouping of 'V or 'O's In th e se le ct shift r e g i st e r As w el l, with th e "1000..." 
of a rev e rse ha l f of th e f i r e sh i ft r e g i st e r, match i ng an n grouping of '1 ' or 'O's i n tho soloct sh i ft 

30 r e g i ster. And to cont i nue this pr i nt pattern across the butt onds of tho ch i ps, tho se le ct shift 
r e gist e r in e ach shou l d e nd with a compl e t e b l ock of n '1's (or 'O's). 

Since tho two ch i ps can be of d i ff e r e nt le ngths, init i al i sat i on of thes e patterns i s an i ssu e . This I s 
so l ved by bu i lding in i tia l isat i on c i rcuitry I nto chips. Th i s c i rcu i t I s controll e d by two r e gist e rs, 
35 nlon(1^) and count(14) and b(1). These reg i sters arc loadod sorially through Pata[01, wh il e 
LSyncL I s low, and RoadL is h i gh w i th FrC l k. 

Th e scan order from input is b, n[13 0],c[0 13],color[5 - 0], mod e [2 - 0] th e r e for e b Is sh i ft e d In last. 
The system co l or and mod e r e g i st e rs are unrelated to tho Fir e Sh i ft Reg i st e r, but ar e l oad e d at 
40 the sam e timo as th i s b l ock. Th e r e function i s d e scrib e d l at e r. 
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Tab l e 4 , H e ad Combinations I nitialisation for n-100 





U 


n-4 


oountA.= 






rem- 




(La/2) mod n 


oountB.= 
-4 


■4 




^QQQ 


9744 


99 




0 


9 


49 


3 


5406 


832S 


99 


©3 


0 


0 


4S 


79 


6942 


8942 


99 


§§ 


9 


9 


§6 





Tho fol l ow i ng tab l o shows th e va l u e s to programm e th e bi lith i o h e ad pa i rs using a fir e pattern 
5 l e ngth of 100. Th e ca l culat i on assum e s h e ad 'A' is th e l ong e st h e ad of th e pa i r and onc e th e 
r e g i st e rs ar e i n i tia li s e d w i th LA FrC l k cycles (RoadL-'O', LSyncL-'1'). rom wou l d bo tho correct 
va l uo for counte if ch i p B was on l y c l ockod (FrClk) 1-^ t i mes. But this chip will be over clock e d La - 
L b cycles. The va l ues of bA and b s^ aro oithor tho same or inverse of oach other. Tho actua l ly valu e 
doos not matter. Thoy nood to bo difforont from each other if tho select sh i ft registers wou l d end 
10 up w i th drfforont vqIuos at tho butt onds. I f {LfiJ2n) is even (and oountA i s non zero), then tho final 
run in 'A's s e l e ct shift r e gist e r w i ll b e ! bA. I f (La - Lb/2) mod n i s e v e n (and countB i s non zero) then 
th e final run in 'B's s ele ct sh i ft reg i st e r w i l l be Ib^ ? 
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3^4 — System Reg is ter s 

As d e scribe abov e , th e Firo Shift R e gister g e nerat i on b l ock, a l so contains oomo systom regist e rs. 

Table 5. System R e g i st e rs 



Name 



Function 



Color 



§ 



Each bit i s an e nab le for th e corrosponding co l our. 
I f co l or[X]-0, th e n Prx i s 0 and SrClkx -fe-Or 



if color[X]-1 , then Prx-follows tho Pr signal and 
SrC l kit i s d e s e r i al i s e d SrC l k. 



Mod e [0] - 1 , then FrC l k p i n is us e d as an output, 



internal l y th e FrC l k s i gnal is sot to 0 
Modo[1] ~ 1 , thon Pr pin i s us e d as an output, 



ntorna ll y th e Pr s i gnal i s s e t to 0 

Mod e [2] - 1 , th e n LsyncL p i n i s usod as an output, 



int e rnally tho LsynoL s i gna l i s s e t to 1 



10 



^ — Profile PAiTErw 

A profil e pattern is repeat e d at FrC l k rate. It is oxpoct e d to bo a sing l e pu l s e about 1us long. But it 
cou l d bo a more oomplicatod s e ries of pulse. Tho actual patt e rn depends on tho i nk typo. 
Th e follow i ng f i gure show the oxtornai timing to pr i nt a l in e of data. I n th i s e xampl e th e lino is 
printed i n 8 cycles of FrCik. 



St© — I nterface Modes 

Th e pr i nt h e ad has oight diff e rent mod e s contro l led by signals RoadL and LSyncL and systom 
modo register. As soon in Figure 318 — w i th both LSyncL and RoadL h i gh, tho ch i p i n normal 
15 pr i nt i ng modo. Some of those mod e s can operate at the same time, but may interfere with tho 
resu l t of the other modes. 

Tabl e 6. Pr i nt Head Modes 



ReadL 



LSyncL 



Funct i on 



R e g i ste r 



I nterna l Mapp i ng 



Normal Pr i nt Mod e 



000 (XXX) 



SrClk-SrC l k/3 



fro l k-FrC l k 



Se l Clk-0 



FsC l k-FrC l k 



Scan-0 



Cor e Scan-0 



0 



Dot Load Modo 



000 (XXX) 



Dot latches ore open, loadod with Dot sh i ft 
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r e gist e rs, latch onco LSyncL returns to 1 
(this happ e ns regardloss of RoadL) 
Enables Dot Sh i ft r e g i st e r to capturo firo 
result. 



F i re Load Modo 



000 (XXX) 



SrClk"X 



Data[0] wil l shift through mode, color, nion, 
count and b with FrClk 



frc l k-X 



So l Clk-X 



FsC l k-FrC l k 



Scan-1 



Cor e Scan-X 



0 



Reset Nozz l e Tost 



QQ-j 



SrC l k-SrCik 



R e sets the stat e of nozz le t e st circu i t 



FrC l k-FrClk 



So l C i k-FrClk 



FsC l k-FrC l k 



Scan-0 



CoroScan-1 



Q 



CMOS testing modo 



Tho contonto of the dot shift regist e rs ore 
seria l shifted out on LsyncL (co l ourO 1 ), 
FrC l k (colour2 3), Pr (co l our^ 5) with SrC l k 



F i ro Init i al i s e modo 
• — Tho contents of tho firo shift register and 
s e l e ct shift register i s generated with FrC l k 



000 (XXO) 



Q 



0 



T e mp e rature Output 
• — The series of Sigma D e lta output are 
c l ock e d out on Pr with FrC i k. Th e sum of 
thoGO b i ts roprosont tho temp e rature of tho 



040 



SrClk-X 



frcik-0 



SelClk-0 



FsC l k-0 



Scan-0 



CoroScan-X 



Q 0 



Nozz l e Tost Output 



The result of a nozz l e tost i o output on 

PfGlkr 



St^t^I Pr i nt i ng 

Figur e 31 8 — shows show t i ming for normal print i ng. During th i s action, w e drop out of Norma l 
Pr i nt Modo, to Dot Load Modo between li ne transfers. For printing to p e rform correctly, a l l other 
s i gna l s shou l d bo otablo. 



StStS In i tia li s i ng for Pr i nting 



PEA23US 



568 



To init i alis e for printing th e f i r e shift r e gisters and soloct shift r e gist e rs nood to bo ootup i nto a 
stato as shown in F i gur e 318 .To do th i s th e ch i ps oro put into Firo Load Modo and tho valuos 
for nion, count and b aro sor i a ll y shiftod from Data[0] ciockod by FrC l k. As tho two chip havo 
separat e Data l ine, and common FrC l k, this happens at th e som e time. Onoo this is dono, mode is 
5 changed to F i ro i n i tfa ii so Mode, and further La FrC l k cyc le s are provided to both ch i ps. During al l 
thos e op e ration Pr shou l d be l ow, to prev e nt un i nt e ntional fir i ng for nozzles. 

^St^ Nozzl e T e sting 

Nozz l e test i ng is done by fir i ng a s i ng l e nozzl e at a t i me and monitor i ng tho FrC l k p i n i n tho 
10 Nozzl e T e st Output modo. 

Each nozz le has a test switch which clos e s wh e n th e nozz le is fir e d w i th an e n e rgy l ovo l greater 
than r e qu i r e d for norma l i nk e jection. A l l 12 switch e s in a nozz le column aro conn e ct in para lle l to 
th e fol l owing c i rcuit. 

15 This c i rcu i t is in i tialis e d wh e n ever LSyncL i s h i gh and RoadL is l ow (Rosot Nozz l e Tost modo). 
This forcos a ll "switch nodes" to low, and th e fe e dback through l ow e r NOR gate wi ll latches this 
value. With LSyncL low and RoadL still low (Nozzi o Test Output modo) tho Tostout of the f i rst 
nozzio co l umn i s output on FrC l k. If any switch is c l os e d, th e sw i tch node of this column will bo 
pu l l e d up, and wi ll r i pple through to the output as trans i tion from high to low. 

20 

Nozz i o test i ng requir e s a sotup phas e in order to f i r e only on e nozz i o. There aro many ways to 
achi e v e this. S i mp l est might b e to load a s i ngle colour with 101010 through tho even nozzles, and 
010101... for the odd nozzl e s (O's for all other colours), and s e t up a f i r e patt e rn with n - La ^ 
W i th th i s f i r e patt e rn only one nozzl e will fir e in oach Pr puls e . After firing i n Nozz i o Tost Output 
25 modo, a oing i o FrC l k wi ll advance to next nozzl e , then Roset and Tost. After La/2 cycles of th i s 
t e sting, a sing l e SrC l k wi l l advance the dot sh i ft r e gist e rs to sotup the untested nozzles of this 
co l our, and anoth e r La/2 cycles of FrC l k, Rosot and T e st wi ll finished test i ng this colour. Th e n 
repeat tost procedure for oth e r co l ours. 

30 ^StA Tomporaturo Output 

Th i s modo is not woi l defined yet. In this mode, Pr w il l output a ser i es of on e s and zeros ciockod 
by FrClk. Aft e r a (current l y unknown) number of FrClk cyc le s tho sum of this series w il l roprosont 
tho temperatur e of the ch i p. C l ocking frequency in this modo it expected to be i n th e rang e 10kHz 
1MHz. 

35 

Th e Frequency of FrClk and tho number of cyc l es need to b e programmab l e. S i nc e th i s modo 
cycles FrClk, tho result of firo shift register and s e l e ct shift r e gister would bo changed, but in this 
mod e FrClk is d i sab l ed to those circu i t. So printing can resum e w i thout rein i tialis i ng. 

40 CMOS Tooting 
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CMOS t e sting i s a mod e m e ant for chip t e sting before MEMS as addod to tho ch i p. This mod e 
a l lows th e dot sh i ft r e gister to be shiftod out on th e LsyncL,FrC l k and Pr pins. Much lik e th e 
nozzio tost mode, th e nozzl e s ar e fir e d whil e LSyncL is l ow, but dur i ng tho fir i ng SrC l k w il l be 
pu l s e d, l oading th e dot shift r e g i st e r with tho signa l that would firo tho nozzl e . Onco captur e d, th e 
5 r e su l t can b e shift e d out. 

Th e Dot Load Modo above violates norma l pr i nting proc e dure by fir i ng tho nozzlos (Pr) and 
modify tho dot sh i ft register (SrClk). 

10 A RETICLE LAYOUT 

To moke long chips w e n ee d to stitch the CMOS (and MEMS) tog e th e r by ov e rlapp i ng tho reticle 
st e pp i ng field. Tho ret i c le w i l l conta i n two areas: 

The top edge of Area 2, PAD END contains th e pads that stitch on bottom edg e of Aroa 1, 
15 CORE. Ar e a 1 contains the cor e array of nozzle logic. Th e top e dg e of Area 1 w ill stitch to tho 
bottom edge of itself. Finally th e bottom edge of Aroa 2, BUTT END w i l l stitch to th e top e dge of 
Ar e a 1. Th e BUTT END to us e d to comp l ete a feedback wir i ng and seal tho ch i p. 

Th e abov e region will th e n b e e xpos e d across a waf e r bottom to top. Aroa 2, Aroa 1. Aroa 1 

20 Aroa 2. On l y tho PAD END of Aroa 2 ne e ds to fit on the wafer. The final exposure of Aroa 2 only 
r e quires the BUTT END on th e waf e r. 

4A TSMC U Frame requirements. 

TSMC will bo bu il ding us fram e s 10 mm x 0.23 mm wh i ch wi ll b e p l ac e d ei th e r s i de of both Aroa 1 
25 and Area 2. 

TSMC roquiros 6 mm area for b l ading betw e en th e two e xposur e ar e a. Th i s translat e s to 3 mm on 
tho retic l e, as some reticu l es oro 2x size, wh i le most ar e 6x, tho worst case must b e us e d. 

30 SECURITY OVERVIEW 

A Introduction 

A number of hardware, software and protocol solutions to security issues have been developed. 
These range from authorization and encryption protocols for enabling secure communication 
35 between hardware and software modules, to physical and electrical systems that protect the 
integrity of integrated circuits and other hardware. 

It should be understood that in many cases, principles described with reference to hardware such 
as integrated circuits (ie, chips) can be implemented wholly or partly in software running on, for 
40 example, a computer. Mixed systems in which software and hardware (and combinations) 
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embody various entities, modules and units can also be constructed using may of these 
principles, particularly in relation to authorization and authentication protocols. The particular 
extent to which the principles described below can be translated to or from hardware or software 
will be apparent to one skilled in the art, and so will not always explicitly be explained. 

5 

It should also be understood that many of the techniques disclosed below have application to 
many fields other than printing. Some specific examples are described towards the end of this 
description. 

10 A "QA Chip" is a quality assurance chip can allows certain security functions and protocols to be 
implemented. Th e pr e ferr e d QA Ch i p i s descr i bed in somo d e tail lator i n this sp e cification. 

4t€ — QA Chip Terminology 

The Authentication Protocols documents [5] and [6] refer to QA Chips by their function in 

1 5 particular protocols: 

For authenticated reads in [5] , ChipR is the QA Chip being 
read from, and ChipT is the QA Chip that identifies whether 
the data read from ChipR can be trusted. ChipR and ChipT are 
referred to as Untrusted QA Device and Trusted QA Device 

20 respectively in [6] . 

• For replacement of keys in [5] , ChipP is the QA Chip being 

programmed with the new key, and ChipF is the factory QA Chip 
that generates the message to program the new key. ChipF is 
referred to as the Key Programmer QA Device in [6] . 

25 • For upgrades of data in memory vectors in [5] , ChipU is the 
QA Chip being upgraded, and ChipS is the QA Chip that signs 
the upgrade value. Chips is referred to as the Value Upgrader 
QA Device and Parameter Upgrader QA Device in [6] . 
Any given physical QA Chip will contain functionality that allows it to operate as an entity in some 

30 number of these protocols. 

Therefore, wherever the terms ChipR, ChipT, ChipP, ChipF, ChipU and ChipS are used in this 
document, they are referring to logical entities involved in an authentication protocol as defined in 
[5] and [6]. 

35 

Physical QA Chips are referred to by their location. For example, each ink cartridge may contain a 
QA Chip referred to as an INK_QA. with all INK_QA chips being on the same physical bus. In the 
same way, the QA Chip inside the printer is referred to as PRINTER_QA, and will be on a 
separate bus to the INK_QA chips. 
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2 Requirem e nts 

Wh e n appl ie d to a printing onvironmont, tho functiona l soourity r e quir e ments for tho proforrod 
5 embod i ment ore: 

Code of QA chip ownor or licGnoco oo oxioting aafcly with 

codo of authorigcd OEMo 

Chip owncr/licQnaGG operating paramctoro authontication 

ParamctGro authentication for authorized OEMo 

10 In3c uoage authontication 

Each of thes e is outlined in subs e qu e nt s e ct i ons. 

Tho authontication r e quir e m e nts imply that: 

OEMsvCind end uocra must not bo able to replace or tamper with 

15 QA chip manuf QCturGr/owncr ^ g program code or data 

OEMs and end ueere muat not be able to perform unauthorized 

activitieo — for example by calling chip manufacturer/owner^ o 

code 

End uaero must not be able to replace or tamper with OEM 

20 program code or data 

End uaero muot not be able to call unauthoriaed functiono 

within OEM program code 

Manufacturer /ovmer^ o development program code muot not bo 

capable of running on all SoPECo, 

25 OEMo muat bo able to toot producta at their highcot 

upgradable otatua, — yet not be able to ohip them outoidc the 
termo of their liGcnoe 

OEMo and end uoera muot not be able to directly access the 

print engine pipeline — (PEP) — hardware , — the LSS Maotcr (for QA 
30 Chip accooo) — or any other peripheral bloclc with the exception 

of operating oyotem permitted GPIO pino and timero. 

274t1 QA Manufacturor/owner codo and OEM program code co exist i ng safely 

SoPEC I nclud e s a CPU that must run both manufactur e r/ownor program cod e and OEM program 
35 cod e . Th e e xecut i on mode l envisaged for SoPEC is on e where Manufacturor/own e r program 
cod e forms an op e rating system (O/S), prov i d i ng sorv i c o s such as control li ng th e print ongino 
p i p e l i no, i nterfaces to commun i cat i ons channe l s e tc» Tho OEM program codo must run in a form 
of us e r mod e , prot e ct e d from harming tho Manufactur e r/owner program cod e . Th e OEM program 
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cod e i s porm i tted to obtain s e rv i cos by ca lli ng functions i n the O/S, and tho O/S may also ca ll 
OEM cod e at sp e cific t i mos. For exampio, th e OEM program code may roquost that tho 0/S cal l 
an OEM interrupt sorvico routine wh e n a particu l ar GP I O pin i s act i vated. 

5 In add i tion, w e may wish to permit tho OEM code to d i r e ctly call functions in Manufacturor/ownor 
code with tho same perm i ssions as th e OEM code. For oxampio, tho Manufacturer/owner code 
may provide SHA1 as a s e rvice, and tho OEM could ca l l tho SHA1 funct i on, but e xecute that 
function w i th OEM perm i ssions and not S i lverbook perm i ssions. 

10 A bas i c roqu i romont then, for SoPEC, is a form of prot e ction manag e ment, whereby 

Manufacturer/own e r and OEM program code can ce exist without the OEM program code 
damaging operat i ons or servicos prov i ded by the Manufacturer/owner O/S. Since services r el y en 
SoPEC p e riph e rals (such as USB2 Host, LSS Master, T i mers etc) acc e ss to those periphera l s 
shou l d also be restricted to Manufacturor/ownor program cod e on l y. 

15 

2.1.2 Manufacturer/owner operating param e t e rs authent i cation 

A particu l ar OEM wil l b e l i c e nsed to run a Print Engine with a particu l ar set of operating 
param e t e rs (such as print sp ee d or qua l ity). Th e OEM and/or e nd user can upgrad e th e operating 
li c e ns e for a f ee and th e r e by obtain an upgrad e d s e t of operating param e t e rs. 

20 

Neither tho OEM nor end user should b e ab le to upgrad e the op e rat i ng parameters w i thout pay i ng 
tho appropriat e fee to upgrad e th e license. Sim il ar l y, n e ith e r tho OEM nor end user shou l d b e 
ab l e to bypass th e authent i cation mechan i sm v i a any program code on SoPEC. This implies that 
OEMs and end - us e rs must not be ab l e to tamp e r w i th or rep l ac e Manufactur e r/owner program 
25 code or data, nor be able to ca ll unauthor i zed funct i ons with i n Manufactur e r/owner program code. 

How e v e r, the OEM must be capabl e of assemb l y li ne testing th e Print Eng i n e at th e upgraded 
status before sell i ng th e Print Engin e to the end user. 
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2.1.3 OEM oporating paramotors authenticat i on 

Tho OEM may prov i de op e rat i ng paramet e rs to tho e nd uoor Ind e pend e nt of tho 
Manufacturor/owner operat i ng parameters. For oxampio, t l io OEM may want to ooH a franking 
maehioe^. 

5 

Tho ond user shou l d not b e ab le to upgrad e the op e rating param e t e rs without paying tho 
appropriate fe e to tho OEM. S i m il ar l y, th e e nd usor should not bo ab l o to bypass tho 
auth e nt i cation mechanism v i a any program cod e on SoPEC. This i mpl ie s that ond users must not 
b e ab le to tamper w i th or rop l aco OEM program code or data, as well as not be ablo to tampor 
10 w i th th e PEP blocks or serv i ce ro l atod por i phorols. 

2r2 Acceptable Comprom i scc 

If an ond user takos tho t i me and e norgy to hack tho pr i nt engine and thereby succeeds in 
upgrading tho sing l e pr i nt engine on l y, yet not b e ab l o to use the same keys e tc on another pr i nt 
15 e ng i ne, that i s an acc e ptab l e s e curity compromise. How e v e r I t doesn't moan w e have to mako it 
total l y simp i o or ohoap for tho ond - us e r to accomplish this. 

Softwar e on l y attacks aro tho most dang e rous, sinc e th e y can bo transmitt e d via th e intornot and 
havo no porc e ivod cost. Phys i cal modification attacks aro far l oss probl e matic, since most pr i nter 
20 users aro not l ik e ly to want tho i r print ongino to b e physica l ly mod i fied. This i s e v e n moro true i f 
the cost of the physica l modification i s li ke l y to exceed tho pr i ce of a l egitimate upgrade. 

2t3 — Implementation Con s tra i nts 

Any solution to tho requirements deta ile d in Sect i on 2.1 shou l d also moot certain pr e ferred 
25 i mpl e m e ntat i on constraints. Th e se aro: 

No f laoh motnory inoidc CoPEC 

SoPEC muot be aitnplo to verify 

ManufacturGr/ovmcr program code muat be updatoablo 

OEM program code muot be updatoaM re 

30 Muot bo bootable from activity on USD2 

Muot be bootable from an external ROM to allow otand alone 

printer operation 

No extra pine for aooigning IDo to olave SoFBCo 

Cannot truot the comma channel to the QA Chip in the printer 

35 (rRINTER_QA) 

Cannot truot the comma channel to the QA Chip in the ink 

cartridgeo ( INK_QA) 

fran l <ing mach i no prints stamps 
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Cannot trust the UCD commo charmQl 

Thoso constraints aro dotailod bolow. 

2^ No flash memory i nsido SoPEC 

5 Tho pref e rred embod i m e nt of SoPEC i s int e nd e d to b e i mplomontod in 0.13 m i cron or smaller. 
F l ash m e mory wi ll not be ava i lab le In any of th e targ e t processes be i ng considorod. 

^t^tS SoPEC must be simple to ver i fy 

Al l combinatoria l l ogic and embedded program code within SoPEC must bo v e r i f i od beforo 
10 manufacturo. Ev e ry incr e as e i n comp le x i ty in e i ther of thoso incroasos verification effort and 
incr e ases risk. 

Manufactur e r/owner program cod e must bo updatoab l o 

I t is n e ith e r poss i b le nor d e s i rabl e to wr i t e a s i ngle compl e t e op e rating syst e m that is: 

15 verified Gomplotcly — ( oqo £?GGt ion 2.3.1) 

Gorroct for all poaaiblc future uogo of SoPEC oyotoma 

finiohod in time for SoPEC manufacturo 

Th e r e for e th e complete Manufactur e r/owner program cod e must not pormanontiy reside on 
SoPEC. It must b e possibl e to update the Manufactur e r/owner program cod e as enhancem e nts to 
20 funct i ona l ity ar e mad e and bug f i xes are appl i ed. 

I n tho worst case, only now pr i nters wou l d r e c e iv e the n e w funct i onality or bug fixes. In tho best 
cas e , e x i sting SoPEC users can down l oad n e w embedded code to onablo functional i ty or bug 
fix e s. Id e ally, those sam e us e rs would be obta i ning thoso updates from tho OEM webs i te or 
25 e quival e nt and not require any int e raction w i th Manufacturer/owner. 

OEM program code must bo updatoablo 

G i v e n that e ach OEM w i ll be writ i ng sp e cific program code for print e rs that hav e not y e t b ee n 
conce i ved, i t is imposs i b l e for all OEM program code to b e e mb e dd e d i n SoPEC at th e AS I C 
30 manufactur e stage. 

Sinc e flash m e mory is not available (soo Section 2.3.1), OEMs cannot stor e their program cod e in 
on ch i p flash. Whi l e i t is thoorotical l y poss i bl e to stor e OEM program cod e i n ROM on SoPEC, 
this would e ntai l OEM - sp e cific AS I Cs which wou l d b e proh i b i t i ve l y expensive. Th e r e for e OEM 
35 program cod e cannot pormanently resid e on SoPEC. 

S i nc e OEM program code must bo down l oadable for SoPEC to execut e , it shou l d th e r e for e be 
poss i bl e to update the OEM program codo as e nhanc e m e nts to funct i ona l ity aro made and bug 
fixes are app l ied. 
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In th e worst caso, only now printoro would roco i vo th e n e w funct i ona li ty or bug fixoo. i n the best 
caso, ex i st i ng SoPEC usorp can download now om bedd e d code to onab l o functional i ty or bug 
fixoQ. Idea ll y, those samo usorc wou l d bo obta i ning those updates from tho OEM wobs i te or 
5 e quiva le nt, and not require any i ntoraotion w i th Manufactur e r/own e r. 

^tStS Must b e bootab le from activity on USB2 

SoPEC can b e plac e d i n sl ee p modo to sav e pow e r whon pr i nt i ng is not requir e d. RAM is not 
pr e s e rved i n sloop mode. Thoroforo any program code and data i n RAM w i ll be lost. However, 

10 SoPEC must bo capab l e of be i ng woken up by tho host when i t is t i me to print again. 

I n the caso of a sing l e SoPEC syst e m, tho host communlcatos with SoPEC v i a USB2. From 
SoPEC's point of v i ow, i t i s act i vity on tho USB2 d e vico port that signals th e t i m e to wak e up. 
In tho case of a mult i SoPEC syst e m, th e host typ i ca l ly communicates w i th tho Master SoPEC 
ch i p (as abov e ), and then tho Master relays m e ssag e s to other S l av e SoPECs by s e nd i ng data 

15 out USB2 host port(s) and into th e S l av e SoPEC's d e v i c e port. Th e n e t r e su l t i s that tho Slave 
SoPECs and tho Master SoPEC all boot as a r e su l t of act i v i ty on the USB2 dev i ce port. 
Ther e for e SoPEC must be capab l e of be i ng woken up by act i vity on tho USB2 device port. 

2.3.6 Must b e bootab l e from an ext e rnal ROM to a ll ow stand a l ono pr i nter operat i on 

20 SoPEC must also support tho caso whore tho print e r i s not conn e ct e d to a PC (or tho PC i s 

curr e ntly turn e d off), and a d i g i tal cam e ra or e quival e nt i s plugged i nto th e SoPEC - based pr i nt e r. 

In th i s caso, tho ent i re printing appl i cation n ee ds to bo present w i thin th e hardware of tho pr i nter. 

Since tho Manufacturer/owner program code and OEM program cod e wi ll vary dep e nding on th e 

appl i cation (see Section 2.3.3 and S e ct i on 2.3. 4 ), i t is not poss i bl e to store th e program i n 
25 SoPEC's ROM. 

Ther e for e SoPEC requ i res a means of booting from a non PC host. I t i s poss i b l e that th i s cou l d 
b e accomp l ish e d by tho OEM adding a USB2 host chip to th e pr i nt e r and simulating th e e ff e ct of a 
PC, and th e r e by download tho program cod e . This so l ut i on r e quir e s th e boot op e rat i on to b e 

30 based on USB2 activity (soo Sect i on 2.3.5). However this i s an unattract i ve so l ut i on since i t adds 
microprocessor compl e x i ty and componont cost when on l y a ROM -e qu i val e nt was d e sired. 
As a r e su l t SoPEC shou l d i d e ally b e ab l e to boot from an external ROM of some k i nd. Note that 
booting from an e xternal ROM moane firet booting from tho Int e rnal ROM, and th e n downloading 
and auth e nticating th e st a rtup Gootion of tho program from tho oxtornol ROM. Th i s is not tho same 

35 as s i mp l y running program code in situ within an e xternal ROM, s i nc e on e of th e s e curity 
requ i rements was that OEMs and end usors must not bo ab l e to rep l ace or tamper w i th 
Manufacturer/owner program cod e or data, i.e. we n e v e r want to b l indly run code from an ext e rna l 
ROMt 
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Ag on addit i ona l point, if SoPEC i s i n s l oop modo, SoPEC must bo oapablo of inst i gating tho boot 
proGOSS due to activity on a programmab l e GPIO. e.g. a wake up button. Th i s would bo i n addit i on 
to tho standard powor on booting. 

5 2.3.7 No extra pins to ass i gn IDs to s l ave SoPECs 

In a s i ngle SoPEC syst e m th e host only s e nds data to tho s i ngl e SoPEC. How e v e r i n a mult i 
SoPEC syst e m, each of th e s l av e s n ee ds to b e un i qu e ly i d e ntifiable i n ord e r to be ablo for tho 
host to send data to th e corr e ct slav e . 

10 Sinc e thoro i s no flash on board SoPEC (Soction 2.3.1 ) wo oro unable to stor e a slave I D in e ach 
SoPEC. Mor e ov e r, any ROM in e ach SoPEC wil l bo i dentica l . 

I t is poss i b l e to assign n p i ns to a ll ow 2" combinations of IDs for s l ave SoPECs. Howovor a dosign 
goal of SoPEC is to min i m i z e pins for cost r e asons, and th i s is particu l ar l y tru e of features on l y 
15 used in mu l ti SoPEC syst e ms. 

The d e s i gn constraint r e quir e m e nt i s th e r e fore to a l low s l aves to be IDed via a m e thod that do e s 
not roquiro any oxtra pins. This implies that whatovor boot m e chanism that sat i sfi e s th e s e curity 
requ i rements of Section 2.1 must also bo ablo to ass i gn IDs to s l ave SoPECs. 

20 

2^ Cannot trust tho oomms channe l to tho OA Ch i p i n tho printer (PR I NTER_QA) 

If the pr i nter operating parameters are stored in the non vo l at i l e m e mory of th e Print Engin e 's on - 
board PRINTER_QA ch i p, both Manufacturer/owner and OEM program code cannot r el y on the 
communicat i on channel being s e cur e . I t is possible for an attacker to eavesdrop on 
25 communicat i ons to th e PRINTER__QA ch i p, replace the PRINTER_QA chip and/or subvert tho 
commun i cat i ons chann e l. It i s also poss i bl e for this to b e tru e during manufacture of the c i rcuit 
board containing th e SoPEC and th e PR I NTER__QA chip. 

2.3.9 Cannot trust th e comms chann el to the OA Ch i p in tho ink cartridg e s ( I NK_QA) 

30 Tho amount of ink remain i ng for a givon ink cartridge is stored i n tho non vo l at i le m e mory of that 
Ink cartridge's I NK_QA ch i p. Both Manufactur e r/own e r and OEM program codo cannot rely on th e 
communicat i on channel to th e I NK_QA b ei ng s e cur e . I t Is possibl e for an attacker to e av e sdrop 
on communicat i ons to th e INK_QA ch i p, to r e p l ace th e INK_QA chip and/or to subv e rt the 
communicat i ons channel. It i s a l so poss i ble for this to bo true during manufacture of tho 

35 consumable containing th e INK_QA ch i p. 

2.3.10 Cannot trust tho i nter SoPEC comms channel (USB2) 

In a mu l ti SoPEC system, or in a single SoPEC system that has a non USB2 connect i on to th e 
host, a g i von SoPEC w il l r e c ei v e its data ovor a USB2 host port. It is qu i t e poss i bl e for an end 
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usor to insert a chip that e avosdrops on and/or subvorts tho communicat i ons ohannol (for 
e xampl e performs man i n th e midd le attacks). 



3 Propos e d Solution 

5 A propos e d solut i on to tho roquiromonts of Section 2, can bo s ummaris e d as: 

Bach SoPEC hao a iiniquc id 

CPU with U3or/3upcrvioor modG 

Memory Managcmont Unit 

The unique id io not cached 

10 -* Specific entry pointo in 0/0 

Boot procedure^ — including authentication of program code and 

operating paramo t era 
-• SoPEC phyaical identification 

15 3r1 Eac h SoPEC h as a un i que i d 

Each SoPEC needs to conta i ns a unique SoPECJd of min i mum siz o 6 4- bits. This SoPECJd is 
us e d to form a symmetr i c k e y uniqu e to e ach SoPEC: SoPECJd_koy, On SoPEC w e ma l ^ e us e 
of an additional 1 12 bit EC I D^ - macro that has be e n programm e d with a random number on a per chip 
basio. Thufl SoPECJd is tho 1 12 bit macro, and the SoPECJdJccy is a 160 bit r e suh obtained 

20 ^VLAHSoPECJd). 

Th e v e r i ficat i on of operating paramotors and I nk usage doponds on SoPEC_/cf b ei ng d i fficu l t to 
d e t e rm i n e . Difficu l t to dotormino m e ans that som e on e shou l d not bo ablo to dotormino tho id via 
softwar e , or by v i ew i ng th e communications botwoon ch i ps on th e board. I f th e SoPECJd is 
25 available through running a tost procoduro on spocific tost pins on th e chip, th e n d e p e nding on 
th e e as e by which this can bo done, it is l ike l y to bo accoptablo. 

I t I s important to not e that i n the propos e d so l ut i on, comprom i se of th e SoPECJd l eads on l y to 
compromise of tho op e rat i ng paramotors and ink usage on th i s particular SoPEC. It doos not 
30 compromise any oth e r SoPEC or a ll inks or op e rat i ng param e t e rs in genera l . 

I t Is i d e a l that tho SoPECJd bo random, a l though this is un l ik e ly to occur on standard 
manufacture proc e sses for ASICs. If the id i s within a smal l rango how e v e r, i t wi ll b e ab le to b e 
brok e n by brut e forco. This is why 32 b i ts i s not suffici e nt protection. 

35 

^tS CPU W I TH USER/SUPERVISOR MOPE 



E l ectronio Chip I d 
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SoPEC contains a CPU w i th d i r e ct hardwar e support for uGor and suporv i sor mod e s. At prosont, 
the intondod CPU is the LEON (a 32 - bit processor w i th an inotruction sot accord i ng to tho IEEE 
1751 standard. The I EEE1754 standard is compat i b le w i th tho SPARC V8 instruction sot). 

5 Manufacturor/ownor (operating system) program code w i l l run in suporvisor modo, and al l OE I \^ 
program cod e wi l l run i n us e r mod e . 

^ — Memory Management Unit 

SoPEC contains a Memory Manag e ment Unit (MMU) that l im i ts access to regions of DRAM by 
10 defining r e ad, writ e and e x e cute acc e ss p e rmissions for suporv i sor and us e r mod e . Program codo 
running in user modo i s subject to user mode permiss i on s e ttings, and program code running i n 
supervisor mode i s subj e ct to sup e rvisor modo settings. 

A s e tt i ng of 1 for a p e rm i ssion b i t m e ans that typo of acc e ss (e.g. road, wr i t e , e x e cute) /s 
15 p e rm i tt e d. A sotting of 0 for a read perm i ss i on b i t moons that that type of access is not porm i ttod. 

At rosot and whonovor SoPEC wakes up, th e s e tt i ngs for a l l tho permission bits ar e 1 for al l 
suporvisor modo accesses, and 0 for all user modo acc e ss e s. Th i s moans that suporvisor modo 
program codo must explicitly sot user mode access to b e permitted on a s e ction of DRAM. 

20 

Access perm i ssion to a ll tho non - va l id address spoco shou l d bo trapped, r e gard le ss of us e r or 
suporvisor mod e , and r e gardless of th e access be i ng road, oxocuto, or wr i te. 

Acc e ss permiss i on to a l l of th e va li d non - DRAM address spac e (for e xampl e th e PEP b l ocks) i s 
25 supervisor road / write access on l y (no superv i sor execut e acc e ss, and us e r mod e has no 

accc e ss at a ll ) with th e e xc e pt i on that certa i n GPIO and Timer r e g i st e rs can a l so bo aooossod by 
us e r cod e . Thoso regist e rs wi l l require bitwis e acc e ss perm i ssions. Each per i pheral block w i ll 
determ i ne how tho access is restr i cted. 

W i th roopoct to th e DRAM and PEP subsyst e ms of SoPEC, typ i ca l ly w e wou l d sot user 
30 r e ad/write/ e xecuto mod e p e rmiss i ons to bo 1/1/0 only i n th e r e gion of m e mory that i s used for 
OEM program data, 1/0/1 for rog i ons of OEM program cod e , and 0/0/0 el sewhere (including th e 
trap tab l e). By contrast w e wou l d typically s e t sup e rvisor mod e read/wr i te/executo p e rmissions for 
th i s m e mory to be 1/1/0 (to avoid accidentally execut i ng user cod e in superv i sor mode). 

35 Tho SoPECJd paramotor (soo Sect i on 3.1 ) should only bo acc e ssible in superv i sor mod e , and 
should on l y b e stored and manipulated i n a reg i on of memory that has no usor modo accoss. 

3t4 — Un i que Id i s not Cached 

Th e un i qu e SoPECJd n e eds to b e ava i lable to sup e rv i sor cod e and not avai l ab le to usor codo. 
40 Th i s is taken caro of by tho MMU (Section 3.3). 
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How e v e r the SoPECJd mu s t a l so not b e aoc e ssabl e v i a th e CPU's data cach e or r e gist e r 
w i ndows. For exampio, if tho user woro to oauso an interrupt to occur at a particu l ar po i nt in th e 
program e xecution when tho SoPECJd v^as b ei ng manipu l at e d, i t must not b e possiblo for the 
5 usor program code to turn cach i ng off and thon accoss tho SoPECJd i noido th e data oacho. Th i s 
would bypass any MMU security. 

Tho same must bo true of register windows. I t must not bo poss i blo for usor mode program codo 
to r e ad or modify reg i ster settings in a supervisor program's register windows. 

10 

Th i s means that at th e least, th e SoPECJd i ts e lf must not b e cachoablo. L i kew i se, any procosGod 
form of th e SoPECJd such as th e SoPECJdJk e y (e.g. r e ad i nto reg i sters or calou l atod oxpoctod 
r e sults from a QA_Chip) should not bo aocessabl e by us e r program cod e . 

15 — Specif i c eiv4try point s in O/S 

G i ven that us e r mode program cod e cannot oven cal l functions in suporvisor codo space, tho 
question ar i s e s as how OEM programs can access functions, or r e qu e st serv i c e s. Th e 
impl e m e ntation for this d e p e nds on th e CPU. 

20 On tho LEON proc e ssor, th e TRAP i nstruct i on a ll ows programs to switch betw ee n user and 

superv i sor mode i n a controlled way. Tho TRAP sw i tches between usor and sup e rvisor register 
sots, and cal l s a specific ontry po i nt in tho suporvisor code spac e i n supervisor mode. Th e TRAP 
hand l er d i spatches tho serv i ce r e qu e st, and thon returns to th e ca ll er in usor mode. 

25 Use of a command dispatch e r a l lows th e O/S to provid e s e rvic e s that filter accoss — e .g. a 

g e nera li sed print function w ill sot PEP r e gisters appropriately and e nsure QA Chip ink updat e s 
occur. 

Th e LEON a l so a ll ows suporvisor mod e cod e to cal l user mode cod e In user mode. There are a 
30 number of ways that this functional i ty can b e i mp le m e nt e d. I t is poss i b l e to ca l l th e us e r cod e 
w i thout a trap, but to return to sup e rvisor mod e requir e s a trap (and associated latency). 

— Boot Procedure 
Bas i c prem i se 

35 Th e int e nt i on is to l oad th e Manufacturer/owner and OEM program cod e into SoPEC's RAM, 
whore i t can bo subsequent l y oxocut e d. Th e bas i c SoPEC th e roforo, must be capab le of 
down l oading program cod e . Howovor SoPEC must be abl e to guarant e e that only authoriz e d 
Manufactur e r/owner boot programs can b e l oad e d, otherw i se anyone cou l d modify th e O/S to do 
anyth i ng, and th e n load that th e reby bypassing th e lic e nsed operat i ng parameters. 

40 
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Wo porform authontioat i on of program oodo and data using osymmetr i c (public key) digita l 
signatur es and without us i ng a OA Ch i p. 



Assum i ng wo havo a l ready down l oodod som e data and a 160 bit s i gnature into e DRAM, th e boot 
5 loader noods to porform the fo ll ow i ng tasks: 

^ perform SHA 1 on the downloadod data to calculate a digcot 

tocaiDigoet 

-* perform aoytnmotric decryption on the downloaded oicfnatur e 

(IGO bits) — uoing an aaymmetric public key to obtain 
10 QuthorizodDigoGt 

If QuthorizodDig e st i s tho PKCS#1 (pat e nt fr ee ) form of locafDigoct, thon the downloadod 

data is authorized (the signature must have boon sign e d with the asymmotr i o private key) 
and contro l can thon bo pass e d to tho down l oadod data 
Asymmetr i c d e cryption i s used instead of symmetric decryption bocauso tho decrypt i ng koy must 
15 b e h el d in SoPEC's ROM. If symm e tr i c private koys ar e used, th e ROM can bo prob e d and tho 
security i s comprom i sed. 

Tho procedur e requ i res th e follow i ng data item: 
^ bootOkoy - an n bit asymm e tric pub li c koy 

20 

Tho procedur e also r e qu i r e s the fo l lowing two funct i ons: 

^ SHA 1 - a function that p e rforms SHA 1 on a range of memory and r e turns a 160 b i t d i g e st 

decrypt ~ a function that performs asymm e tric decryption of a messag e us i ng tho pass e d i n 

25 

CrKCS # l form — e€ localDigcot is 20 48 bita foannattGd — as 

followo! — bito — 20 4 7 20 4 0 — = — 0x00, — bito — 2039 2032 — = — 0x01, 

bito 2031 2 8 8 = OxFF. .OxFF, bito 2 8 7 IGO ^ 

0x003 0213 0OQOG052B0BO3 021A050 00 4 14, bita 159 0 - 

30 localDigoot . Fea? — more information, see PKCS#1 v2 , 1 

ocction 9.2 

Assum i ng that a ll of those aro availablo (e.g. in tho boot ROM), boot loader 0 can b e d e fin e d as i n 
tho fol l owing psoudocodo: 

35 bootloadcrO (data, — oig) 

localDigcot < SIIA 1 (data) 

authoriacdDigcat < — dccr^^t (oig, — bootOJccy) 
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G3cpcGtQdDigoD fe = 0x0 0 I 0x0 1 1 OxFF . . OxFF | 

OX003021300906052BOB03 021A05000 414 — 1 localDigoot ) — // ^^ \ " 

a concat 

— ( author! BodDigcot cxpGCtcdDigcat) 

5 jump — to program — code — afe — data atart — addrcaa// — will — never 

return 

ElQC 

// program code io unauthorised 

Endlf 

10 Th e l e ngth of the k e y wi l l depend on the asymmetric algorithm chosen. Tho koy must prov i do the 
e quivalent prot e ction of th e e nt i re OA Chip system — if tho Manufaoturor/ownor O/S program codo 
can bo bypass e d, th e n it i s e quivalent to tho QA Chip k e ys b e ing compromised. I n fact i t is worse 
b e caus e i t would compromis e Manufactur e r/own e r operat i ng parameters, OEM op e rating 
param e t e rs, and i nk auth e ntication by software down l oad e d off th e not (e.g. from som e hacker). 

15 

In the cas e of RSA, a 2018 bit koy is requ i r e d to match tho 160 b i t symm e tric koy security of the 
QA Ch i p. I n the case of ECDSA, a k e y le ngth of 132 b i ts is like l y to suffice. RSA is conven ie nt 
becaus e th e pat e nt (US patent numb e r 4 , 4 05,829) e xpired i n September 2000. 

20 Ther e is no advantag e to storing mult i pl e keys in SoPEC and hav i ng the e xtornal m e ssage 

choos e which k e y to val i dat e aga i nst, becaus e a comprom i s e of any key a ll ows th e e xt e rna l user 
to a l ways se l ect that koy. 

Thoro i s a l so no particular advantage to having th e boot m e chanism select tho key ( e .g. on e for 
USB based boot i ng and one for externa l ROM boot i ng) a compromis e of the e xternal ROM 
25 boot i ng k e y i s e nough to comprom i s e al l th e SoPEC syst e ms. 

How e v e r, th e re aro advantag e s in having mu l tip le keys present in tho boot ROM and hav i ng a 
wir e- bonding opt i on on the pads s e l e ct wh i ch of th e k e ys is to b e used. I dea ll y, the pads would be 
conn e ct e d w i thin th e package, and tho soloction is not availab le v i a extorna l moans once the die 
30 has b e n packag e d. Th i s m e ans w e can have d i fferent keys for d i ff e r e nt app li cation areas (e.g. 

different uses of th e chip), and if any particular SoPEC k e y i s comprom i sed, tho di e cou l d b e kept 
constant and on l y tho bond i ng changed. Note that i n tho worst cas e of al l keys be i ng 
compromised, it may b e oconom i cal l y feas i ble to chang e th e bootOkey va l u e i n SoPEC's ROM, 
since this i s only a s i ngle mask change, and wou l d be easy to ver i fy and charact e rize. 

35 

Thorofor e th e e ntiro eocurity of SoPEC is bas e d on k ee ping th e aeymmothc private koypairod to 
bootOk e y secur e . Tho ontiro socurity of SoPEC is also basod on kooping tho program that signs 
(i.e. authoriz e s) datasets using th e asymm e tric private k e y paired to bootOkey socuro. 
I t may thor e foro bo reasonab le to have multip le s i gnatures (and hence mu l t i p l e signature 
40 programs) to reduce the chanc e of a s i ngle point of w e akness by a rogue emp l oyee. Not e that th e 
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authent i cation tim e incr e ases l i n e ar l y with th e number of s i gnatures, and roqu i ros a 20 4 8 b i t 
pub l ic koy i n ROM for e ach s i gnatur e . 

3.6.2 H ie rarchi e s of auth e nt i cation 

5 G i von that test programs, eva l uation programs, and Manufactur e r/ownor O/S code noods to bo 
wr i tten and tested, and OEM program cod e e tc. also noods to b e t e st e d, i t i s not secure to have a 
single auth e nt i cation of a mono l ithic datas e t combining Manufacturor/own e r O/S, non O/S, and 
OEM program code w e c e rtainly don't want OEMs s i gning Manufaoturor/ownor program cod e , 
and Manufacturer/owner shouldn't have to b e i nvo l v e d with the s i gn i ng of OEM program cod e . 

10 

Ther e fore we roqu i ro diff e r i ng l e v el s of authent i cation and th e refor e a number of keys, a l though 
tho procoduro for authenticat i on i s identica l to tho first a section of program oodo contains tho 
k e y and proc e dur e for authenticat i ng th e n e xt. 

15 Th i s method allows for any hierarchy of auth e nticat i on, based on a root k e y of bootOk e y. For 
e xample, assum e that w e have tho fo l lowing e ntiti e s: 

QACo^ Manuf QCturcr/ovmcr^ o QA/koy company « — Knowo private 

vcr aion of bootOk e y, and owner of security concerns. 

SoPECCo^ Manuf Qcturor/owncr^ o SoPEC hardv^arc / ooftwaro 

20 company. Supplica SoPEC ASICo and SoPEC O/S printing ooftwarc 

to a ComCo. 

ComCo , — a company that aascmblco Print Enginco from SoPECa, 

Mcmjct printhcado etc, — customizing the Print Engine for a 
given OEM according to a liccneG 

25 OEM, — a company that uoco a Print Engine to create a printer 

product to ocll to the end uooro. — The OEM would oupply the 
motor control logic, — uocr interface, — and caoing. 

The l e vels of authenticat i on h i erarchy ar e as follows: 
30 QACo writQo the boot ROM, — agcncratco datas e tl, cons i sting of a boot l oad e r 

program that l oads and va li dat e s datQs e t2 and QACo's asymmetric pub li c bootlkoy, QACo 

s i gns datae e tO w i th th e asymm e tric pr i vate bootOkoy. 
■* SoPECCo gcncratGO dataeetl, consisting of the print e ng i n e s e curity kern el O/S 

(which incorporates tho security bas e d f e atur e s of tho pr i nt e ngin e functiona l ity) and the 
35 ComCo's asymm e tr i c pub li c k e y. Upon a sp e c i a l "formal r e l e as e " r e qu e st from SoPECCo, 

QACo signs datae e tO w i th QACo*s asymm e tric privat e bootOk e y k e y. Th e print e ngine 

program cod e expects to ooo an operating param e t e r b l ock signed by the ComCo's 

asymm e tric private k e y. Note that th i s is a spec i a l "formal releas e " r e qu e st to by SoPECCo; 

th e procedure for deve l opm e nt vers i ons of tho program ar e d e scr i bed in Sect i on 3.6.3. 



PEA23US 



583 



The ComCo gcnQratco dataSotS, cons i st i ng of datOGOtl p l us datacot2, whoro 

data6et2 is an op e rat i ng param e t e r b l ock for a g i v e n OEM's print ongino licenc e (acoording 
to th e print eng i ne l ioonso arrangomont) s i gnod with tho ComCo's asymmotric private k e y. 
Th e operating paramotor b l ock {datae e t2) wou l d conta i n valid print sp e ed ranges, a 
5 PrintEngin e Lic e neoid, and tho OEM's asymm e tric pub l ic koy. Tho ConnCo can gen e rat e as 

many of those op e rating param e ter blocks for any number of Pr i nt Engine L i oonsos, but 
cannot writ e or sign any supervisor O/S program code. 

^ The OEM would gcnoratQ dataootS, consisting of dataeetS p l us dataeoM, whoro 

dataeoM i s tho OEM program cod e s i gn e d w i th th e OEM's asymmotr i c private k e y. Tho 
10 OEM can produc e as many versions of datas e tS as i t li kes (o.g. for t e sting purpos e s or for 

updates to dr i vers etc) and n e ed not invo l v e Manufactur e r/own e r, QACo, or ComCo i n any 

Th e r e lat i onsh i p is shown bo l ow in F i gur e 325. 



15 Whon tho end user uses datas e tS, SoPEC its e lf validates datas e tl v i a tho bootOk e y mechan i sm 
d e scr i b e d i n Section 3.6.1. Once datas e tl is e xecuting, it va li dates dataeotS, and uses dataGOt2 
data to validato datacot^. Tho val i dation hi e rarchy i s shown in Figur e 326. 



If a koy is compromised, i t compromisos a ll subsequ e nt author i zations down the hierarchy. In tho 
20 e xampl e from abov e (and as il lustrat e d in Figure 326) i f tho OEM's asymmetric pr i vate key is 

comprom i sed, thon O/S program code i s not compromis o d sinoo it is above OEM program codo in 
th e authentication hi e rarchy. How e v e r if th e ComCo's asymm e tric privat e k e y Is comprom i sed, 
then tho OEM program code is a l so comprom i sod. A comprom i s e of bootOk e y compromisos 
oyorythjng up to SoPEC its el f, and wou l d r e quire a mask ROM change in SoPEC to fix. 

25 

ft is worthwhilo ropoating that in any hiorarchy tho security of tho ontiro hi e rarchy ie bae e d on 
k e eping tho asymmotric privat e key paired to bootOkey s e cur e , it is also a roquiromont that tho 
program that signs (i.e. authorizes) datasots using tho asymmotric privat e key paired to bootOkoy 
s e cur e . 

30 

3.6.3 Developing Program Cod e at Manufactur e r/owner 

Th e hi e rarchical boot procedur e d e scr i bed in S e ction 3.6.1 and S e ction 3.6.2 gives a h ie rarchy of 
protect i on in a fina l sh i pped product. 

35 It Is a l so des i rab l e to use a hi e rarchy of prot e ct i on dur i ng softwaro dev e lopm e nt within 
Manufacturer/owner. 

For a program to bo down l oad e d and run on SoPEC during development, it wi l l nood to bo 
signed. In addit i on, wo don't want to have to s i gn e ach and e v e ry Manufacturer/own e r d e ve l op 
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mont cod e w i th th e bootOkoy, as it oroatos th e poss i b i lity of any dovo l opmontal ( i ncluding buggy 
or rogue) appl i cat i on be i ng run on any SoPEC. 

Thorofor e QACo noods to gonerato/croato a opooial i ntormod i ato boot l oader, signod w i th 
5 bootOk e y, that p e rforms tho exact same tasks as th e normal boot load e r, oxoopt that it chocks tho 
SoPECtd to SCO if it i s a spocific SoPECid (or sot of SoPECidG). If tho SoPECJd Is in the va li d 
set, th e n the d e velopmental boot loader va l idat e s datas e t2 by m e ans of its l ength and a SHA 1 
d i g e st of th e d e v el opm e ntal codo^, and not by a further dig i tal signaturo. Tho QACo can givo this 
boot l oader to tho softwar e dovolopmont team w i thin Manufactur e r/owner. Th e software team can 
10 now write and run any program code, and load the program codo using tho dov el opmont boot 
l oader. There i s no requ i rement for tho subs e quent software program (i.e. th e dovo l opmontal 
program cod e ) to b e signod w i th any koy since tho programs can on l y b e run on tho particular 
SoPECo. 

15 I f tho dev el opmenta l boot load e r (and/or s i gnature generator) w e r e compromis e d, or any of th e 
d e v e lopm e ntal programs w e re comprom i sod, tho worst s i tuation is that an attacker could run 
programs on that part i cu l ar s e t of SoPECs, and on no others. 

This should greatly roduco th e possib i l i ty of e rroneous programs s i gn e d with bootOkoy bo i ng 
20 av a i l ab le to an attackor (on l y offic i a l re le as e s are sign e d by bootOkoy), and th e refore reduc e s th e 
poss i bi l ity of a Manufacturor/own e r e mploy e e i nt e ntionally or inadvertently cr e ating a back door 
for attackers. 

Tho re l ationsh i p is shown below i n Figur e 327. 

25 

Th e oretica l ly th e samo kind of h i erarchy could also bo usod to al l ow OEMs to bo assured that 
the i r program code wil l only work on specific SoPECs, but this is un li ke l y to b e nocossary, and is 
probably und e sirable. 

30 Dat e-li m i ted loaders 

It i s possibl e that errors in supervisor program codo (e.g. tho op e rat i ng syst e m) cou l d a ll ow 
attack e rs to subvert th e program i n SoPEC and gain supervisor contro l . 

To r e duce tho i mpact of this k i nd of attack, it i s possible to allocato some bits of th e SoPECJd to 
35 form som e k i nd of date. Tho granular i ty of th e dat e could bo as simp i o as a sing l e bit that soys the 
date i s obtain e d from th e r e gu l ar I BM ECID, or i t cou l d bo 6 bits that g i ve 10 y e ars worth of 3 
month units. 



^ho SHA - 1 d i gest I s to al l ow tho total program load t i me to simulate tho running timo of tho norm al-bGet 
l oader running on a non dovo l opmonta l vers i on of tho program. 
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Tho first stop of tho program load e d by boot l oad e r 0 cou l d ohook tho SoPECJd dat e , and run or 
refuse to run appropr i at el y. Th e Manufaotur e r/ownor driver or OS could th e r e for e bo lim i tod to run 
on SoPECs that ar e manufactur e d up unt il a particular data. 

5 

Th i s m e ans that tho OEM would r e qu i r e a new version of tho OS for SoPECs aftor a particular 
data, but tho now dr i v e r could be mad e to work on al l prev i ous vers i ons of SoPEC. 

Tho function simply roqu i ros a form of dato, whoso granularity for work i ng can be dotorm i nod by 
10 agr ee m e nt with tho OEM. 

For e xamp l e, suppose that SoPECs ar e suppli e d w i th 3 month granularity in tho i r dato 
components. Manufacturor/ownor cou l d ship a version of th e OS that works for any SoPEC of tho 
dat e ( i . e . on any ch i p), or for al l SoPECs manufactured during tho yoar etc. Tho driv e r i ssu e d tho 
15 next yoar cou l d work w i th all SoPECs up unti l that yoars otc. In this way the drivers for a chip w i l l 
bo backwards compatib l e, but w i l l b e de l iberately not forwards compat i blo. I t a ll ows tho 
downloading of a now driv e r w i th no problems, but i t prot e cts against bugs i n one yoars's dr i ver 
OS from being us e d aga i nst future SoPECo. 

20 Note that th e phasing in of a now OS doesn't hav e to b e at th e sam e tim e as th e hardwar e . For 
e xamp l e, tho now OS can come in 3 months boforo tho hardware that it supports. Howovor onco 
th e new SoPECs are b e ing dol i vorod, tho OEM must not sh i p the o l d e r driv e r w i th tho newer 
SoPECs, for th e o l d dr i ver w i ll not work on th e n e w e r SoPECs. Basical l y onc e th e OEM has 
rec e iv e d the n e w driv e r, they should use that driver for al l SoPEC syst e ms from that po i nt on (old 

25 SoPECs wil l work w i th tho now driv e r). 

This dato l imit i ng feature would most likely b e using a fiold in the ComCo spocifiod operat i ng 
parameters, so i t allows tho SoPEC to use dato check i ng in addition to add i t i onal QA Ch i p rolotod 
param e t e r ch e ck i ng (such as th e OEM's PrintEngineUoonGold etc). 

30 

A var i ant on th i s th e m e i s a dato w i ndow, where a start - date and end dat e aro spoc i fiod (as 
r el at i ng to SoPEC manufacture, not date of use). 

StStS Auth e nt i cating operat i ng parameters 

35 Op e rating parameters nood to b e considorod in terms of Manufacturer/owner op e rat i ng 

parameters and OEM operating parameters. Both s e ts of operating parameters aro stored on th e 
PR I NTER_QA chip (physical l y located i nside tho printer). Th i s allows tho pr i nter to mainta i n 
param e t e rs r e gard l ess of be i ng moved to d i fferent computers, or a l oss/roplacom e nt of host O/S 
driv e rs etc. 

40 
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On PR I NTER_QA, m e mory vector M^^ conta i ns th e upgradable operating paramotoro, and 
m e mory voctors M4 4 . conta i ns any constant (non upgradab l e) operat i ng paramotoro. 

Cons i d e ring on l y Manufacturer/owner operat i ng parameters for the moment, th e re ar e actua ll y 
5 two prob le ms: 

a. sett i ng and stor i ng th e Manufacturer/own e r op e rating parameters, wh i ch should b e authorized 
only by Manufactur e r/owner 

b. reading the paramet e rs i nto SoPEC, wh i ch i s an i ssue of SoPEC auth e nt i cat i ng the data on 
th e PR I NTER_QA chip s i nce wo don't trust PRINTER_QA. 

10 The PRINTER_QA ch i p ther e fore contains th e fo l low i ng symmetr i c keys: 

Kq ~ PrintEngin e Licons e _k e y. This key Is constant for all SoPECs suppli e d for a g i ven print 

e ngin e l ic e nse agreement between an OEM and a IVIanufacturer/owner ComCo. Ko has 
vyrit e p e rmiss i ons to tho Monufacturor/ownor upgradoable reg i on of IVI^ on PR I NTER_QA. 

~ SoPEC_id_koy. Th i s key i s un i que for each SoPEC (see Sootioh 3.1), and is known 

15 only to tho SoPEC and PR I NTER_QA. does not have wr i te perm i ss i ons for anything. 

K o is us e d to s o l v e problem (a). It is on l y used to authent i cat e the actua l upgrad e s of the 
op e rating param e t e rs. Upgrades ar e perform e d us i ng the standard upgrade protocol described i n 
[5], w i th PRINTER_QA act i ng as th e Ch i pU, and th e ext e rnal upgrader acting as th e Ch i pS. 

20 

is us e d by SoPEC to solve problem (b). It Is used to authent i cate reads of data (i.e, the 
operating parameters) from PRINTER_QA. Tho procedure fo ll ows th e standard auth e nticat e d 
read protocol descr i bed in [5], w i th PR I NTER_QA act i ng as ChipR, and tho embedd e d sup e rv i sor 
softwar e on SoPEC act i ng as Ch i pT. Tho auth e nt i cated read protocol [5] requ i r e s th e us e of a 

25 160-b i t nonce, wh i ch i s a pseudo random number. This creat e s th e problem of introducing 

pseudo randomness into SoPEC that i s not read il y det e rminabl e by OEM programs, especia ll y 
g i ven that SoPEC boots i nto a known state. One poss i bi li ty is to use tho samo random number 
generator as in th e QA Ch i p (a 160 b i t max i ma l-le ngth e d l inear foedback sh i ft register) w i th tho 
seed taken from th e value i n tho WatchDogTimor reg i ster i n SoPEC's tim e r un i t when th e f i rst 

30 page arr i v e s. 

Not e that th e proc e dur e for v e rifying roads of data from PRINTER_QA do e s not re l y on 
Manufactur e r/own e r's key Kq. Th i s moans that precisely tho sam e mechan i sm can be used to 
r e ad and authenticate the OEM data a l so stor e d i n PRINTER_QA. Of course this must b e don e 
35 by Manufacturer/own e r supervisor cod e so that SoPECJd_k & y i s not r e veal e d. 

I f th e OEM also requ i res upgradab l e param e t e rs, w e can add an e xtra k e y to PRINTER_QA, 
wh e r e that key is an OEM_koy and has wr i t e p e rm i ssions to tho OEM part of Mq t 

40 In th i s way, K4 never noods to bo known by anyone except tho SoPEC and PR I NTER_QA. 
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Each pr i nting SoPEC i n o muit i SoPEC Gystom nood aocess to a PR I NTER_QA ch i p that conta i ns 
th e appropriat e SoPECJidJk o y to va l idate i n l < useag e and operat i ng param e ters. This can bo 
accompl i shed by a separate PR I NTER_QA for e ach SoPEC, or by add i ng e xtra k e ys (mu l tipio 
5 SoPECJd_k e ys) to a s i ng l e PR I NTER_QA. 

However, i f ink usage is not b e ing validat e d (e.g. i f print spood woro the on l y Manufacturor/owner 
upgradab l e paromotor) thon not all SoPECs requir e acc e ss to a PR I NTER_QA chip that contains 
th e appropriate SoPEC_id_koy. Assum i ng that OEM program cod e controls th e physical motor 
10 sp ee d (d i fforont motors p e r OEM), thon tho PH I with i n th e first (or on l y) front page SoPEC can bo 
programmed to accopt (or gonorato) l i no sync puls e s no faster than a part i cu l ar rat e . I f li no syncs 
arr i ved fast e r than the part i cular rato, tho PHI would s i mp l y pr i nt at th e s l ow e r rat e . If tho motor 
sp ee d was hack e d to b e fast, th e print i mage wil l app e ar strotchod. 

15 3.6.5.1 — Floating operating param e ters and dongi e s 

As d e scr i b e d in S e ction 2.1.2, Manufactur e r/own e r operating param e t e rs include such itoms as 
pr i nt speed, print quality otc. and ar e t ie d to a lic e ns e provid e d to an OEM. These paramet e rs ar e 
under Manufacturor/owner control. Tho lic e ns e d Manufacturor/owner op e rating param e ters ar e 
typica l ly stored in the PR I NTER_QA as described i n Section 3.6.5. 

20 

Howev e r th e r e ar e situations wh e n i t i s desirab le to have a float i ng upgrad e to a licens e , for us e 
on a print e r of th e us e r's choic e . For e xampl e , OEMs may s ell a sp ee d i ncrease li cense upgrade 
that can bo p l ugg e d i nto th e print e r of the us e r's choic e . Th i s form of upgrad e can b e consid e r e d 
a f l oat i ng upgrade in that i t upgrad e s which e v e r print e r i t is curr e ntly p l ugg e d i nto. Th i s dongl e i s 
25 reforrod to as ADD I T I ONAL_PR I NTER_QA. Tho software ch e cks for the e x i st e nc e of an 

ADD I TIONAL_PR I NTER_QA, and i f pr e sent the op e rat i ng param e t e rs ar e chos e n from th e values 
stored on both OA ch i ps. 

The bas i c problem of auth e nt i cat i ng th e add i tional op e rating paramoters boi l s down to tho 
30 problem that we don't trust ADDIT I O N AL_PR I NTER_QA. Th e r e for e we need a syst e m wher e by a 
g i ven SoPEC can p e rform an auth e nt i cat e d read of the data i n ADD I T I ONAL_PR I NTER_QA. 

Wo should not wr i te the SoPECJd_koy to a key i n the ADD I T I ONAL_PR I NTER_QA b e cause: 

-* then it will bo tied apcGifically to that SoPEC^ — and the 

35 primar^^ intention of tho i\DDITIONAL_rRINTBR_QA io that it be 

floatable; 

the inlc cartridge would then not worlc in another printer 

oincc the other printer would not Imow the old SoPECJdJkoy 
(knowledge of the old key is requir e d in ord e r to chang e the old key to a n e w one). 
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updating keys is not power oafc — (i.e. — if at the uoer^ o oite^ 
power io removed mid update, — the ADDITIONAL_rRINTER_QA could 
be rendered uaeleoo) 
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Th e propos e d solut i on is to le t ADDIT I ONAL_PR I NTER_QA hav e two keys: 

^ K o ~ FloQtingPrlntEnginoUconeo_koy. This koy has the sam e function as tho 

PrintEnginoUGoneeJkoy i n th e PR I NTER_QA^ -Hi-^at- Ko hoQ write pormioQions to the 
Monufaoturer/owner upgradooblo region of on ADDITIQNAL_PRINTER_QA. 
- Ue e ExtParmeUo e neoJkoy, This koy I s constant for a l l of tho 



APD I T I ONAL_PR I NTER_QAs for a given licens e agr e em e nt betw ee n an OEM and a 
Manufactur e r/own e r ComCo (this Is not th e sam e key as PnntEnginoUc e n6o_koy}Nh\GU is 
stor e d as K^^ i n PRINTER_QA). K 4 . has no write permissions to anyth i ng. 

10 K q is us o d to a l low writ e s to tho various fi e lds containing operat i ng param e t e rs in the 

ADD I T I ONAL_PRINTER_QA. Thes e writes/upgrad e s are p e rform e d using th e standard upgrad e 
protocol described in [5], with ADDITIONAL_PR I NTER_QA acting as tho ChipU, and the external 
upgrader acting as the Ch l pS. The upgrador (ChipS) a l so needs to check the appropriate 
li c e nsing param e t e rs such as OEMJd for val i dity. 

15 

K 4 i s us e d to al l ow SoPEC to auth e nt i cat e r e ads of th e ink remaining and any other ink data. This 
is accomp l ish e d by having the same l/eoEx^Par/T?sL/conco_/coy w i thin PRINTER_QA (e.g. in K;^), 
a l so w i th no wr i t e permissions, i.e: 

PRINTER QA . 1*:;^ " U6eExtPQrm6UcenGO_k e y. This key is constant for all of tho 

20 PR I NTER_QAs for a given l ic e ns e agreement betw e en an OEM and a Manufacturor/owner 

ComCo. has no wr i te p e rm i ssions to anything. 

Th i s moans th e re are two shared keys, with PR1NTER_QA sharing both, and thereby acting as a 
br i dge betwe e n INK_QA and SoPEC. 

25 Ue e ExtParmeUGonco^key i s shar e d b e tw e en PR I NTER^QA and 

ADDIT I ONAL_PR I NTER_QA 
SoPECJdJk e y is shared betwe e n SoPEC and PR I NTER_QA 

Al l SoPEC has to do i s do an authenticated r e ad [6] from ADP I T I ONAL_PR I NTER_QA, pass the 
30 data / signatur e to PR I NTER_QA, lot PRINTER_QA va l idate tho data / signature, and got 

PRINTER_QA to produce a s i m i lar signature bas e d on tho shar e d SoPECJd_koy. It can do so 
using th e Translat e funct i on [6], SoPEC can th e n compare PR I NTER_QA's signature w i th i ts own 
calculated signatur e ( i .e. i mplement a Test function [6] I n ooftware on SoPEC), and i f the 
s i gnatures match, the data from ADD I T I ONAL_PRINTER_QA must be val i d, and can therefore bo 
35 trusted. 



^h i s con bo i dont i oa l to PrintEnginoLiconeo^koy In tho PR I NTER_QA If it is doslroab l o (un l ike l y) that 
upgradors con funct i on on PRINTER_QAs as wol l as ADD I T I ONAL_PR I NTER_QAs 
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Onoo tho data from ADD I T I ONAL_PR I NTER_QA i s known to b e trusted, th e various op e rat i ng 
paramotors such as OEM Jd can bo ohookod for va li dity. 

Tho actua l stops of road authont i cat i on as performed by SoPEC ar e : 
5 fimiNTBii'^ — PRINTER_QA. random ( ) 

RDoNGLir r MDONCLEif SIGpoMcur -^ — DONGLE_QA . read ( Kl , Rp RjamR-f 
RcorBc-^ — random ( ) 

RritiNTBR- 7 g^ ^miMTER < rRINTER_QA . tranolatc (K2 , Rijomclit; ^boKCLnr- 

10 6i€sei«€--< m^C_CIIA_l(CorBC_id_]cQy, IV^ oMe^ a | Rp rbi ^ | Rs omg)- 

■/-/- variou9 pairma inaidc y^&ssGn^ (data road from 

ADDITIONAL_rRINTBR_QA) ia valid 
Eloo 

15 // tho data read from ADDITIONAL_rRINTBR_QA io not valid and 

oannot be truotcd 
Endlf 

3,6.6.2 — DongiOG tied to a given SoPEC 
20 Sect i on 3.6.5.1 doscr i bos floating dangles I .e. dong le s that can bo us e d on any SoPEC. 
Som e t i mes I t is desirab l e to ti e a donglo to a sp e cific SoPEC. 

Tying a QA_CH I P to b e used on l y on a sp e cific SoPEC can bo oas i ly accomp l ished by writing tho 
PR I NTER_QA's chip i d (un i que seria l numb e r) i nto an appropriat e tAg fiold on tho 
25 ADD I TIONAL_PR I NTER_QA. The system softwar e can dotoct tho match and function 
oppropr i atoly. If there I s no match, th e softwar e can i gnor e th e data road from tho 
ADD I T I ONAL_PR I NTER_QA. 

Although it I s a l so poss i ble to store the SoPEC_id_koy I n on e of tho koys within th e dongl e , th i s 
30 must be don e in an e nv i ronment whore power wi ll not be r e moved partway through th e k e y 

update process ( i f powor is removed during tho key updat e th e re i s a possib ili ty that the dong le 
OA Ch i p may be r e nd e r e d unusab le , a l though this can b e checked for aftor the power fa i lur e ). 
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3.6.5.3 — OEM Qse e mbly lino tost 

A l though an OEM shou l d only b e abl e sel l th e l i censod operating paramotors for a giv e n Pr i nt 
Engine, they must bo abl e to ass e mbly - lin e t e st^ or serv i o e /tost th e Pr i nt Eng i ne with a difforont 
set of operating param e t e rs e .g. a max i mally upgraded Pr i nt Engine. 
5 Sev e ral different mechanisms can b e emp l oyed to a l low OEMs to t e st the upgraded oapabi ll t i oo of 
the Pr i nt Engine. At present it is unclear exactly what k i nd of ass e mbly l i n e t e sts would bo 
p e rform e d. 

The simplest solut i on is to us o an ADD I T I ONAL_PRiNTER_(M ( i .. e . spec i al donglo 
10 PRINTER_QA as deGcrlbod In Sect i on 3.6.5.1). The ADD I TIONAL_PR I NTER__QA would contain 
th e op e rating param e t e rs that max i mally upgrade tho print e r as l ong as th e dong le i s connected to 
tho SoPEC. Th e exact conn e ction may bo d i r e ct l y electr i ca l (e.g. v i a the standard OA Chip 
connections) or may bo over tho USB connection to the pr i nter t e st host d e p e nd i ng on tho nature 
of the tost. Th e e xact preferr e d connection is yet to b e d e t e rm i n e d. 

15 

In the test i ng e nvironm e nt, th e ADD I T I ONAL_PR I NTER_QA also r e qu i res a num 
borOflmprocGionc field i nside M^, which i s writoablo by K&. Boforo th e SoPEC pr i nts a pag e at th e 
h i gher speed, it decrem e nts tho numb o rOflmpr e seions counter, performs an Quthentioat e d read to 
e nsure tho count was deoromcntod, and then prints th e page. I n this way, the total number of 
20 pag e s that can be pr i nt e d at high speed is reduc e d i n th e event of someone st e a l ing the 

ADD I TIONAL_PR I NTER_QA d e vice. I t also means that multip l e t e st machin e s can ma l <e use of 
tho samo ADD I TIONAL_PRINTER_QA. 

3.6.6 Us e of a Pr i ntEng i n e L i conso i d 

25 Manufactur e r/owner O/S program codo conta i ns th e OEM's aoymmetric pub li c koy to ensur e that 
tho subsequent OEM program oodo is auth e nt i c i.e. from tho OEM. How e v e r g i von that SoPEC 
only contains a single root k e y. it is th e oretical l y possibl e for different OEM's applications to b e 
run id e nt i cal l y phycical Pr i nt Eng i n e s i . e . pr i nter dr i ver for OEM4 run on an i dontically phyeicaf 
Pr i nt Eng i ne from OEMy 

30 

To guard against this, th e Manufacturer/own e r O/S program codo containo a 
PrintEnginoLic e nGQjd cod e ( e .g. 16 bits) that matches tho samo namod valu e stored as a fix e d 
operating param e t e r in the PR I NTER_QA ( i .e. i n M4^). As w i th a ll other operating paramotors. the 
value of PrintEngineUconG e Jd i s stored in PR I NTER_QA (and any ADDIT I ONAL_PR I NTER_QA 
35 devices) at th e sam e t i m e as tho other various PR I NTER_QA custom i zationc are being applied, 
boforo be i ng shipped to tho OEM site. 



^h i s section i s roforring to assembly l i no testing rather than dovo l opmont testing. An OEM can maximal l y 
upgrade a givon Print Engine to allow dovolopmonta l testing of their own OEM program code & 
moohan i os. 
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In th i s way, tho OEMs can bo suro of difforentiating thomco l v e s through ooftwaro functionality. 

3.6.7 Authontication of ink 

5 The Manufactur e r/own e r O/S must perform i nk authonticat i on [6] during prints. Ink usago authon 
t i cat i on mak e s us e of count e rs in SoPEC that keep an accurato record of th e e xact number of 
dots print e d for e ach i nk. 

Th e i nk amount r e main i ng in a giv e n cartr i dgo i s stored in that cartridg e 's I NK_QA chip. Oth e r 
10 data stor e d on th e INK_QA ch i p includ e s ink color, v i scosity, M e mj e t fir i ng puis e profi l o 

information, as wel l as l icens i ng param e t e rs such as OEM_ld, i nkType, lnkUsag e Lic e nso_ld, otc. 
This i nformat i on Is typica ll y constant, and i s th e r e fore li k el y to b e stor e d in w i th i n I NK_QA. 

Just as th e Print Engine operat i ng parameters aro va l idated by m e ans of PR I NTER_QA, a g i ven 
15 Print Engin e li c e ns e may on l y b e p e rm i tt e d to funct i on with sp e c i f i cally l ic e ns e d i nk. Th e r e for e the 
software on SoPEC could contain a va li d sot of ink typos, colors, OEMJds, I nkUsageL i censeJds 
e tc. for subs e quent match i ng against th e data in th e I NK_QA. 

SoPEC must b e abl e to auth e nticat e r e ads from tho I NK_QA, both i n t e rms of ink param e ters as 
20 wo l l as ink rema i ning. 

To authenticat e ink a numb e r of st e ps must be taken: 
rcotrict accooo to dot oounta 

authGnticatc inlc usago and inlt paramotcra via INK_QA and 

25 rRINTER_QA 

^ broadcaot inlc dot uaago to all SoPECa in a multi SorEC oyatom 

3.6.7.1 — roGtriot acc e ss to dot counts 

S i nce th e dot counts are accessed via tho PHI in th e PEP s e ction of SoPEC, acc e ss to those 
30 registers (and moro gonora l ly ail PEP r e gist e rs) must be only avai l ab le from superv i sor mode, and 
not by OEM code (runn i ng in user mode). Otherwise It m i ght be poss i ble for OEM program cod e 
to clear dot counts befor e auth e ntication has occurred. 

3.6.7.2 — authenticat e ink usag e and ink paramet e rs via INKjQA and PRINTERjQA 

35 Th e basic problem of authenticat i on of i nk r e ma i ning and oth e r ink data bo i ls down to the problem 
that we don't trust I NK_QA. Therefor e how can a SoPEC know th e i nit i a l va l ue of i nk (or the i nk 
parameters), and how can a SoPEC know that aftor a write to the INK_QA, th e count has been 
corr e ctly decr e m e nted. 



PEA23US 



593 



Taking th e f i rst i ssu e , which is d e t e rmining th e i nitial ink count or tho i nk paramot e ro, wo nood a 
systom whoroby a g i von SoPEC can perform an authont i oatod road of the data in I NK_QA. 

W e cannot wr i te th e SoPEC_id_koy to the INK^QA for two roaoono: 

5 updating Iccyo io not powor aafc — (i . o , — if power io romovcd 

mid update, tho INK_QA could bo rcndcrod uoQlcas) 

-* the inlc cartridge would then not worlc in another printer 

aincc the other printer would not know the old SoPEC,/dLtoy (knowl e dge 
of th e old key i s r e qu i red in order to change tho old koy to a now ono). 

10 

Th e proposed solution is to l ot INK_QA hov e two k e ys: 

K q - Supply lnkUcons e _k B y. Th i s koy is constant for al l i nk cartr i dg e s for a given i nk supply 

agr ee m e nt botw o on an OEM a nd a Manufactur e r/owner ComCo (this is not\ho same koy 
as PrlntEnginQLicens e _k e y which is stor e d as Kq in PRINTER_QA). has writo 
15 permiss i ons to tho ink r e ma i ning regions of on I NK_QA. 

^ Ki - ~ Ue e lnkLiGonGoJkey. This k e y is constant for all ink cartr i dges for a g i v e n ink usage 

agroomont botwoon on OEM and a Manufacturor/ownor ComCo (th i s is nof tho same koy 
as PrintEnginoUc e nG e ^koy wh i ch is stored as Kg i n PR I NTER_QA). has no writo 
p e rmiss i ons to anything. 

20 K q is us e d to authenticate th e actua l upgrades of th e amount of ink remain i ng (e.g. to f il l and rofi ll 
tho amount of ink). Upgrades are performed us i ng tho standard upgrad e protoco l describ e d i n [5], 
w i th I NK_QA act i ng as tho ChipU, and tho externa l upgrad e r act i ng as th e ChipS. Tho f ill and ref i l l 
upgrad e r (Ch i pS) also ne e ds to check the appropriate ink l icensing param e t e rs such as OEM Jd, 
I nkType and I nkUsageLiconseJd for va l idity. 

25 

i s used to allow SoPEC to authenticate reads of tho ink r e main i ng and any other ink data. Th i s 
i s accomp l ish e d by hav i ng tho sam e Uco/n^L/c e /?go_/coy w i th i n PR I NTER_QA ( e .g. i n K;;^ or K;^ 
a l so with no wr i to perm i ssions. 

30 This means thoro aro two shored k e ys, with PR I NTER_QA sharing both, and thoroby acting as a 
br i dg e b e tween INK_QA and SoPEC. 

Ue e lnkLic e neoJkoy is shared b e tw e en INK_QA and PR I NTER_QA 

SoPECJdJk e y is shared between SoPEC and PR I NTER_QA 

All SoPEC has to do is do on authenticated road [6] from I NK_QA. pass tho data / signature to 
35 PRINTER_QA, l ot PR I NTER_QA va l idate tho data / signature and got PR I NTER^QA to produce a 
s i mi l ar s i gnatur e bas e d on the shar e d SoPECJd_koy ( i . e . th e Translato function [6]). SoPEC can 
th e n compar e PR I NTER_QA's signature w i th its own caioulated signatur e ( i . e . i mpl e m e nt a Tost 
funct i on [6] In software on th e SoPEC), and i f tho signatures match, the data from I NK_QA must 
bo va li d, and can th e refore bo trusted. 
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Once th e data from I NK_QA is known to bo trustod, tho amount of ink romoin i ng can bo ohookod, 
and the other i nk li c e nsing param e t e rs such as OEMJd, I nkTyp e , I nkUsageL i cons e Jd can be 
chock e d for va li d i ty. 

5 

The actual st e ps of read authenticat i on as p e rform e d by SoPEC are: 

^rnii rrc n — < rRINTER_QA. random ( ) 

fiaBr?-^^H «> CIGa HT^ INK__QA . road ( Kl , RpninTEii- ) — H- read with Iccyl ! 

UocIii3cLiccnoc_3cGy 
10 ficoPEc-^ — random ( ) 

^ ^rniwrnn/ SIGpniuTEn— ^ PRINTER_QA. tranolatQ ( K2 , R BHC7-^4aBn — &^Ga« fe/ Kl/ 

SiOsoPB^— < HMAr_nTTA_1 f HnDBr^i ri_1cny ^ ^ tlv s. \ ^ rn nrrc n I ^c orEc f 

(SIG pniNTER — = — SIGs0pB0^ 

1 5 / / M ofK — (data read from INK_QA) — io valid 

// M bh ; oould be ink paramctoro, — ouoh ao In3cUoagcLicQnoQ_Id, — ea? 

in3c remaining 

£f — Waf K- J-^^QH^c^iJ^ing « expect cdlnlcRemaining) 

// all io ok 

20 Biee 

■/-/- — fefee — 3bft4€ — value — — ae* — what — we — wrotc^ se — don^ t — print 

anything anymore 
Endlf 

25 /t^ — the data — read — from — INK_QA — is — net — valid — aad — cannot — be 

truotcd 
Endlf 

Strictly sp e aking, w e don't need a nonc e (Rs qpe g) aH th e tim e b e caus e Ma (containing the i nk 
remaining) shou l d be decromont i ng botwoon authont i cations. However wo do ne e d on e to r e tr ie v e 

30 th e i nit i a l amount of ink and the oth e r i nk parameters (at pow e r up). This i s why tak i ng a random 
number from tho WatchDogTim e r at th e r e c e ipt of the first pago is acceptab le . 
I n summary, th e SoPEC p e rforms th e non authonticatod write [6] of i nk rema i n i ng to tho iNK_QA 
ch i p, and then performs an authent i cat e d r e ad of tho data v i a tho PR I NTER_(3A as por the 
pseudocod e abovo. If th e value i s auth e nticat e d, and tho INK QA i nk - r e ma i nina valuo matches 

35 the exp e ct e d valuo, tho count was correctly docromontod and th e pr i nt i ng can cont i nu e . 

3,6,7.3 — broadGQCt ink dot usag e to all SoPECe in a muiti SoPEC syst e m 

In a mult i SoPEC system, e ach SoPEC attach e d to a printfioad must broadcast i ts i nk usag e to a ll 

th e SoPECs. I n th i s way, each SoPEC w il l have its own vers i on of th e e xpect e d ink usag e . 

40 
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In tho caso of a man in th e m i ddl e attack, at worst tho count in a givon SoPEC i s on l y i to own 
count ( i . e . a ll broadcasts ar e turn e d i nto 0 I nk usage by tho man - in tho m i ddio). Wo would also 
require the broadcast amount to be treat e d as an uns i gned i nt e g e r to prevent negative amounts 
from b e ing substituted. 

5 

A s i ngl e SoPEC p e rforms th e update of ink rema i n i ng to tho INK_QA chip, and th e n al l SoPECs 
perform on authonticatod read of tho data via tho approprlato PR I NTER_QA (th e PRINTER_QA 
that conta i ns th ei r matching SoPECJd_koy - remember that multipl e SoPECJd_k e ys can be 
stored In a sing l o PR I NTER_QA). I f th e valuo is authent i cat e d, and th e INK_QA valuo matches 
10 th e e xpected valuo, th e count was correctly decrement e d and th e pr i nting can continue. 

I f any of th e broadcasts are not rec e ived, or have boon tampered with, tho updat e d i nk counts will 
not match. Th e only caso this dooo not cater for i s i f each SoPEC i s tr i cked (v i a a USB2 i nter 
SoPEC - comms man - i n tho m i ddio attack) into a tota l that is tho samo, y e t not th e tru e tota l . Apart 
15 from tho fact that th i s i s not viablo for g e nera l pages, at worst th i s i s tho maximum amount of ink 
printed by a sing l e SoPEC. We don't car e about protect i ng against th i s caso. 

Sinc e a typica l maximum is 4 print i ng SoPECs, it requir e s at most 1 authenticat e d reads. Th i s 
should be comp l eted within 0.5 seconds, w e ll w i thin th e 1 2 seconds/page pr i nt tim e . 

20 

3.6.8 Example hierarchy 

Adding an extra bootloador stop to the example from Section 3.6.2. we can break up tho contents 
of program spac e into logical sections, as shown in Tabl e 227. Not e that tho ComCo does not 
prov i de any program code, mere l y operating paramet e rs that i s us e d by the O/S. 
25 Tab le 227. Sect i ons of Program Space 



s e ction 



cont e nts 



v e r i fi e s 



(ROM) 



boot loader 0 



sect i on 1 v i a bootOkey 



SHA 1 function 



asymmetric decrypt function 
bootOkoy 



boot loader 1 



section 2 via SoPEC_QS_publ i c_k e y 



SoPEC_OS_pub l ic_koy 



Manufacturer/owner O/S program 



section 3 v i a ComCo_pub li c_koy 
t oct i on 4 v i a OEM_pub li c_koy (supp l ied 



funct i on to gonorato 



SoPECJd_k e y from SoPECJd 
Basic Print Engine 



in section 3) 

PR I NTER_QA data, wh i ch i nc l udes tho 



PrintEngineLicenso_id, 



ComCo_pub l ic_koy 



Manufacturer/owner operating 
param e t e rs, and OEM op e rating 
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paromotors (ail authenticatod via 


SoPECJd_koy) 


3 




Is used by soction 2 to verify soction 4 
and range of parameters as found in 






PrintEngineLicenseJd (gets 


PRINTER_QA 




\JCN\ pupiio^KGy loaQQO tnio 

suporvisor modo section of mem- 


Any ComCo written user modo 




program code (gots loaded Into 


mode mode soction of memory) 


4 


OEM specific program code 


OEM operating paramotors via calls to 
Manufacturer/owner O/S codo 





Tho verificat i on procedur e s wi ll be required oach t i me tho CPU i s wokon up, sinco th e RAM is not 
pr e s e rv e d. 

5 Sr^rO What if tho CPU is not fast enough? 

I n th e e xamp l e of Section 3.6.8, every time tho CPU is wokon up to print a document i t needs to 
p e rform: 

SllA 1 on all program code and program data 

* 4 goto of ao^yTumctriG dccr^'ption to load the program code and 
10 ^afee 

1 IIMAC SIIAl generation por 512 bito of Manuf acturQr/owncr and 

OEM printer and in]c operating paramctera 

Although tho SHA 1 and HMAC proc e ss w ill bo fast enough on tho omboddod CPU (tho program 
15 code wi ll be e xecut i ng from ROM), it may b e that th e asymmetric decryption w ill b e s l ow. And this 
becomes mor e l iko l y with oach oxtra lovol of outhonticat l on. I f this i s tho cas e (as is l i k e ly), 
hardware acc ele rat i on is r e quir e d. 

A ch e ap form of hardware acco l orat i on takes advantage of the fact that in most cases tho sam e 
20 program is loaded oach t i m e , w i th tho first t i me l i kely to bo at pow e r up. Tho hardwar e 

acc e l e rat i on i s s i mply data storag e for tho authorizodDig e et which m e ans that th e boot procedur e 
now i s: 

olowCru_bootloadcrO (data, — aig) 

localDigcot < — SIIA l(data) 
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— (localDigcot = prcviouolyStorcdAuthorizcdDigGot ) 

jump — to program code at — data otart — addrcoa// will never 

return 
Bise 

5 authorigedDigoot < — decrypt (oig, bootOlccy) 

eaepcctedDigeot 0x00 | 0x01 1 OxFF . . OxFF | 

Ox0 03 0213 0 01)06052DOB03021AOD000 4 14 | localDigeot) 

^ — (authorigcdDigcot ejcpcctedDige &fe^ 

previouolyStoredAuthorigcdDigcat < — localDigcat 

10 jump to program code at data otart addreoo// will never 

return 

ElDC 

// program code ia iinauthoriged 

Endlf 

15 Th i s procoduro moans that a reboot of th e same author i zed program oodo wi l l on l y requiro SHA 1 
proc e ss i ng. At power up, or if new program code is l oaded (o.g. an upgrade of a driver over the 
i nt e rn e t), th e n th e full authorization via asymm e tr i c d e crypt i on tak e s place. Th i s i s b e causo the 
stored digest w i ll not match at pow e r up and whenever a now program i s l oaded. 

20 Th e question i s how much prosorvod spac e is requ i red. 

Each dig e st requ i res 160 bits (20 bytes), and th i s is constant regard l ess of the asymm e tr i c 
e ncryption scheme or the key l ength. Wh il e it is poss i ble to reduce this numb e r of bits, th e r e by 
sacrificing s e curity, the cost i s sma l l enough to warrant k ee ping th e fu ll d i gest. 
25 Hcwover e ach level of boot loader requires its own digest to be preserv e d. Th i s gives a max i mum 
of 20 bytes p e r l oader. Dig e sts for op e rat i ng param e t e rs and i nk l e vels may a l so bo prosorvod i n 
tho same way, although those authent i cat i ons shou l d bo fast e nough not to requ i r e cach e d 
storage. 

30 Assuming SoPEC provid e s for 12 d i gests (to bo gonorous), th i s i s a tota l of 2 4 0 bytes. Th e se 2 4 0 
bytes cou l d oao i ly bo storod as 60 x 32 b i t registers, or probably more convon i ontly as a small 
amount of RAM (eg 0.25 — 1 Kbyt e ). Provid i ng something like 1 Kbyte of RAM has tho advantage 
of al l ow i ng the CPU to stor e other us e ful data, a l though this is not a requirement. 

35 In g e nera l , i t is useful for tho boot ROM to know wh e ther i t i s be i ng start e d up duo to power on 
r e s e t, GP I O activity, or activity on tho USB2. I n the form e r case, it can ignor e the prev i ous l y 
stor e d va l ues (e i ther 0 for r e gist e rs or garbag e for RAM). In tho latter cases, i t can use tho 
pr e viously storod va l ues. Evon without th i s, a startup va l u e of 0 (or garbag e ) m e ans tho digest 
won't match and therefore th e auth e ntication wi ll occur i mp l iot l y. 

40 
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StT SoPEC P h syical i dent i f i cat i on 

Th e r e must b e a mapping of l ogica l to physica l s i nc e sp e cif i o SoPECs are responsib le for printing 
on particular physical parts of tho pogo, and/or have part i cular dovicos ottachod to sp e oifio p i ns. 

5 Tho i dent i fication process is most l y so l v e d by g e n e ral USB2 enumeration. 

Each slavo SoPEC will n ee d to verify tho boot broadcast mossagos roco i ved ov e r USB2, and only 
e xGCuto tho oodo i f th e signatur e s arc va l id. Sovoral lovols of author i zat i on may occur. However, 
at somo stage, this common program cod e (broadcast to a ll of tho s l av e SoPECs and signed by 
10 th e appropr i at e asymm e tr i c private key) can, among othor th i ngs, s e t th e slav e SoPECs i d 

r el at i ng to th e phys i cal l ocation. If thoro i s only 1 slav e , the id is easy to dotorm i no, but i f there i s 
more than 1 s l av e , th e id must bo dotorminod in somo fashion. For example, phys i cal l ocat i on/id 
determination may b e : 

given by the phyaical USD2 port on tho maotor 

15 -* rolatod to tho phyoical wiring up of the USD2 intorconnocts 

baood on GPIO wiring. On othor oyatoms, — a particular phyoical 

arrangotnont of SoPECs may oxiot ouch that each olavo SoPEC 
will have a different oot of connoctiono on GPIOo , For 
oxamplc^ — one SoPEC maybe in charge of motor control^ — while 
20 another may be driving the LEDg etc. The unuocd GPIO pino 

(not neceooarily the same on each SoPEC) — can be act as input o 
and then tied to 0 or 1 , Ao long as tho connection aottingo 
arc mutually excluoive, — program code can determine which io 
which, — and the id appropriately oot, 

25 

This sch e m e of slavo SoPEC id e nt i fication do e s not i ntroduce a security br e ach. I f an attack e r 
row i ros tho pinouts to confuso identificat i on, at b e st it wi ll simply cause strange pr i ntouts (e.g. 
swapping of printout data) to occur, whil e at worst th e Print Eng i n e wi l l simp l y not function. 

30 3r8 Setting up QA C hi p keys 

In us e , e ach I NK_QA chip noods th e fo l low i ng keys: 

£ ^ - SupplylnkUo e nee^key 

K4 . - U6einkUc e nG e _koy 

35 Each PRINTER_QA chip ti e d to a sp e cifio SoPEC r e quir e s th e fol l owing k e ys: 

K q ~ PrintEngin e UoonGO_k e y 

^ - SoPECJd_koy 

Ka - UeeExtParmeUcone e ^koy 

~ UGolnkUcenGo_koy 
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Nolo that thoro may bo moro than on e K4 depond i ng on the numbor of PRINTER_QA ch i ps and 
SoPECs in a syotom. These koyo nood to bo appropr i atoly sot up i n tho OA Ch i ps boforo thoy w i ll 
function correctly togothor. 



5 ^tBA Origina l OA Ch i ps as r e ce i ved by a ComCo 

When or i ginal OA Chips are sh i pped from QACo to a specific ComCo th ei r k e ys are as fol l ows: 







QACo_ComCq_KoyO 




— K*^ 


QACo_ComCo_Koy1 




— Kr^ 


QACo_ComCo_Key2 
QACo_ComCo_Koy3 



All A k e ys oro only known to QACo. Note that th e s e k e ys aro d i ff e r e nt for e ach OA Chip. 

arSrS Steps at tho ComCo 

Tho ComCo is r e sponsibio for making Pr i nt Engines out of Momjot printhoads, QA Ch i ps, PECs or 
15 SoPECs. PCBs e tc. 

In addit i on, th e ComCo must custom i ze tho INK_QA ch i ps and PR I NTER_QA ch i p on board the 
print eng i ne b e for e sh i pping to th e OEM. 
Th e re aro two stag e s: 

20 -* roplacing tho kcya in QA Chipo with opccific koyo for the 

application (i,o. IISTK^QA and rRINTER_QA) 
-* — Dotting operating paramotoro ao per tho liconoo with the OEM 

3.8.2.1 — R e placing koyc 

25 Th e ComCo is issu e d QID hardwar e [A] by QACo that allows programming of the various keys 

( e xc e pt for K4) in a g i v e n QA Chip to th e final values, follow i ng tho standard ChipF/Ch i pP replace 
k e y ( i ndiroct vers i on) protocol [6]. Th e indir e ct vers i on of tho protocol a ll ows e ach 
QACo_ComCo_Koy to b e d i ff e rent for oach SoPEC, 

30 In the case of programm i ng of PR I NTER_QA's K» to be SoPECJd_k B y, th e r e i s th e add i tional 

step of transf e rr i ng an asymmotrically e ncrypted SoPECJd_koy (by the pub li c k e y) a l ong with th e 
nonce (Rp) used i n tho r e p l ac e key protoco l to th e d e v i c e that i s functioning as a Ch i pF. The 
Ch i pF must decrypt tho SoPECJd_koy so it can generat e tho standard replace key messag e for 
PR I NTER_QA (funct i on i ng as a Ch i pP i n tho Ch i pF/ChipP protocol). Tho asymmotric key pair 

35 ho l d in the ChipF e quivalent shou l d be unique to a ComCo (but st i l l known only by QACo) to 
pr e v e nt damag e i n the case of a compromise. 
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Note that th e var i ous k e ys instbl l od in th e QA Chips 




PR I NTER_QA) aro only 



known to th e QACo. The OEM on l y us e s Q I Do and QACo supplied Ch i pFs. Th e r e plac e key 
protoco l [6] allows tho programm i ng to occur w i thout compromis i ng tho old or n e w k e y. 



10 



3.8.2.2 — Sotting oporating param e t e rs 

Th e re are two sots of operating paramotors stored in PR I NTER_QA and I NK_QA: 

fixed 

upgradable 



The fix e d oporat i ng param e t e rs can bo written to by moans of a non auth e nticat e d writ e s [6] to 
M4 » via a Q I D [ 4 ], and perm i ssion b i ts set such that th e y aro R e adonly. 



15 



The upgradab l e operat i ng paramotoro can only bo wr i tten to aft e r th e QA Ch i ps hav e boon 
programm e d w i th tho correct k e ys as p e r Sect i on 3.8.2.1 . Once they conta i n th e corr e ct k e ys they 
can b e programmod w i th appropriate operating paramotors by moans of a Q I D and an 
appropriate ChipS (contain i ng matching k e ys). 



20 



AUTHENTICATION PROTOCOLS 
A I ntroduct i on 

Th e fo l lowing descr i b e s authent i cat i on protoco l s for general auth e nt i cation app l ications, but with 
sp e c i f i c r e f e r e nce to th e QA Ch i p. 



25 



Th e int e ntion i s to show th e broad form of poss i ble protocols for us e i n diff e r e nt authent i cation 
s i tuat i ons, and can bo used as a r e f e r e nc e wh e n subsequent l y defining an i mpl e m e ntat i on 
sp e cificat i on for a particu l ar application. As m e ntion e d e arlier, a l though th e protoco l s ar e 
described i n rolation to a print i ng environm e nt, many of them have widor application such as, but 
not l imit e d to, thos e descr i bed at tho end of this specification. 



30 



2 Nomenclature 

The fo ll ow i ng symbo l ic nomenclature i s us e d throughout this docum e nt: 
Table 228. Summary of symbo l ic nom e nclatur e 



Symbo l 



Descr i ption 



c rv i 



Function F, tak i ng a s i ngle parameter X 



Function F, tak i ng two param e ters, X and Y 



Xf¥ 



X concatenated with Y 



X^v¥ 



Bitw i se X AND Y 



Bitw i s e X OR Y ( i nclusive OR) 



)^ 0 Y 



Bitw i se X XOR Y (exc l us i v e OR) 



B i twise NOT X (comp l ement) 
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X < Y 


X is Qssianed the vqIuq Y 


X < fY 71 


The domain of assionment inouts to X i** Y md 7 








X is equal to Y 


V ^ V 
A— ^~T- 




Ux 


Decrement X by 1 (floor 0) 




; : 


increment X by 1 (modulo register length) 


Erase X 


Erase Flash memory register X 






SotBitQ[X, Y] 


Sot tho bits of the Flash memory register X basod on Y 




Shift register X right one bit position, taking input bit 


Z< ShtftRight[X, Y] 


from Y and placing tho output bit in Z 
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3 Pseudocode 

3r1 Asynchronous 

Th e fo ll owing ps e udocod e : 

var ° C3cprcooion 

5 m e ans the var s i gnal or output is e qual to tho eva l uat i on of tho oxproso l on. 

3r3 Synchronous 

Th e fol l owing ps e udocod e : 

var < — oxprcooion 

moans tho var r e g i ster is assigned th e r e su l t of evaluating tho oxprossion during 
10 this oycl o . 
Expr e ss i on 

Expr e ssions ar e defined using th e nomonclature i n Tab l e 228 above. Th e refore: 
var a — (a = b) 

is int e rpr e t e d as th e var s igna l Is 1 i f a i s equa l to b, and 0 othorwioo. 

15 

4- . I nt e ntional l y blank 

6 Basic Protocols 

&A Protocol b ackground 

20 Th i s protocol sot i s a r e stricted form of a more gonoral cas e of a multipi o k e y single momory 

v e ctor protoco l . I t i s a r e strict e d form i n that th e memory vector M has b ee n opt i m i z e d for Flash 
m e mory utilization: 

M ia broken into multiple momory vcctora — (oemi fixed and 

variable component o) — for the purpoooo of optimizing flaoh 

25 memory utilization. — Typically M containo aomo part a that are 

fixed at aome atage of the manufacturing proceoo — (eg a batch 
number , — ocrial number etc,)/ — and once set, — are not ever 
updated, Thia information doea not contain the amount of 
conoumablc remaining^ — and therefore io not read or written to 

30 with any great frequency. 

We therefore define Mo to bo tho M that conta i ns th e fr e qu e nt l y updated sections, 

and tho remaining Ms to bo rar e ly written to. Auth e nticated wr i tes on l y writ e to M^, and non 
auth e nticated wr i t e s can bo dir e ct e d to a specific M^. This roducos tho s i ze of permiss i ons 
that are stored I n the OA Chip (since key based wr i t e s are not required for Ms other than 

35 M q), I t a l so moans that M^ and th e r e ma i n i ng Ms can be manipulated in different ways, 

ther e by i ncreasing flash momory longev i ty. 

§t2 Requ i rcments or protocol 

Each QA Chip conta i ns tho fo ll owing valuoo: 
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N Th e maximum number of keys Icnown to the ohip. 

T The number of voctors M i s brok e n into. 

Km Array of N soorot l<oyG usod for calculat i ng Fkb[X] whoro Kh i s th e nt l i elemont of th e array. 

R Curr e nt random numb e r us e d to e nsure timo varying mossagos. Each ohip i nstance must 

5 bo soodod with a difforont init i al value Changes for oach signatur e g e neration. 

Mr — Array of T m e mory vectors. Only My can b e written to w i th an authoriz e d write, wh il e al l Mo 
can bo wr i tten to in an unauthor i zed wr i te. Wr i tes to Mq aro optim i z e d for F l ash usage, while 
updates to any other ar e expensiv e with r e gards to Flash util i zat i on, and aro expected 
to be only performed once per section of M ^^ ^ contains T, N and f i n R e adonly form so 
10 users of the ch i p can know th e s e two valu e s. 

Rp ^ T+N el e m e nt array of access permissions for each part of M. Entr ie s n-{0... T 1) he l d 
acc e ss permissions for non authenticated writes to M^ (no key required). Entr i es n~[T to 
T*N 1}ho l d access perm i ss i ons for auth e nticat e d writes to M^ for K^. P e rm i ssion choices 
for each part of M ar e R e ad Only, RoadA/Vr i to, and Decrement On l y. 

15 G 3 constants used for generating s i gnatures. C4, C^, and are constants that pad out a 

sub - m e ssage to a hashing boundary, and all 3 must bo d i ff e r e nt. 

Each QA Chip contains the following privat e function: 

Sjt B[N,X] Internal Junction only. R e turns Sfet[X], th e r e sult of applying a digital signatur e function S to 

X based upon the appropriat e key K«. Th e digital signature must b e long e nough to counter 
20 th e chanc e s of someon e g e n e rating a random signature. Th e l e ngth depends on the signature 

scheme chosen, although the scheme chosen for th e QA Chip is HMi\C SHAl, and therefore 
th e l e ngth of the signature is 160 bits. 
Add i t i ona l functions are r e qu i red i n certa i n QA Ch i ps, but thes e ar e d e scribed as requ i red. 

§73 Read Protocols 

25 The set of read protoco l s describ e the m e ans by wh i ch a Syst e m roads a sp e cific data v e ctor Mt 
from a QA Chip referred to as ChipR. 

W e assume that th e communications link to ChipR (and th e r e fore Ch i pR i ts el f) i s not trust e d. I f i t 
w e r e trust e d, the Syst e m could simply road the data and th e r e is no issu e . S i nc e the 
commun i cations l ink to ChipR is not trust e d and Ch i pR cannot be trusted, the System needs a 

30 way of authenticating the data as actual l y b e ing from a r e al ChipR. 

Since the read protoco l must be capable of b ei ng imp le m e nted in phys i cal QA Ch i ps, we cannot 
use asymmetric cryptography (for example the Ch i pR signs the data w i th a private key, and 
System validates the s i gnature using a publ i c key). 
Th i s document d e scribes two road protocols: 

35 direct validation of roado 

indirect validation of roado. 

D i rect Val i dation of Roado 

In a d i r e ct validat i on road protoco l we requir e two QA Ch i ps: ChipR I s th e QA Chip b ei ng read, 
and ChipT l o the QA Ch i p wo entrust to tol l us wh e ther or not the data r e ad from ChipR is 

40 trustworthy. 
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Tho bas i c i doa is that systom asks ChipR for data, and ChipR responds with tho data and a 
s i gnaturo basod on a ooorot koy. System thon asks Ch i pT whether the s i gnoturo suppl i ed by 
ChipR i s corr e ct. If Ch i pT r e sponds that i t i s, then Syst e m can trust that data just read from 
Ch i pR. Ev e ry t i m e data i s r e ad from Ch i pR, the val i dat i on procedure must b e carried out. 
5 Dir e ct va li dat i on r e quir e s the Systom to trust tho commun i cat i on l ine to ChipT. This cou l d bo 

b e cause ChipT is in phys i cal prox i mity to the System, and both System and ChipT are in a trusted 
( e .g. S i lverbrook secure) env i ronment. How e v e r, since we need to val i date tho r e ad, ChipR by 
d e finition must bo i n a non - trust e d e nvironment. 

10 Each QA Chip protects its s i gnature generation or v e r i fication mechanism by the use of a nonce. 

The protocol requ i res th e following publ i c l y ava i lab l e functions i n ChipT: 
RandomD Returns R (does net advance R). 

T e st[n,X, Y, Z] Advances R and returns 1 if SKft[R | X | C^|Y] - Z. Oth e rwise returns 0. The t i me 
15 taken to ca l cu l at e and compare s i gnatures must b e independent of data content. 

Th e protocol requires tho following public l y ava i lable functions i n ChipR: 

Read[n, t, X] Advances R, and r e turns R, Mt, SK fl [X | R | C 4 [MJ. Th e tim e taken to ca l cu l at e tho 

signature must not bo based on th e cont e nts of X, R, Mt, or K. I f t is i nva l id, th e 
20 function assumes t~0. 

To road ChipR's memory Mt in a va li dated way, System p e rforms th e fol l owing tasks: 

a. Systom cal l s Ch i pTs Random funct i on; 

b. ChipT returns R|. to System; 

25 c. Syst e m ca ll s Ch i pR's R e ad function, pass i ng i n some k e y numb e r n1, the d e sir e d data vector 
numb e r t, and R^: (from b); 

d. Ch i pR updates Rk, th e n calcu l at e s and r e turns Rr, MH tr-SKB^tRpt^^jG^IMy^ 

e . Systom calls Ch i pT's Test function, passing i n the k e y to use for signature verification n2, and 



30 f. Syst e m chocks r e spons e from ChipT. I f tho response is 1, then tho Mt road from ChipR i s 
consider e d to be valid. I f 0, then tho Mt r e ad from Ch i pR is considered to be inva l id. 

Th e cho i ce of n1 and n2 must be ouch that ChipR's K^^ - ChipTs 

35 Th e data flow for th i s r e ad protocol i s shown in F i gure 328. 

From th e Syst e m's persp e ct i v e , th e protoco l wou l d tak e on a form lik e th e fol l owing ps e udocod e : 




< — ChipT . Random ( ) 



40 



R r, CIGft — < — ChipR . Read ( IcoyNumOnChipR , dcaircdM, R^) 

eJe--^ ChipT. Toot (kcyNumOnChipT, R^, M^, SIG« ^ 

If (ok ^ 1) 
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// Mtt io to be tJfuotQd 
EloG 

// Mr ia not to bo truotQd 
Endlf 

With r e gards to secur i ty, if an attacker finds out ChipR' s K^, they can roplaco the ChipR by a fako 
Ch i pR b e caus e th e y can cr e at e s i gnatur e s. Likewi s e, If an attack e r finds out ChipT's K^a, thoy can 
r e plac e tho Ch i pR by a fak e Ch i pR b e caus e Ch i pR's K^^ ~ Ch i pTs K^. Mor e over, thoy can use 
th e Ch i pRs on any syst e m that shar e s the samo koy. 

Th e on l y way of restrict i ng e xposur e du e to koy r e v e a l s is to r e strict th e number of systems that 
match ChipR and ChipT. i.e. vary th e k e y as much as poss i b le . Th e d e gr e e to which this can b e 
don e w ill depend on th e appl i cation. In th e cas e of a PR I NTER_,QA acting as a Ch i pT, and an 
I NK_QA acting as a Ch i pR, th e same koy must bo usod on oi l systems whoro tho particular 
INK_QA data must be va l idated. 

I n a ll casos. ChipR must contain suffici e nt information to produc e a signature. Knowing (or f i nd i ng 
out) th i s i nformation, what e ver form it i s i n, al l ows clon e Ch i pRs to bo built. 

5 . 3.2 I ndirect Val i dation of R e ads 

I n a d i rect validation protoco l (s ee S e ction 5.3.1), th e System va li dat e s th e corr e ctn e ss of data 
r e ad from Ch i pR by m e ans of a trust e d chip ChipT. Th i s Is possib l e b e cause Ch i pR and ChipT 
shar e som e secret Informat i on. 

How e v e r, it is poss i bl e to ext e nd trust via indir e ct validat i on. This is required whon wo trust ChipT, 
but Ch i pT doesn't know how to va li dat e data from Ch i pR. I nst e ad, Ch i pT knows how to va l idat e 
data from Chipi (som e int e rm e d i ate ch i p) wh i ch in turn knows how to validate data from eith e r 
another Chip l (and so on up a cha i n) or Ch i pR. Thus w e have a cha i n of validation. 

The moans of val i d ation c h ai ns i s translation of signatures. Ch i pU trans l at e s signatur e s from 
high e r up th e chain ( ei ther Chip l ^ or from Ch i pR at th e start of th e chain) into signatur e s capabl e 
of being passed to the n e xt stage in th e cha i n ( ei ther Ch i p l fl 4 4 or to Ch i pT at th e e nd of tho chain). 
A giv e n Ch i p l can only trans l at e signatures if i t knows th e koy of the pr e v i ous stage i n tho cha i n 
as w el l as th e key of tho next stage in tho chain. 

Th e protoco l requ i res th e fol l owing pub l icly avai l ab le functions i n Ch i pl: 
RahdomQ Returns R (does not advance R). 

Trans l ato[n1,X, Y, Z,n2.A] — Returns 1 , S Kn a[A | R|C4 | Y] and advances R if Z - SK ft ^[R | X | C4 i¥^ 

Oth e rw i se returns 0, 0. The tim e taken to calculate and compar e 
s i gnatures must b e ind e pend e nt of data cont e nt. 
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Tho data flow for th i s signature translation protocol i s shown in F i gure 320: 

Not e that R^ t ^ i s ovontua li y Rk, and i s eventually R^. I n tho multip le Ch i p l cose, Rp r^ is the 
of Ch i p l B -4 . and is of Chip W Th e Rp ,^ of th e first Chipl in th e cha i n is Rr, and the Rn et^ 
5 th e last Chip l i n the chain i s R^:. 

Assuming at least 1 ChipT, th e Syst e m wou l d nood to porform tho follow i ng tasks in order to road 
ChipR's memory in an indir e ctly va l idatod way: 
a. System ca ll s Ch i pl n s Random function; 

c. System co l ls Ch i pR's Road function, passing i n some key number nO, tho des i red data vector 
number t, and R ^ o (from b); 

d. Ch i pR updat e s Rr, th e n calculat e s and r e turns Rr, MR tr-SKBgERtn|RRiC4{MR^ 
o. System ass i gns Rr to Rp ,^vnaftd-SKBotRte|RRjG4|Hd-t^-SIG^ 

15 f. System ca l ls th e n e xt ch i p i n the chain's Random function ( e ith e r Ch i p l n 4 4 or Ch i pT) 

g. Th e n e xt chip -i n - th e- chain wi ll r e turn R» eK t to Sy s t e m 

h. Syst e m calls Ch i pU's Trans l ate funct i on, passing In n1 ^ (translation i nput key number), Rp rev? 
Mr i, SIGp iev)r-R2 n (translat i on output key numb e r) and th e r e sults from g (Rn eatf)? 

— Chip l returns t e stR e sult and S I G ^- to Syst e m 
20 fz — If t e stR e su l t 0, then tho va li dation has fai l ed, and tho Mt road from ChipR i s cons i dered to bo 
invalid. Exit with fa il ur e , 
k. If tho next chip in th e cha i n i s a Chip!, assign SIG4 to S I G p^ v and go to st e p f 
1^ — Syst e m cal l s ChipT's T e st function, pass i ng in nt, Rp ^ v^ Mri, and S I Gp revf 
m. System cal l s System checks response from Ch i pT. I f tho rosponso is 1, then the M| road from 
25 Ch i pR i s cons i d e r e d to b e va li d. If 0, th e n th e Mt r e ad from ChipR i s cons i d e r e d to b e invalid. 

For th e Trans l at e function to work, ChipU and Chipl^ o ^ must shar e a k e y. Th e choic e of n1 and n2 
in th e protocol d e scrib e d must be such that Ch i pU ^s-Kn a ~ Ch i p l n ^^^s-Ko^T 
Not e that Trans l at e is e ss e ntia l ly a "T e st plus resign" function. From an imp le m e ntat i on po i nt of 
30 view the first part of Translate is identica l to T e st. 

Not e that th e use of Ch i pis and th e trans l ate function merely allows s i gnatures to be transformed. 
At tho end of tho translation cha i n (if present) w i l l be a Ch i pT r e quir i ng th e u se of a Tost function. 
Th e re can b e any number of Ch i pis i n the chain to Ch i pT as l ong as the Translate funct i on is used 
35 to map s i gnatures botwoon ChipU and Ch i p l n ^ ^ and so on unt il arr i val at the f i na l destination 
(ChipT). 

From th e System's porspect i vo, a read protoco l us i ng at le ast 1 Ch i p l wou l d tak e on a form liko 
the fo ll ow i ng pseudocode: 
40 Raefife-^ — Chipl [ 0 ] , Random ( ) 
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R^reVT — — SiGp^— < ChipR. Read (IccyNumOnChipR, dcoircdM, 

ok ^ 1 
i « 0 

5 whilo — ( (i < iMax) — AND ok) 

For i < 0 to il>4a3c 

If (i = iMax) 
Rae*fc— < — ChipT . Random ( ) 

ElOG 

10 R«e3tfe— < — Chipl [i l l] . Random ( ) 

Endlf 

-ekr-, < Chipl [i] , Tranolatc ( iKcy [i] , — ^p rc^i — P^— 

&^Gp ^, OKoy[i], Ra e*fr-f 
-Rp^^^ ~ Rncxt 

15 If (ok = 0) 

// Mit io not to be truotod 

Endlf 
EndFor 

ok < — ChipT . Toot ( kcyNumOnChipT , — Rp^-, — Mr-, — SiG^^-f 
20 If (ok » 1) 

// Mtt io to be truotod 

Elac 

// Mh io not to be truotod 
Endlf 

25 
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5.3.3 Add i tional Commonts on Reads 

I n the Momjot pr i nt i ng env i ronment, c e rtain imp le mentat i ons wi ll ox i st whoro the op e rat i ng 
param e t e rs ar e stored in OA Ch i ps. In th i s case, tho syst e m must r e ad tho data from tho QA Chip 
using an appropr i at e road protocol. 

5 

I f th e connoct i on i s trusted ( e .g. to a v i rtual QA Chip in softwaro), a gener i c Road is sufficiont. If 
the connect i on i s not trust e d, it Is ideal that the System hovo a trust e d Ch i pT i n th e form of 
softwaro ( i f possiblo) or hardware (e.g. a QA Chip on board th e sam e si l icon package as tho 
microcontro ll or and firmwar e ). Whothor i mplomontod i n softwaro or hardware, the QA Chip shou l d 
10 contain an appropriat e key that i s uniqu e p e r pr i nt ong i no. Such a key s e tup would al l ow r e ads of 
print ongino parameters and a l so allow indirect reads of consumables (from a consumablo QA 
GWp)r 

I f tho ChipT is phys i cal l y separate from System (o.g. ChipT i s on a board conn e cted to System) 
15 Syst e m must also occaeionaHy (bas e d on syst e m clock for e xamp le ) ca l l ChipTs Tost funct i on 
with bad data, oxpoct i ng a 0 r e sponse. Th i s is to r e duc e th e possibi l ity of somoono i ns e rt i ng a 
fak e Ch i pT i nto th e system that a l ways r e turns 1 for th e T e st function. 

§t4 Upgrade Protocols 

20 This sot of protoco l s d e scrib e tho moans by which a Syst e m upgrades a sp e cific data vector M t 
w i thin a QA Chip (ChipU). Th e data vector may contain i nformat i on about th e funct i oning of the 
d e v i ce (o.g. th e current maximum op e rat i ng spood) or tho amount of a consumablo r e ma i ning. 

Th e updat i ng of Mt i n ChipU fa ll s i nto two categorios: 

25 non authcnticatQd writco, — whoro anyone io able to update the 

data vector 

authentioated writes, — where only authorigcd ontitiea arc ab 3re 

to upgradoo data vectors 

30 €mW Non authenticated writes 

Th i s is tho most fr e qu e nt type of writ e , and tak e s p l ace betwe e n th e System / consumabl e during 
normal everyday op e rat i on for M^, and during the manufactur i ng process for I VI4 ^t 

I n th i s kind of wr i to, tho System wants to change within ChipU subject to P. For e xampl e , th e 
35 System cou l d b e decrementing tho amount of consumablo rema i n i ng. A l though Syetom dooe not 
ne e d to know and of tho Kg or ovon havo accoes to a trust e d chip to perform tho writo, tho 
System must fol l ow a non authenticated wr i te by an auth e nt i cat e d r e ad i f i t n e eds to know that th e 
wr i t e was successfu l . 

40 
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Th e protocol roquiros Ch i pU to contain th e fo ll owing public l y availab le funct i on: 

Writo[t, X] Wr i t e s X ov e r thos e parts of M| subject to Pt and tho e xisting va l ue for M. 

To auth e nticat e a writ e of Ma a w to Ch i pA's momory M: 
a. Systom ca l ls Ch i pU's Wr i t e function, passing in Mp ^^ 
5 b. Tho authontication procoduro for a Road is carriod out (goo Section 5.3 on pago 1 ); 

c. If the r e ad succoods in such a way that hA^m " M roturnod in b, tho wr i t e succ e eded. I f not, it 
failed. 

Not e that if th e se param e t e rs are transmitted ov e r an e rror prono communications lino (as 
10 oppos e d to i nterna l ly or using an add i tiona l e rror free transport l ayer), then an additiona l 

ch e cksum would bo r e quired to prevent th e wrong M from being updat e d or to prevent tho corr e ct 
M from b ei ng updated to th e wrong valuo. For example, SHA 1[t,X] should b e add i t i onally 
transf e rr e d across tho commun i cations l ino and chocked (e i ther by a wrapp e r function around 
Wr i t e or i n a var i ant of Wr i te that takes a hash as an extra parameter). 

15 

This i s th e most fr e qu e nt type of wr i t e , and tak e s p l ac e b e twe e n th e Syst e m / consumabl e dur i ng 
normal e v e ryday operation for M^, and during tho manufacturing process for M4 ^t 

5. 4 .2 Auth e nt i cat e d wr i tes 

20 I n th e OA Ch i p protoco l s, is d e fin e d to be th e only data v e ctor that can b e upgraded i n an 
authenticated way. This decis i on was mad e pr i mari l y to s i mp l ify f l ash manag e ment, a l though It 
also he l ps to r e duc e th e permissions storag e r e qu i rements. 

In this kind of write, Syst e m wants to chang e Chip U's Mo in an author i zed way, without be i ng 
25 subj e ct to th e p e rm i ssions that apply during norma l operation. For examp l e, a consumable may 
be at a refi l l i ng station and th e normal l y Decr e m e nt Only section of Mq should b e updated to 
i nclud e th e n e w valid consumable. In th i s cas e , th e chip whoso is boing updated must 
auth e nticat e th e wr i tes b ei ng g e n e rated by the external Syst e m and i n addit i on, apply th e 
appropr i ate permission for th e k e y to ensure that on l y tho correct parts of are updated. Hav i ng 
30 a diff e r e nt p e rm i ssion for e ach k e y is requ i red as wh e n mu l t i p l e k e ys ar e i nvolv e d, al l k e ys shou l d 
not necessarily bo given op e n access to Mq. For examp l e, suppose Mo conta i ns pr i nt e r speed and 
a count e r of money ava i labl e for frank i ng. A ChipS that updates printer speed should not be 
capab l e of updating th e amount of money. Sinco Pu ^^^ii^ . is used for non authont i cated writes, e ach 
K ft has a corresponding permiss i on P.^^ that determin e s what can bo updat e d i n an authent i cat e d 
35 writ e . 

Th e bas i c pr i nc i p l e of tho authenticated wr i t e (or upgrade) protoco l i s that the now valuo for tho M| 
must b e signed before ChipU acc e pts it. Th e OA Chip r e spons i ble for g e nerat i ng tho signature 
(Ch i pS) must first validate that tho ChipU i s va l id by r e ading tho old va l ue for Mt. Once tho old 
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vaiuo i s soon as valid, a n e w va l ue can bo signod by ChipS and th e resu l tant data p l us s i gnatur e 
passed to ChipU. Note that both chips distrust oach other. 

Th e r e aro two forms of authonticatod writoo. Tho first form is whon both Ch i pU and ChipS d i r e ct l y 
5 store tho sam e key. Tho second i s whon both ChipU and ChipS storo difforont versions of tho key 
and a transform i ng procedure i s used on tho stored key to g e nerate th e required key i .e. tho key 
is indir e ct l y stored. Tho second form is slight l y moro comp li cated, and on l y has valu e when tho 
ChipS is not read il y available to an attacker. 

10 5.^.2.1 — Diroct authonticatod writoG 

Tho d i rect form of tho authonticatod wr i te protoco l is used wh e n th e ChipS and ChipU aro e qual l y 
availab le to an attack e r. For exampl e , suppos e that Ch i pU contains a print e r's operating speed. 
Suppos e that tho speed can bo i ncreas e d by purchas i ng a ChipS and inserting it into tho printer 
system. I n th i s case, th e ChipS and Ch i pU are equally ava i lablo to an attack e r. This i s difforont 

15 from upgrading tho printer ov e r tho i ntern e t whor e th e offoctive Ch i pS i s in a romoto location, and 
th e r e by not as readi l y availablo to on attacker. 

The diroct authent i cated wr i te protoco l requires Ch i pU to contain tho follow i ng public l y ava il able 
funct i ons: 

20 Road[n, t, X] Advances R, and returns R, Mt r-SKf^fXiRIG^IM J. Th e tim e takon to calcu l at e tho 

signature must not bo based on tho cont e nts of X, R, Mt, or K. 

WritoA[n, X, Y, Z] Advanc e s R, replaces by Y subject to P4^, and r e turns 1 only I f 

SK«tRpqG 4 | Y] - Z. Othonftfioo returns 0. Tho t i me tak e n to ca l cu l ate and 
25 compare signatures must be ind e p e ndent of data cont e nt. This function i o 

id e ntical to ChipT's T e st function except that it add i t i ona l ly writ e s Y subject to 
Rp^ n to Its M whon tho signature matches. 

Auth e nt i cat e d writos requ i r e that th e Syst e m has access to a Ch i pS that i s capab le of gen e rat i ng 

appropriate s i gnatures. 

30 

In its bas i c form, Ch i pS r e quir e s th e fol l owing variables and function: 

S i gnM[n,V,W,X,Y,Z] Advances R, and returns R, S k»{W|R{G 4 | Z] on l y if Y - SK B{V^W^e:^^X^T 

Otherwise returns a ll Os. Th e time taken to calculate and compar e s i gnatures 
must bo i ndepend e nt of data content. 
35 To update ChipU'o M vector: 

a. Syst e m calls ChipU's Read function, pass i ng in n1, 0 (desired vector number) and 0 (tho 
random va l u e , but i s a don't care va l ue) as tho input parameters; 

b. ChipU produces Ru r^7-SK»4.{&tRuj€4.|IV U] and returns those to System; 
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0. Systom cal l s ChipS's S i gnM function, passing in n2 (tho koy to bo us e d in Ch i pS), 0 (th e 
random vaiuo ao usod i n a), Ru i-Myoi-SKft4{QfRyj€4.{My o], and My (tho d e s i rod vector to b e 
wr i tten to ChipU); 

d. Ch i ps produces Rs and SK fl2Ef^|Rs{G4 . | M&] i f the inputs were val i d, and 0 for a ll outputs if th e 
5 i nputs wore not va l id. 

e . I f valu e s returned in d aro non zero, then Ch i pU i s consider e d auth e nt i c. Systom can th e n ca ll 
ChipU's WriteA function with thos e valu e s from d. 

f. ChipU shou l d r e turn a 1 to indicate success. A 0 shou l d only be returned i f the data g e n e rated 
by Chips i s incorrect (e.g. a transmission error). 

10 

Th e choice of n1 and n2 must b e such that ChipU's Kn^ ~ ChipS's K^ ar 

The data flow for authenticated writ e s i s shown in F i gure 330. 

15 Note that this protocol allows ChipS to gen e rat e a signature for any desir e d m e mory vector MB, 
and th e r e fore a stol e n ChipS has th e ability to ofFoctiv el y rend e r th e part i cu l ar k e ys for those parts 
ef-M o in ChipU i rre l evant. 

It is th e r e fore not rocommondod that th e bas i c form of ChipS be ev e r i mplem e nt e d e xc e pt in 
20 specifically contro l l e d circumstances. 

I t i s much mor e secure to li mit the pow e rs of ChipS. Th e follow i ng list covers some of the variants 
of l i m i ting tho pow e r of Ch i pS: 
a. the ab ili ty to upgrade a l imited number of t i mes 
25 b. th e ab ili ty to upgrade bas e d on a cr e dit value — i. e . th e upgrad e amount is decr e m e nt e d from 
th e l oca l valu e , and effect i ve l y transferred to the upgraded d e vic e 

c. tho ability to upgrad e to a fix e d value or from a l i mit e d li st 

d. tho abi li ty to upgrade to any vaiuo 

e . th e ab i l i ty to only upgrade certain data f i elds with i n M 

30 

I n many of th e s e var i ants, th e ab i lity to refresh th e ChipS in some way (e.g. w i th a now count or 
cr e d i t va l u e ) wou l d bo a usefu l f e ature. 

I n certa i n oases, the variant i s i n Ch i pS, wh i l e Ch i pU remains the same. It may also b e d e sirab le 
to cr e at e a Ch i pU variant, for examp le on l y a l low i ng Ch i pU to on l y bo upgrad e d a sp e c i f i c numb e r 
35 of t i m e s. 

5. 4 .2.1.1 Variant example 

Th i s section d e ta i ls th e variant for tho abil i ty to upgrade a memory vector to any va l ue a specific 
number of timos, but tho upgrad e i s on l y a ll owed to affect certa i n fi e lds within the memory vector 
40 i .e. a comb i nation of (a), (d), and (e) above. 
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In th i s e xamp l o. Ch i ps requir e s the fol l owing var i ab le s and funct i on: 

CountR e ma i ning Part of Ch i pS's Mq that conta i ns th e number of s i gnatures that Ch i pS Is 

a ll owod to gonorato. Docromonts with oach successful ca ll to SignM and 
5 S i gnP. P e rm i ssions i n Ch i pS's for th i s part of needs to bo 

R e adon l y onc e Ch i pS has b ee n s e tup. Th e r e for e CountR e ma i n i ng can 
only b e updated by another ChipS that w il l perform updates to that part of 
M o (assuming ChipS's Ps al l ows that part of Mq to b e updat e d). 

Q Part of M that contains the write permissions for updating Ch i pU's M. By add i ng Q to 

10 Ch i pS w e a ll ow diff e r e nt Ch i pSs that can updat e d i fferent parts of My T 

Permissions in ChipS's P^,^^ for th i s part of M n ee ds to b e Readon l y once 
Ch i pS has b ee n s e tup. Ther e for e Q can only b e updat e d by anoth e r ChipS 
that wil l perform updates to that part of M. 

S i gnM[n,V,W,X,Y,Z] — Advances R, d e crements CountR e main i ng and r e turns R, Zqx (Z app l i e d to 
15 X w i th permissions Q), SKB[W | R|C4 fe x] only rf Y - Skh[V|W | C:^|X1 and 

CountRemain i ng =^ 0. Otherwise returns al l Os. Tho timo taken to ca l culate 
and compare s i gnatures must b e i nd e p e nd e nt of data cont e nt. 

To updat e Ch i pU's M v e ctor: 
20 a. System ca l ls ChipU's R e ad funct i on, passing I n n1, 0 (d e s i red vector number) and 0 (the 
random valu e , but is a don't care va l ue) as the input param e t e rs; 

b. Ch i pU produces Ry l-Myo^-SKf^^{O^R^^€:^^My o] and returns these to System; 

c. Syst e m ca ll s ChipS's S i gnM funct i on, passing i n n2 (th e k e y to b e us e d in ChipS), 0 (as us e d 
i n a), Ry T-Mygr-SKft^t&PujG^IMy oli and My (tho des i red vector to bo wr i tten to Ch i pU); 

25 d. ChipS — produces — Rs? — Mq© — (proc e ss e d — by — runn i ng — Mg — aga i nst — My© — using — Q) — an4 
SKHgtRt^|RsjG4.|MQ p] i f th e inputs woro valid, and 0 for a l l outputs if th e i nputs w e r e not va li d. 
e . I f va l u e s r e turn e d in d are non z e ro, then Ch i pU is cons i d e r e d auth e nt i c. System can then ca ll 

ChipU's Writ e A function with th e s e values from d. 
f-. — ChipU shou l d r e turn a 1 to i nd i cate success. A 0 should on l y b e r e turn e d i f th e data g e n e rat e d 
30 by ChipS is i ncorr e ct ( e .g. a transmiss i on e rror). 

The choice of n1 and n2 must be such that ChipU's K^ ^ ~ Ch i pS's K^ y 

Tho data flow for th i s variant of authent i cat e d wr i t e s is shown i n F i gure 331 . 

35 

Noto that Q in ChipS is part of Ch i pS's M. Th i s a ll ows a user to s e t up Ch i pS with a pormisoion 
sot for upgrades. This should bo don e to ChipS and that part of M d e s i gnat e d by ■ Pq T -y set to 
R e adon l y b e for e Ch i pS is programmed with Ky r-tf-K s is programmed with Ky first, there is a r i sk 
of som e on e obta i n i ng a ha l f - s e tup ChipS and changing al l of My i nstead of on l y tho sect i ons 
40 sp e c i fi e d by Q. 
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I n addition, CountRomain i ng i n ChipS n e eds to b e s e tup (including making it R e adon l y in Ps ) 
before Ch i pS is programmed with Ky. Ch i pS should th e r e foro bo programmod to on l y p e rform a 
l imited numb e r of SignM operations (ther e by lim i t i ng comprom i s e e xposure i f a ChipS i s stolon). 
5 Thus ChipS wou l d i ts el f neod to b e upgrad e d with a new CountR e maining ovory so ofton. 

5.4,2,2 — indir e ct authonticatod writos 

Th i s sect i on d e scrib e s an altornativo authonticatod writo protoco l when ChlpU is more r e adily 
ava i lable to an attack e r and ChipS is lo ss ava i lab l e to an attack e r. We can store diff e r e nt keys on 
10 Ch i pU and Ch i pS, and imp l ement a mapp i ng between them in such a way that if the attackor is 
ab l e to obtain a key from a given ChipU, th e y cannot upgrad e al l ChlpUs. 

I n th e genera l case, this is accomp l ishod by stor i ng key on ChipS, and Ky and f on Ch i pU. Tho 
re l at i onsh i p i s f(K&) ~ Ky such that knowledge of Ku and f does not make i t oasy to dotormino K^ t 
15 Th i s i mplios that a on e way function is dosirab l o for f. 

In the OA Chip domain, w e d e fine fas a numb e r (e.g. 32 b i ts) such that SHA1(Ks | f) " Ky t-The 
valu e of f (random betw ee n ch i ps) can be stored in a known location w i thin M4 as a constant for 
th e li f e of th e QA Ch i p. It is possible to use the sam e f for multip l e relationships if d e sired, since f 
20 i s pub l ic and the prot e ction lies in tho fact that f var i es between QA Chips (preferab l y in a non 
pred i ctab le way). 

Tho ind i roct protocol i s th e same as the d i r e ct protocol w i th th e exception that f is addit i ona l ly 
passed i n to tho SignM function so that Ch i pS is ablo to g e n e rat e tho corroct key. Tho System 
25 obta i ns f by performing a Road of M^. Note that a l l oth e r functions, i nclud i ng th e Writ e A funct i on i n 
ChipU, aro i dont i cal to th e ir direct authent i cat i on count e rparts. 

SignM[f,n,V,W,X,Y,Z] Advanc e s R, and returns R, S^[W|R|C4|Z] on l y i f Y - S^[V|W | C4 .pq 

and CountR e maining 0. Oth e rwis e r e turns a l l Os. The time taken to ca l cu l ate 
and compare signatures must be independent of data content. 

30 

B e fore reading Ch i pU's m e mory Mq (tho pro upgrad e value), tho System must extract f from 
Ch i pU by perform i ng th e fo ll ow i ng tasks: 

a. Syst e m ca l ls ChipU's Road function, passing i n (dontCar e , 1. dontCar e ) 

b. Ch i pU returns M4, from wh i ch System can e xtract fy 
35 c. Syst e m stores fy for future use 

To update ChipU's M v e ctor, th e protoco l i s id e nt i cal to that descr i b e d i n tho basic auth e nt i cat e d 
write protoco l with tho e xcept i on of stops c and d: 

c. Syst e m ca l ls Ch l pS's S i gnM function, pass i ng i n fy, n2 (the key to b e used in Ch i pS), 0 (as 
40 used in a), Ry r-MyorSKn^fOtRy^G^IMy o], and M& (th e d e sir e d vector to bo wr i tt e n to ChipU); 
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d. Ch i ps produc e s Rs -aft^ftj<KBa>t^iRs|€4 . | MQ] i f tho i nputs were va li d, and 0 for all outputo i f th 

i nputs w e r e not va li d. 

In addit i on, tho ohoico of n1 and n2 must bo such that ChipU's - Ch i pS's fy (Kfta)T 

Noto that fy i s obta i ned fronn M4. without validation. This i s b e cause th e r e i s noth i ng to b e gainod 
by subv e rting th e valu e of fy, (b e cause th e n th e signatures won't match). 

From th e Syst e m's p e rsp e ctive, the protocol would tak e on a form l ik e the follow i ng psoudocodo: 

don t Care, l^ - — dontCaro < — ChipR . Read ( dont Care , 1 , dont Care ) 
= extract from M r 



R ^, My, SIGt» < ChipU . Read ( JecyNumOnChipU , 0 , 0 ) 

R s, SIGs » ChipC.Signr42 (f^, kcyNumOnChipG , 0, 11^, My, CIG^^, M^ ^ 

T f ^ T ? — r«Trt r\ \ 

// ChipU and thcroforc My io not to be truatod 
Eloc 

— // ChipU and therefore My can be truotcd 

o3c = ChipU. WritGA(koyNumOnChipU, R&, M^, CXCff h 
If (o3e) 

// updating of data in ChipU waa oucccoaful 

Bloc 

// tranomiooion error during WritcA 



5.^.2.2.1 var i ant exampl e 

Tho i nd i rect form of tho examp le from S e ction 5.4.2.1 .1 i s shown hero. 

S i gnM[f,n,V,W,X,Y,Z] Advanc e s R, d e cromonts CountR e ma i ning and returns R, Zqx (Z app l ied to 



Boforo reading Ch i pU's memory Mo (th e pre upgrad e va l ue), th e System must e xtract f from 
ChipU by performing tho fo l low i ng tasks: 

a. Syst e m calls ChipU's R e ad function, pass i ng i n (dontCare, 1, dontCare) 

b. Ch i pU returns M^, from which System can extract fy 

c. System stores fy for future use 




Endlf 



Endlf 



X with perm i ss i ons Q). S ^ [W|R|C :^jZQ x] only if Y ~ S^[V[W | C4 jX]-affd 
CountRemain i ng > 0. Otherw i s e returns o il Os. The t i me tak e n to calculat e and 
compare signatures must b e i ndep e ndent of data content. 
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To update Ch i pU's M v e ctor, the protoooi i s id e ntical to that dOGcribod i n tho basic authonticat e d 
wr i t e protoco l with th e e xc e ption of st e ps o and d: 

c. Syst e m cal l s ChipS's SignM function, passing in fy, n2 (tho koy to bo usod in ChipS), 0 (as 



d. Chips — produc e s — Rs? — Mq q (processed — by running — My against My^ using — Q) — and 
Sftj^Kna)tRy|Rs|G4|MQ p] if th e inputs w e re va li d, and 0 for al l outputs if tho i nputs w e re not va li d. 

I n add i t i on, tho choic e of n1 and n2 must b e such that ChipU's K^^ - Ch l pS's fy O<B2)T 

Note that fy i s obtainod from M4 without validation. Th i s I s bocauso thoro is noth i ng to b e gained 
by subv e rting tho va l ue of fy. (b e caus e th e n the s i gnatur e s won't match). 

From th e Syst e m's p e rsp e ctiv e , the protocol wou l d tako on a form liko tho following pseudocode: 
dontCarc, Mr, dontCaro < — ChipR . Read ( dont Care , 1 , dontCarc ) 
= extract from 



Rtf, Mfe^, SIGtf < — ChipU . Read ( IccyNumOnChipU ,0, 0 ) 

RgT— ^-r-&^€ & = Chips. CignM2 (f ft, kcyNumOnChipS , 0/ R^^, 1^, 010^^/ M^ ^ 
If {Rs -^^-M ^ SIGg = 0) 

// ChipU and thcrcforG Mg io not to be truatod 

ElOQ 

// ChipU and therefore can bo truatcd 

o3c ° ChipU. WriteA(kcyNumOnChipU, Rg -y-^^Qe , SIGs -)- 

If (ok) 

// updating of data in ChipU wao oucceooful 

Eloc 

// tranomiaoion error during WriteA 

Endlf 

Endlf 

5.1.3 Updating permissions for futur e writ e s 

I n ord e r to r e duce exposure to acc i denta l and mal i c i ous attacks on P (and certa i n parts of M), only 
author i z e d users are al l ow e d to update P. Writ e s to P are tho same as author i zed wr i tes to M, 
except that thoy update P^ instead of M. Init i a ll y (at manufacturo), P is s e t to bo Road/Write for al l 
M. As d i ff e r e nt process e s fill up different parts of M, th e y can bo sealed aga i nst future change by 
updating tho perm i ssions. Updat i ng a ch i p's Po^ changes permiss i ons for unauthor i zed wr i tes to 
M b, and updating P.^, ,^*^ ^ chang e s perm i ssions for author i zed wr i tes w i th koy K^ r 

i s on l y al l ow e d to change to b e a moro r e str i ctive form of i tse l f. For examp le , i n i tial l y al l parts of 
M hav e p e rmissions of R e ad/Write. A permission of ReadA/Vr i te can bo updat e d to Docromont 




^{Q{Ry{C4.|My o], and My (th e d e sired vector to bo written to Ch i pU); 
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Only or Road Only. A pormission of Docromont Only can bo updotod to bocomo Road On l y. A 
R e ad On l y permission cannot bo further r es tr i ct e d. 



In th i s transact i on protoco l , th e Syst e m's ch i p is r e f e rred to as ChipS, and tho chip being updated 
5 i s referred to as ChipU. Each chip d i strusts the other. 

Th e protocol requires tho fo l low i ng publ i cly available functions in Ch i pU: 
Random Q R e turns R (do e s not advance R). 

S e tP e rmiss i on[n,p.X,Y,Z] Advances R, and updates Pp accord i ng to Y and returns 1 followod by 
1 0 th e resu l tant Pp only if Sk o [R | X | Y[CJ - Z. Otherwise r e turns 0. Pp can only 

become more r e str i cted. Pass i ng in 0 for any perm i ssion l e av e s i t unchang e d 
(passing in Y-Q r e turns tho current Pp ^r 

Authent i cated writes of perm i ssions requ i re that tho System has access to a ChipS that is capable 
15 of g e nerating appropriat e s i gnatures. Ch i pS requ i res th e following var i abl e : 

CountRoma i ning Part of ChipS's Mo that contains tho number of signatures that Ch i pS i s 

allowed to g e n e rat e . Decrements with each succ e ssfu l call to S i gnM and 
SignP. Permiss i ons in Ch i pS's for th i s part of Mq n ee ds to b e 
Readon l y once ChipS has b e en setup. Th e r e for e CountRomain i ng can only 
20 b e updat e d by anoth e r ChipS that w i ll perform updates to that part of Mq 

(assuming Ch i pS's P^ a l lows that part of Mo to b e updated). 

I n add i tion, Ch i pS requ i r e s e ith e r of the fo l low i ng two SignP funct i ons depend i ng on whether 
d i r e ct or i nd i rect key storage is used (see d i r e ct vs i ndir e ct auth e nticat e d write protocols i n 
25 Section 5.1.2): 

SignP[n,X,Y] Us e d when th e same k e y is directly stored in both ChipS and ChipU. Advances R, 

d e cr e ments CountR e ma l ning and returns R and SKB[X | R | Y|Ca] only i f 
CountRema i ning r> 0. Otherwis e returns a l l Os. The time token to ca l cu l ate and 
compare signatur e s must be independ e nt of data cont e nt. 
30 SignP[f,n,X,Y] — Us e d when the same k e y is not d i r e ct l y stor e d in both ChipS and ChipU. I n this 
cas e ChipU's K^ ^ . ~ Ch i pS's fiK^). Tho funct i on is i dent i cal to tho d i roct form of 
SignP, except that i t add i tiona l ly accepts f and returns S^[X|R|Y|C j i nstead of 
Sk »[X | R|Y | CJ. 

35 6.^.3.1 — Diroct form of SignP 

Wh e n the direct form of S i gnP i s used, Ch i pU'o Pn is updated as fe ll ows: 
3h — Syst e m ca ll s Ch i pU's Random funct i on; 
b-. — Ch i pU r e turns Ry to System; 
— Syst e m ca l ls ChipS's S i gnP function, passing in n2, Ry and Pp (th e d e sired P to bo wr i tten to 
40 Ch i pU); 
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€k — Chips produc e s and SK natR^iRsP &ICd i f it is st il l pormittod to produce signaturoo. 

e-. — If va l u e s roturnod in d are non zero, then Syst e m can then ca ll Ch i pU's S e tP e rm i ss i on function 

with n1, tho dosirod porm i ssion e ntry p, Rs, P& and SK Hg{Rt^|Rs|P&|C^]. 
f-. — ChipU v e rif ie s th e r e ceiv e d s i gnatur e against i ts own gonorotod s i gnatur e SK ft:^{RutRs^Pp^€;J 
5 and applios Py to P^ i f th e signatur e matches 

€h — Syst e m chocks 1st output param e ter. 1 ~ success, 0 - failure. 

Th e cho i ce of n1 and n2 must b e such that Ch i pU's K^^ - ChipS's Kn gr 

10 The data flow for bas i c authontlcatod writes to pormissiohs is shown i n F i gure 332. 

5.4.3.2 — Indir e ct form of SignP 

Wh e n th e indir e ct form of SignP is us e d In Ch i pS, tho System must extract f from Ch i pU (so i t 
knows how to generate th e corr e ct koy) by p e rform i ng the fol l ow i ng tasks: 
15 a. Syst e m ca ll s Ch i pU's R e ad function, passing i n (dontCar e , 1, dontCoro) 

b. ChipU returns M4, from which Syst e m can e xtract fy 

c. System stores fy for futur e us e 

ChipU's Pft is updat e d as fo ll ows: 
20 a. System calls ChipU's Random function; 

b. Ch i pU returns Ry to System; 

c. System ca l ls ChipS's SignP funct i on, passing in fy, n2, Ry and Py (th e d e s i red P to b e writt e n 
to Ch i pU); 

d. Ch i ps produces R^ and Sfe ^Kna^tR ^ I RslPdC^] if it is st i ll pormittod to produc e s i gnatures. 

25 e. If va l ues roturnod in d ar e non z e ro, th e n Syst e m can then ca ll ChipU's S e tP e rmission function 
w i th n1, tho des i red permiss i on entry p, R^, Py and Si y^Kna^fRylR slPp I Ca]. 
f: — ChipU v e rifios tho rocoivod s i gnature against SK ft^fRyjR slP&ICJ a nd appli e s P& to P^ i f tho 

signatur e matches 
g. Syst e m chocks 1st output parametor. 1 ~ sucooss, 0 ~ fa il uro. 
30 in addit i on, the choic e of n1 and n2 must b e such that ChipU's K^^ ~ Ch i pS's fy (Kna)T 
^AtA Protecting m e mory v e ctors 

To protect tho appropr i at e part of aga i nst unauthoriz e d writes, ca ll SotP e rm i ssions[n] for n - 0 
to T 1 . To prot e ct th e appropr i at e part of Mo against author i zed wr i t e s with koy n, ca l l 
SotPorm i ss i ons|T*n] for n-0 to N 1 . 
35 Not e that on l y can b e wr i tten i n an authenticated fash i on. 

Note that tho SetPermission function must b e ca lle d after the port of M has been s e t to the 
d e sir e d vaiuo. 

For exompio, if adding a seria l number to an ar e a of M4 that is currently RoadWrite so that noono 
is p e rmitted to updat e the numb e r aga i n: 
40 the Write function ia called to write the aerial numbor to IVU 
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10 



15 



20 



25 



30 



SGtrcrmioaion ( 1) — io called for to oct that part of M to be 

Readonly for non authorized writoo , 
If adding a oonsumab l o valu e to Mg such that only k e ys 1 - 2 can updat e i t, and keys 0, and 3 - N 
cannot: 

the WritG funotion io oalled to write tho amount of 

Gonaumable to M 
flctrGrmioaion ia called for 0 to oot that part of Motobo 

D e cr e m e ntOniy for non - authoriz e d wr i t e s. This a l lows the amount of consumab l e to 

decr e m e nt. 

SGtPermiooion io called for n — fr-j — T i 3 ^ — — , , , , — T i N 1 ] — fee 

oet that part of My to be Readon l y for authoriz e d wr i t e s using a ll but keys 1 and 
2. Th i s leav e s keys 1 and 2 with R e adWrit e p e rmiss i ons to Mq. 

It is possibl e for som e on e who knows a k e y to furth e r r e str i ct oth e r k e ys, but i t i s not i n anyon e 's 

i ntorost to do so. 

&T§ Programm i ng K 

I n th i s cas e , w e hav e a factory chip (ChipF) con ne ct e d to a Syst e m. Th e Syst e m wants to 
program tho koy in another ch i p (ChipP), Syst e m wants to avoid passing th e n e w koy to Ch i pP i n 
tho cloar, and also wants to avo i d the possibil i ty of tho koy upgrade messag e be i ng rop l ayod on 
anoth e r ChipP (ev e n if th e us e r do e sn't know th e k e y). 

Th e protoco l assum e s that Ch i pF and Ch i pP already share (direct l y or i nd i rect l y) a secr e t k e y Ke wr 
This key i s us e d to e nsur e that only a ch i p that knows Kom can s e t Kn ew^ 

A l though the oxompio shows a ChipF that is on l y a l low e d to program a sp e cific numb e r of 
Ch i pPs, th e k e y - upgrad e protoco l can b e e asily alt e r e d (sim i lar to th e way the wr i te protocols 
havo variants) to provid e oth e r m e ans of li m i ting th e abi li ty to update ChipPs. 

Th e protoco l requ i r e s the fo ll ow i ng pub l ic l y ava i lab le functions i n ChipP: 
RandomQ R e turns R (do e s not advanc e R). 



And th e fo l low i ng data and functions i n Ch i pF: 

CountRemo i n i ng — Part of Mo w i th contains th e numb e r of s i gnatures that Ch i pF i s a ll ow e d to 



R e p l ac e Key[n, X, Y, Z] Rep l ac e s K^ -by-SKft [R|X|Ca]®Y, advances R, ond returns 1 
only i f Sk«P( | Y|C3] ~ Z. Oth e rw i s e r e turns 0. The tim e tak e n to oa l cu l ato s i gnatures 
and compar e valu e s must b e id e nt i cal for all i nputs. 



gonorato, Docr o monts w i th e ach successful cal l to GotProgramK e y. Perm i ssions 
i n P for th i s part of Mo noods to bo RoadOn l y onc e ChipF has boon setup. 
Th e r e fore can only bo updated by a ChipS that has author i ty to perform updates 
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Knew — The n e w k e y to be transforrod from ChipF to Ch i pP. Must not be visibl e . Aft e r manufacturo, 

Knew 'Q 0- 

SetPartia l Koy[X] — Updat e s Kn e w to b e Kn e w^X. This funct i on allows Kn e w to bo programmed i n 
5 any number of steps, thereby a l lowing d i ff e rent peopl e or systems to know d i ff e rent parts of tho 
key (but not tho whole K ^aJh-^^m ^ stor e d in Ch i pF's flash m e mory. 

I n add i t i on, ChipF requires ei th e r of tho fo l low i ng G e tProgramKey functions d e pending on whothor 
d i r e ct or ind i r e ct k o y storage is used on tho input key and/or output koy (soo diroct vs indiroct 
10 auth e nticat e d wr i t e protoco l s in Section 5.^.2): 

G e tProgramK e y1[n, X] Direct to diroct. Used when tho same koy (K^) is d i rectly stored i n both 

ChipF and ChipP and wo want to stor e K^ e w in ChipP. Advances Rk, decr e ments 
CountRema i ning, outputs Rv» tho oncryptod koy SK B [X | Rfi | CJ0K^ and a 
signatur e of the first two outputs p l us C^ i f CountRomaining^O. Oth e rwise 
15 outputs 0. The t i mo to ca l culate the e ncrypted koy & signature must bo I dontical 

for al l inputs. 

G e tProgramK e y2[f, n, X] Dir e ct to indir e ct. Used when the sam e koy (Kb) is d i r e ctly stored in both 
ChipF and Ch i pP but wo want to store fH(Kn e w) in ChipP inst e ad of simply Kn ew 
(I. e . w e want to k e ep tho k e y in ChipP to bo d i ff e r e nt i n al l ChipPs). I n this cas e 
20 Ch l pP's Kn4 ~ Ch i pF's fH(Kn^). Tho funct i on i s idontical to GotProgramK e yl , 

e xc e pt that i t additiona l ly acc e pts fp, and returns SKHP(|RK | CJ0fH(Kfl e w) i nstead 

ef-SK n[X|RF | CJ ^ Kn e w- Not e that th e produc e d si gnatur e is produced us i ng Kn 
since that is what is a l r e ady stored in ChipP. 
GotProgramKey3[f, n, X] I nd i roct to d i r e ct. Used when tho sam e key i s not dir e ct l y stor e d in both 
25 ChipF and Ch i pP but w e want to store Kn ew i n Ch i pP. In this case ChipP*s Kr 4.~ 

ChipF's fp{Kf^). Tho function i s i dontical to GotProgramKeyl , except that i t 
add i t i onal l y acc e pts fp, and returns Sff a(KB )[X | RR|CJ ^ Kn ew ^ instead of 

Sk b [ X|Rk|CJ®K^. Th e produced signatur e is produced using fR(Kn) inst e ad of 
K b since that is what is already stored in Ch i pP. 

30 G e tProgramK e y 4 [f, n, X] I ndir e ct to i ndiroct. Us e d when tho same key i s not direct l y stor e d i n 

both ChipF and ChipP but we want to storo fp (Kne w) in Ch i pP i nst e ad of s i mply 
Knew -( i e . w e want to k ee p th e k e y in ChipP to b e d i ff e r e nt in a l l Ch i pPs). I n th i s 
cas e Ch i pP's Kn ^ - ~ Ch i pF's f p(Kn 2). Tho funct i on is idont i ca l to GotProgramK e yS, 
o xc o pt that it roturno Sff ^pqR|.j€a}®W ^) inst e ad of Sff ^fXtRpjC^^^KnewT 

35 Th e produc e d s i gnatur e is produced us i ng fp (K n) since that i s what is already 

stored in ChipP. 
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Sinoo thero aro l i ko l y to bo fow Ch i pFs, and many ChipPs, th e indirect formo of GotProgramKoy 
can b e us e fully omp l oyod. 

SStA GetProgramKoyI — dir e ct to d i rect 

5 With tho "o l d koy - d i r e ct, n e w k e y ~ d i recf form of G e tProgramK e y, to updat e P's toy : 
€h — System calls Ch i pP'c Random function; 
— ChipP r e turns to System; 

— System cal l s Ch i pFs GotProgramKoy function, passing i n n2 (tho desir e d koy to use) and 
the result from b; 

10 4-. — ChipF — updates — Rr — tt^en — calculates — and — r e turns — Rp; — SK ^[Rp | Rfi |G a] S K| ^ — an4 

e: — I f the r e sponse from d is not 0, System ca l ls ChipP's ReplaoeK e y funct i on, passing i n n1 (tho 
koy to use i n Ch i pP) and the response from d; 

fz Syst e m ch e cks respons e from Ch i pP> If the r e spons e is 1. th e n ChipP's has been 

15 corr e ctly updated to K^ e w If the roGponoo is 0, ChipP's K^ ^ . has not boon updat e d. 

Th e cho i ce of n1 and n2 must bo such that Ch i pP's K^^ - Ch i pF's 

The data flow for k e y updat e s i s shown i n F I guro 333: 

20 

Note that is n e v e r passed in the open. An attacker could send its own R^, but cannot produce 
SKng[Rp| Rf^ |C3 ] without K^. Th e s i gnature based on Kn e w i s sent to e nsure that Ch i pP w ill b e ab l e 
to d e t e rmine if e ither of the first two param e t e rs hav e b ee n changed en route. 

25 CountR e ma i ning needs to be s e tup in Mp zo (includ i ng making it Readon l y in P) before ChipF is 

programmed with Kp. ChipF shou l d therefore be programm e d to on l y p e rform a l i mited number of 
GotProgramKoy operat i ons (ther e by limiting compremiso exposure if a ChipF i s stolen). An 
authorized Ch i pS can be used to update th i s count e r if necessary (see Sect i on 5. 4 .2 on page 1 ). 

30 5.5.2 GetProgramK e y2 — direct to i nd i rect 

With th e "old koy ~ direct, n e w k e y ~ i ndirect" form of GetProgramK e y, to updat e P's k e y, th e 
System must extract f from ChipP (so i t can t e l l ChipF how to gen e rate tho correct koy) by 
performing the fol l owing tasks: 

a. System cal l s Ch i pP's R e ad function, pass i ng in (dontCare, 1, dontCaro) 
35 b. Ch i pP returns M4, from wh i ch System can e xtract f^ 
c. System stereo f^ for future use 

Ch i pP's koy is updated as fol l ows: 
a. System calls ChipP's Random funct i on; 
40 b. ChipP roturns Rm to Syst e m; 
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c. Syst e m cqHq Ch i pF*G GotProgramKoy funct i on, pass i ng i n fyt, n2 (tho doG i rod koy to uoo) and 
the result from b; 

d. ChipF — updat e s — Rpi — tlwi — calcu l ates — afid — r e turns — Rp, — SKft2{Rp|Rp|C^] S fp( K ^)7 — afl4 

5 e . if th e r e spons e from d is not 0, Syst e m cal l s ChipP's Rop l aceKey function, passing in n1 (tho 
key to us e in Ch i pP) and the response from d; 
f. System ch e cks r e sponse from Ch i pP. I f tho respons e i s 1, then ChipP's K^^ has boon correct l y 
updated to fnCKn e w). If tho respons e is 0, Ch i pP's K^^ has not be e n updated. 

10 Th e cho i ce of n1 and n2 must be such that ChipP's Ke ^ . - ChipF's 

5.5.3 G e tProgram K e y3 — i ndirect to direct 

W i th th e "o l d key ~ i nd i rect, new koy ~ direct" form of G e tProgramKoy. to updat e P's key, the 
System must extract f from Ch i pP (so it can te l l ChipF how to gen e rate the corr e ct k e y) by 
15 p e rforming tho fo l low i ng tasks: 

a. Syst e m calls ChipP's R e ad funct i on, passing i n (dontCar e , 1 , dontCaro) 

b. ChipP returns M4., from which Syst e m can extract fn 

c. Syst e m stores fp for future uso 

20 Ch i pP's k e y i s updated as fo l lows: 

a. System cal l s Ch i pP's Random function; 

b. Ch i pP r e turns R^ to System; 

c. System ca ll s Ch i pF's GetProgramKey funct i on, passing i n fp, n2 (tho d e sired key to use) and 
th e resu l t from b; 

25 d. Ch i pF — updates — Rp, — then — calcu l at e s — and — r e turns — Rn-, — Saa(Kf^{Rp|Rp|G3}®Knew5 — an^ 

Sffa(KBa){RptSffa(| ^ [ Rp | l^|C^]®Kn ew<€^ 

e . I f tho respons e from d is not 0, System calls Ch i pP's R e p l ac e K e y funct i on, passing in n1 (tho 
koy to use i n ChipP) and the r e sponse from d; 

f^ — Syst e m checks response from ChipP. If th e r e spons e i s 1 , th e n Ch i pP's K^^ has be e n corr e ctly 
30 updated to K^ e w- I f th e respons e i s 0, Ch i pP's has not b e en updated. 

Th e choice of n1 and n2 must be such that ChipP's K^ ^ ^ ~ Ch i pF's fp(Kfl g)r 

^StA GetProgram Koy 4 — ind i r e ct to i nd i rect 

With the "o l d key - i ndirect, new key - i ndir e ct" form of G e tProgramKoy, to update P's koy, tho 
35 System must extract f from ChipP (so it can t e ll Ch i pF how to generate tho correct koy) by 
perform i ng the fol l ow i ng tasks: 

a. Syst e m cal l s ChipP's R e ad funct i on, pass i ng in (dontCar e . 1, dontCaro) 

b. Ch i pP returns M^, from wh i ch System con extract fp 

c. System stores fn for future uso 
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Ch i pP's k e y i s updatod ao fol l owo: 

a. Syst e m cal l s ChipP's Random funct i on; 

b. ChipP returns Rp to System; 

5 c. System calls ChlpFs GetProgramKoy function, passing I n fp, n2 (the d e s i r e d key to use) and 
th e r e sult from b; 

d. ChlpF updates — Rr — th e n calcu l at e s and r e turns — Rp, — Saa(Kt ^[RH|RK|CJ0fH( Knew)r-^^ 

Sfla(KRa){Rp]Sffa(Kna )[ l ^ | RK|CJ0fp(Kn ^^ 

e . If th e r e sponse from d i s not 0, System cal l s Ch i pP's RoplacoKey funct i on, pass i ng i n n1 (the 
10 k e y to use i n Ch i pP) and the response from d; 

f. Syst e m ch e cks response from ChipP. I f tho respons e is 1, th e n Ch i pP's K^^ has b ee n correctly 
updat e d to fp (KBe w) If th e respons e is 0, ChipP's K,^ has not boon updatod. 

Th e choic e of n1 and n2 must be such that ChipP's - Ch i pF's f^iK zh 

15 5.5.5 Chicken and Egg 

The Program K e y protocol r e quires both ChipF and ChipP to know Ke i ^ ( ei th e r directly or 
indir e ctly). Obviously both ch i ps had to bo programmed i n some way w i th K^, and thus Ke w-eaft 
b e thought of as an older K ^t4i ^ can bo placed I n chips if anoth e r ChlpF knows Ke ^e^ , and so 

20 

Although th i s process al l ows a cha i n of roprogramming of k e ys, with oach stage s e cure, at some 
stago tho vory first key (K^) must bo placed In the ch i ps. is i n fact programmed w i th th e 
ch i p's microcod e at th e manufactur i ng t e st station as th e last stop in manufacturing tost. Kfa srean 
b e a manufacturing batch koy, chang e d for e ach botch or for oach custom e r etc>, and can hav e as 

25 short a l if e as d e sir e d. Comprom i sing need not result i n a compl e t e compromise of th e chain 
of Ks. This i s ospoc i a l ly truo i f i s i nd i r e ctly stored i n Ch i pPs (i.o. oach ChipP ho l ds an f and 
f(Kfa6 t) i nstead of K^ ^ t d i rect l y). One examp l e i s whore (the key stor e d i n e ach ch i p after 
manufacture/test) is a batch key, and can b e diff e r e nt per ch i p. K^ st may advance to a ComCo 
sp e cific Ks eeen d e tc. but stil l rema i n ind i rect. A d i rect form ( e .g. K^) on l y noods to go in I f i t i s 

30 actually r e quired at tho ond of th e programming chain. 

Dep e nd i ng on r e programming requirements, can b e th e same or differ e nt for a l l K^ t 

6 Momjot forms of Protoco l s 

35 Phys i ca l QA Ch i ps aro usod i n Momjet pr i nt e r systems to store pr i nter operating parameters as 
we l l as consumable parameters. 

PRINTER_QA 

A PR I NTER_QA is stor e d within each pr i nt eng i n e to perform two pr i mary tasks: 



PEA23US 



623 



otorago and protGction of operating paramctcra 

a moang of — indirect read validation of other QA Chip data 

vcatoro 

5 
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Each PR I NTER_QA conta i ns the fo l low i ng k e ys: 
Table 22 9 . K e ys in Pr i ntorQA 





Contents 


Comments 


0 


Upgrade Key 


Used to upgrade tho operating 
parameters. Should be indirect form 


of kov (\ c 3 different kov for oach 


PRINTER OA^ so that an indirect 


fnrm nf thf* writr^ rf*niiir<=*H 


■ Willi \Jl U VVI 11V>« IhJ I0\,|UII^U. 


4- 


Consumablo Road Validation Koy 


1 \cf_fsf\ fp» inHirr^r^tlv/ rf*iH tho Hntf^ from 
3n CONSUMABLF OA rhin ij*^inn 


Ml I ^^^^1 m tM \t-J\— I— VjcV » V/l UOII 1^ 

Indirect authenticated read Drotocol ( 


Section 5 3 2 on oaoe 1 ) 


2 


PrintEngineControllor Road 
Validation Key 


PRINTFR OA thf* pvtf^m mn nithnr 






trust the data, or must use this key to 


perform tho authonticatod road 

protocol (goo Soction 5.3 on page 1). 




3-R 


(resorvod) 






Currently unusod. 

Could be used to provide a moans to 


indiroctly road additional print engine 


operating parameters ala K1 , or 


provide additional Print Engine 


validation ala K2. 



Note that I f mu l t i pl e Print Engine Contro ll ers are used (e.g. a mu l tip l e SoPEC system), thon 
mu l t i p l e Pr i ntEng i neContro l ler Road Val i dation K e ys are required. Th e s e k e ys can b e stored 
w i th i n a sing l o PR I NTER_QA (e.g. in K^ and b e yond), or can bo stor e d in s e parate 
PRINTER_QAs (for example each SoPEC (or group of SoPECs) has an I nd i v i dua l 
10 PR I NTER_QA). 

Tho functions r e qu i red i n th o PRINTER_QA aro: 

Random, R e p l ac e K e y, to al l ow koy programm i ng & subst i tut i on 

Read, to a ll ow r e ads of data 

15 ^ Write, to a l low updates of M^ ^ dur i ng manufacture 

Wr i teAuth, to prov i d e a m e ans of updating tho Mo data (operat i ng parameters) 

^ S e tP e rmissions, to prov i d e a moans of updat i ng wr i te perm i ss i ons 

-• T e st, to provid e a means of chock i ng if consumablo roads ar e va l id 
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Trans l ate, to prov i de a means of ind i r e ct r e ading of consumablo data 



§t2 CONSUMABLE_QA 

A CONSU [ \^ABLE_QA is stored with e ac l i oonsumab ie ( e .g. ink cartr i dgo) to perform two pr i mary 
5 tasks: 

otorago of conoumablo rolatcd data 

protOGtion of oonaumablo amount remaining 

Each CONSUMABLE_QA contains the follow i ng koys: 
10 Tablo 230. Koys in CONSUMABLE_QA 



Key 


Contents 


Comments 


0 


Upgrade Key 


Used to upgrade tho consumablo 
parameters. Should bo storod as the 




indiroct form of tho koy (l.o. a 
different koy for each 
CONSUMABLE^QA) so that an 




indirect form of the writo is roquired. 


1- 


Consumable Read Validation Koy 


Whon reading data from tho 
CONSUMABLE_QA, the system can 


either trust the data, or must uso this 


key to perform either tho direct or 


indirect authonticated read protocol 


|soo Soction 5.3 on page 1). 






(rosorvod) 


Currently unused. 




(reserved) 


Currently unused. 



Th e functions r e qu i r e d in tho CONSUMABLE_QA are: 

Random, ReplacoKoy, to al l ow k e y programming & substitut i on 

15 R e ad, to al l ow roads of data 

^ Write, to al l ow updat e s of dur i ng manufacture 

^ Writ e Auth, to prov i de a moans of updat i ng the data (consumab l e remain i ng) 

SotPorm i ss i ons, to provide a moans of updating wr i te perm i ssions 

20 AUTHENT I CAT I ON OF CONSUMABLES 

1 I ntroduction 

Manufacturers of systems that r e quire consumabl e s (such as a l as e r printer that r e quires toner 
cartridges) hav e strugg le d with tho problem of auth e nticating consumab le s, to vary i ng le ve l s of 
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succ e ss. Most hav e r e sortod to sp e cial i z e d packaging that i nvo l voo a patent. Howovor this doos 
not stop homo ref i l l oporat i ons or o l ono manufactur e i n countries w i th weak industria l prop e rty 
prot e ction. The pr e vention of copying i s i mportant to provont poorly manuf acturQd 
oubotitutG Gonoumablco from damaging the baac oyotcm. — Fea? 
5 oxamplo^ poorly filtered inlc may clog print nozglco in an inlt jot 
printer, — eauoing the conoumer to blame the oyatcm manufacturer 
and not admit the use of non authoriaod eonoumableo. 

To solv e tho auth e nt i cation problem, th i s docum e nt d e scr i bes an OA Chip that contains 
10 authont i cation keys and circuitry spocially d e s i gned to pr e v e nt copying. The chip i s manufactured 
us i ng th e standard Flash m e mory manufactur i ng proc e ss, and is low cost e nough to b e i nc l ud e d 
in consumabl e s such as ink and toner cartr i dges. The impl e mentation is approx i motoly 1mm^ -4fha 
0.25 micron flash process, and has an expected manufactur i ng cost of approx i mate l y 10 cents in 

15 

2 NSA 

Once programmed, tho OA Chips as d e scr i bed here ar e comp li ant w i th th e NSA export guide li n e s 
sinc e th e y do not constitut e a strong e ncrypt i on dev i ce. They can therefore bo pract i cal l y 
manufactured in the USA (and export e d) or anywhere el se in tho world. 

20 

3 Nom e nclature 

Th e following symbolic nomenc l ature i s us e d throughout this document 
Tabl e 231. Summary of symbol i c nom e nclature 



Symbol 


Description 




Function F, taking a single parameter X 






Function F, taking two parameters, X and Y 








X conoatonatod with Y 




BitwlBO X AND Y 




Bitwise X OR Y (inclusive OR) 








BItwiso X XOR Y (oxolusiveOR) 


-nX 


Bitwise NOT X (complement) 




X( Y 


X is assignod tho value Y 






X< [Y,Z) 


The domain of assignment inputs to X is Y and Z 


X^ 


X is equal to Y 


x^ 


X is not equal to Y 


UX 


Pocromont X by 1 (floor 0) 


ftx 


Inoromont X by 1 (modulo register length) 
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Eraoo X 


Erase Flash memory rogiotor X 


SetBits[X, Y] 


Set the bits of the Flash momory register X baGod 

nn V 




Shift register X right one bit position, taking input 


Z< ShiftRight[X. Y] 


bit from Y and placing tho output bit in Z 





A Pseudocode 

4t4t4 Asynchronous 

Th e follow i ng pseudocode: 

var a Gxprcaoion 
5 moans tho var s i gnal or output i s e qua l to tho ovo l uat i on of the e xpression. 

4 .1.2 Synchronous 

The following ps e udocod e : 

var < — C3cprcooion 
means tho var reg i st e r is ass i gn e d th e r e su l t of e va l uating tho oxpross i on during this cycle. 

10 4 .1.3 Expr e ssion 

Expr e ssions ar e defined us i ng th e nornonclatur e in Tab l o 231 above. Thoroforo: 

var a — (a ° b) 

is intorprotod as tho var s i gna l is 1 i f a is equa l to b, and 0 oth e rw i se. 

4^2 Diagrams 

15 Black Is us e d to denote data, and r e d to d e not e 1 bit contro l signal l inos. 

QA C hi p Term i nology 

This docum e nt r e fers to QA Ch i ps by thoir funct i on in part i cular protocols: 

For authGnticatcd rcada, — ChipA io the QA Chip being 

authcnt i oat od , — and ChipT i3 the QA Chip that io t mated. 

20 For replaecment of keyo, — ChipD io the QA Chip being 

programmed with the new key, — and ChipF ia the factory QA Chip 
that gencratco the meaaagc to program the new Icey. 

-* For upgradeo of data in a QA Chip, ChipU io the QA Chip being 

upgraded, — and ChipS io tho QA Chip that oigno the upgrade 
25 value , 

Any g i von physica l QA Ch i p wil l conta i n functionality that a ll ows i t to operat e as an e ntity In som e 
numb e r of th e s e protocols. 

Thoroforo, wherevor tho t e rms ChlpA, Ch l pT, ChipP, ChipF, Ch i pU and Ch i pS aro used in th i s 
docum e nt, th e y ar e r e f e rring to logical e ntiti e s invo l ved in an authent i cation protoco l as d e f i ned in 
30 subsequent sect i ons. 

PhysicQl QA Ch i ps are referred to by th ei r l ocat i on. For exampl e , e ach ink cartridge may contain a 
QA Chip referred to as an I NK_QA, w i th al l INK_QA chips being on the same physica l bus. In tho 
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same way, the QA Chip inside a pr i nt e r is roforrod to as PRINTER_QA, and w i l l b e on a separat e 
bus to th e INK_QA chips. 



5 Concepts and T e rms 

5 Th i s chapter prov i des a background to th e problom of authont i cat i ng consumablos. For more I n 
d e pth Introductory t e xts, soo [12], [78], and [56]. 

&A Basic TERMS 

A mossago, d e noted by M, is plaint e xt The proc e ss of transform i ng M into oiphortoxt C, whoro 
10 th e substance of M is hidden, is ca l lod oncryption. Th e process of transforming C back into M is 
ca l led d e oryption. R e f e rring to th e encryption function as E, and the decryption function as D. w e 
have the fo ll ow i ng Identit ie s: 

E{M\ = C 
D[C] = M 

15 Therefore th e fol l owing identity I s tru e : 

D[E[M]] - M 

§r2 Symmetric CRYPTocnAPHY 

A symmotr i c e ncrypt i on a l gorithm is on e wher e : 

the cncrv'ption function E rolica on key K4 7 

20 the decryption function D rolico on Iccy Kg r 

K g can bo dorivod from K i ., and 

Ki . can b e d e r i ved from K^. 

In most symmotric algor i thms, \^ e qua l s K g . Howovor, ovon if K 4 docs not equal Yk^, given that 
ono koy can be dorivod from the oth e r, a sing l e key K can suffic e for tho mathematical defin i tion. 
25 Thusf 

= C 
D^\C\ = M 

Th e s e cur i ty of thoso a l gorithmo rests very much In tho koy K. Knowlodgo of K a ll ows anyono to 
encrypt or decrypt. Consequent l y K must r e ma i n a s e cr e t for tho durat i on of th e va l u e of M. For 
e xampl e , M may bo a wart i me mossago "My current position i s gr i d pos i t i on 123 4 56". Onc e th e 
30 war i s over tho va l ue of M is greatly reduced, and if K i s made public, tho knowledg e of th e 

combat un i t's position may bo of no r el ovanco whatsoever. Of cours e i f i t Is pol i tical l y s e nsit i v e for 
the combat unit's posit i on to bo known ovon aft e r th e war, K may have to remain socrot for a very 
long time. 
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An e normous vari e ty of symm e tr i o algorithms e xist, from tho toxtbooko of ancient history through 
to sophist i cated modern algorithms. Many of th e se ar e insocuro, in that mod e rn cryptana l ysis 
techn i qu e s ( see S e ct i on 5.7 on pag e 1) can suocossful l y attack th e algor i thm to tho oxtont that K 
5 can b e der i v e d. 

Tho secur i ty of tho particu l ar symm e tr i c algor i thm is a function of two th i ngs: th e str e ngth of the 
a l gor i thm and the l ength of tho k e y [78]. 

10 The strength of an a l gor i thm is d i fficult to quantify, relying on its resistanc e to cryptographic 

attacks (soo Sect i on 5.7 on page 1). In addition, th e l onger that an algorithm has remain e d i n tho 
pub li c ey e , and yot r e main e d unbroken in tho m i dst of i ntense scrutiny, th e more secure tho 
algorithm is l ikoly to bo. By contrast, a secret algor i thm that has not be e n scrutin i zed by 
cryptograph i c exports i s un l ik el y to bo secure. 

15 

Ev e n i f th e algorithm is "perf e ctly" strong (th e on l y way to br e ak i t is to try ovory koy soo Section 
5.7.1 .5 on pag e 1 ), e ventua ll y tho right key will b e found. Howev e r, th e more keys th e r e ar e , th e 
moro koys havo to bo tr i ed. I f thoro are N k e ys, i t will take a maximum of N trios. If tho koy i s N 
b i ts long, it will tak e a maximum of 2^ tr ie s, with a 50% chanc e of find i ng tho k e y aft e r on l y ha l f tho 
20 attempts (2^). Th e long e r N b e com e s, th e l ong e r i t will take to find tho koy, and h e nc e th e more 
s e cur e it is. What makes a good k e y length dep e nds on tho valuo of tho secret and the time for 
which tho secr e t must r e main s o cr o t as w el l as available computing resources. 

I n 1996, an ad hoc group of world renown e d cryptographers and comput e r sc i entists roloasod a 
25 report [9] descr i bing m i n i ma l koy lengths for symmetric c i ph e rs to prov i de adequat e comm e rcial 
s e curity. They suggest an abso l ute m i nimum k e y le ngth of 9 0 b i ts i n ord e r to protect data for 20 
y e ars, and stress that i ncreasing l y, as oryptosystoms succumb to smart e r attacks than brut e- forc e 
key search, e v e n more b i ts may be r e quired to account for futur e surpris e s i n cryptana l ys i s 
techn i ques. 

30 W e w ill i gnore most h i storical symm e tr i c a l gor i thms on th e grounds that th e y are ins e cure, 

e specia ll y g i ven modern computing technology. I nst e ad, wo will discuss th e follow i ng algorithms: 

DBS 

Blowf iah 

^ RGSr 

35 ^ IDEA 

DES 

DES (Data Encryption Standard) [26] is a US and int e rnational standard, where tho oamo koy is 
used to encrypt and decrypt. The koy length i s 56 b i ts. I t has boon i mplementod i n hardware and 
software, a l though tho orig i na l des i gn was for hardware on l y. Tho or i g i nal a l gor i thm used i n DES 
40 was patented in 1076 (US patent number 3,962,539) and has sinc e e xp i r e d. 
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During tho design of DES, the NSA (Nat i ona l S e cur i ty Ag e ncy) prov i d e d s e cr e t S boxos to 
perform th e key d e p e nd e nt nonlinoar transformat i ons of th e data block. Aft e r diff e r e ntia l 
cryptana l ysis was d i scov e r e d outs i do the NSA, it was rev e aled that tho DES S - box e s wer e 
sp e cifical l y des i gned to b e r e s i stant to d i fforontial cryptana l ysis. 
5 As d e scribed i n [95], us i ng 1993 technology, a 56 b i t DES koy can b e r e cov e r e d by a custom 
doo i gnod $1 m ill ion mach i no perform i ng a brute force attack i n only 35 m i nutes. For $10 mil l ion, 
tho key can be r e cov e r e d i n only 3.5 minutos. DES i s c le arly not s e cur e now, and wi ll becom e 
le ss so i n tho future. 

A variant of DES, collod tripio DES i s more socuro, but requ i res 3 keys: K4, Kg, and K^. Th e k e ys 
10 are usod in tho fol l owing manner: 

The ma i n advantage of trip l e DES i s that existing DES i mpl e mentations can b e us e d to g i v e moro 
s e cur i ty than sing l e k e y DES. Specif i cal l y, triple DES g i v e s protect i on of e quiva le nt k e y l e ngth of 

15 112 b i ts [78]. Tr i pl e- DES do e s not g i v e th e e qu i valent protection of a 168 bit key (3 »f 56) as one 
m i ght na i v el y e xpect. 

Equipment that performs trip i o DES decoding and/or encod i ng cannot bo oxportod from the 
Unit e d Stat e s. 
572t2 Blewfis*^ 

20 Blowfish is a symm e tric b l ock ciph e r first pr e s e nt e d by Sohnoior i n 199^ [76]. It tak e s a variabl e 

le ngth k e y, from 32 b i ts to 4 4 8 b i ts, is unpat e nted, and is both l icense and royalty free. In addit i on, 

i t i s much fast e r than DES. 

Tho Blowfish a l gor i thm cons i sts of two parts: a k e y -e xpans i on part and a data encryption part. 
K e y e xpans i on conv e rts a k e y of at most 4 4 8 bits into s e v e ral subkoy arrays tota l ing 4 168 byt e s. 
25 Data e ncrypt i on occurs v i a a 16 round F e ist e l n e twork. Al l op e rations aro XORs and addit i ons on 
32 b i t words, w i th four i ndex array l ookups per round. 

It shou l d b e not e d that d e cryption i s th e same as encryption except that th e subk e y arrays ar e 
us e d in th e r e v e rs e ord e r. Compl e x i ty of i mp l ementat i on i s th e r e for e r e duc e d comparod to oth e r 
a l gorithms that do not have such symmetry. 
30 [77] descr i bes the pub li shed attacks which have boon mounted on Blowfish, a l though th e 

a l gorithm rema i ns s e cur e as of February 1098 [79]. Tho major finding w i th those attacks has boon 
tho disoovory of c e rta i n w e ak koys. These w e ak k e ys can b e t e st e d for during key gen e ration. For 
moro information, r e f e r to [77] and [79]. 
RG§ 

35 Des i gn e d by Ron Rivest in 1995, RC5 [7 4 ] has a variable b l ock size, key siz e , and number of 
rounds. Typical l y, how e ver, it us e s a 6 4 b i t block s i z e and a 128 bit koy. 
Tho RC5 a l gor i thm cons i sts of two parts: a koy expansion part and a data oncryption part. Key 
expans i on conv e rts a koy into 2r'»2 subkoyo (whore r ~ tho number of rounds), oach subkoy being 
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wbits. For a 6 4- b l t b l ooksizo with 16 rounds (i^32, r-16), th e subkoy arrays total 136 bytos. Data 
e ncryption uses add i tion mod 2^, XOR and b i tw i s e rotat i on. 

An i n i tial exam i nat i on by Ka li s l ^ i and Y i n [43] suggootod that standard li noar and difforont i a l 
cryptana l ys i s appeared i mpract i ca l for tho 64 - b i t b l oc l <sizo version of the a l gor i thm. Thoir 
5 difforont i a l attacks on 9 and 12 round RC5 r e qu i r e 2^ and 2^ chos e n p l aintexts rospoctivoly, 
while tho linoar attacks on 4, 5, and 6 round RC5 requires 2^ 7-2 ^ and 2^ known p l aintexts). 
Thes e two attacks are indopondont of key size. 

Mor e recent l y howovor, Knudson and Mo i or [47] described a n e w type of difforont i a l attack on 
RC5 that i mproved the earlier results by a factor of 128, show i ng that RC5 has c e rtain weak keys. 
10 RC5 i s prot e ct e d by mult i pl e patents own e d by RSA Laborator ie s. A license must bo obtain e d to 
use i t. 

lOlA 

D e v e lop e d in 1990 by Lai and Mass e y [53], the first incarnation of the I DEA cipher was cal l ed 
PES. After differentia l cryptana l ys i s was d i scov e red by Biham and Shamir in 1991, the a l gor i thm 
15 was str e ngth e n e d, w i th th e r e su l t b e ing published in 1 9 92 as I DEA [52]. 

IDEA us e s 128 - b i t k e ys to operate on 64 bit p l aintext b l ocks. Tho same algor i thm i s us e d for 
e ncryption and decrypt i on. I t i s g e nera ll y regard e d as th e most s e cure block algor i thm ava il able 
today [78][78]. 

Tho biggest drawback of I DEA i s th e fact that it i s pat e nt e d (US pat e nt number 5,21 4 ,703, issued 
20 i n 1993), and a li cense must be obtained from Ascom Tech AG (Bern) to use i t. 

§t3 — Asymmetric cryptography 

An asymmetric e ncrypt i on algor i thm is on e wh e r e : 

tho onoryption function E rolioo on Iccy K4 7 

25 -* the decryption function D rclioo on Iccy 

cannot b e d e rived from i n a r e asonab l e amount of t i m e , and 

cannot b e d e riv e d from i n a r e asonab l e amount of t i me. 

Thus: 

Eki[M] = C 
DjcilC] = M 

30 Thes e algor i thms ar e a l so ca ll ed public koy because one key K4 can b e mad e pub li c. Thus 

anyon e can e ncrypt a m e ssag e (us i ng K^) but on l y the person with the corr e sponding d e cryption 
k e y (Ka) can decrypt and thus r e ad th e message. 
I n most cases, the fo l lowing ident i ty a l so holds: 

EKiim = C 
D^dC] = M 

35 
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Th i s idont i ty i s very important because it implios that anyone w i th th e public koy K4 can s ee M and 
know that it como from tho ownor of K^. No ono o l se cou l d hav e g e n e rat e d C becauso to do so 
wou l d imp l y knowledge of K^. This gives r i s e to a diff e r e nt application, unre l ated to encrypt i on 
d i gital s i gnatures. 

5 

Th e property of not be i ng ab l e to derive from Kg and v i ce versa in a r e asonab l e tim e is of 
cours e clouded by the conc e pt of r e aeonab/o timo. What has been d e monstrat e d time after time, 
i s that a ca l cu l at i on that was thought to requir e a l ong time has boon made possible by tho 
i ntroduction of faster computers, now a l gorithms etc. Tho security of asymmetric a l gorithms is 

10 bas e d on th e difficulty of on e of two probl e ms: factor i ng l arg e numbers (mor e sp e cif i cally l arg e 
numb e rs that are the product of two l arge primes), and th e d i fficu l ty of ca l cu l ating d i scret e 
logar i thms i n a finite fie l d. Factoring l arge numbers is conjectur e d to b e a hard prob l em given 
today's und e rstand i ng of mathematics. Th e prob le m however, i s that factor i ng is gett i ng easier 
much fast e r than ant i c i pat e d. Ron Rivest in 1977 said that factor i ng a 125 digit number wou l d 

15 take 4 0 quadr i l l ion y e ars [30]. I n 1994 a 129 dig i t number was factored [3], According to Schnoior, 
you n ee d a 1024 b i t numb e r to g e t tho level of s e curity today that you got from a 512 - bit numb e r 
in th e 1 980s [78]. If tho key i s to l ast for some years then 1024 bits may not oven be enough. 
Riv e st r e vised his koy le ngth e stimates in 1990: h e sugg e sts 1628 bits for high secur i ty lasting 
unt il 2005, and 188^ b i ts for h i gh secur i ty l asting until 2015 [69]. Schn e i e r sugg e sts 2048 bits are 

20 r e qu i r e d i n order to prot e ct aga i nst corporations and gov e rnments unt i l 2015 [80]. 

Pub l ic koy cryptography was i nvent e d in 1976 by D i ffi e and H e liman [15][15], and i nd e pend e nt l y 
by M e rkle [57]. A l though Diffio, Hel l man and M e rkl e patent e d th e conc e pts (US pat e nt numbers 
^,200,770 and 4,218,582), these patents exp i red in 1997. 

A number of pub li c koy cryptograph i c algor i thms e x i st. Most are impract i ca l to i mpl e m e nt, and 
25 many generate a very largo C for a given M or requ i r e e normous keys. Stil l others, while secure, 
ar e far too slow to bo practical for s e v e ra l years. Becaus e of this, many public k e y syst e ms are 
hybrid — a public k e y mechanism is us e d to transmit a symm e tr i c s e ss i on key, and then th e 
sess i on koy Is used for tho actua l m e ssag e s. 

All of th e algor i thms hav e a probl e m in terms of koy sel e ct i on. A random numb e r is simp l y not 
30 s e cur e e nough. Th e two l arg e pr i mes p and q must bo chosen carefu l ly — there are certain weak 

combinat i ons that can be factor e d mor e e asi l y (some of tho w e ak keys can b e t e st e d for). But 

nonetheless, key s e lect i on i s not a simple matter of randomly s ele cting 102 4 b i ts for e xamp le . 

Cons e quently the key s e l e ction process must a l so b e s e cure. 

Of th e pract i ca l a l gorithms i n us e under pub l ic scrut i ny, the fo ll ow i ng are discussed: 
35 RSA 

©SA 

ElGamal 

5r3^l RSA 

Tho RSA cryptosystem [75], nam e d after R i v e st, Shamir, and Adi e man, i s th e most w i dely used 
40 pub l ic koy cryptosystem, and i s a do facto standard in much of th e world [78], 
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Th e s e curity of RSA dopondo on th e conj e ctur e d d i fficulty of factoring largo numbors that ar e th e 
product of two pr i m e s (p and q). Th e r e ar e a numbor of r e strict i ons on the g e nerat i on of p and q. 
They should both b e l arg e , w i th a s i mi l ar number of bits, yot not bo close to ono another 
(othePA^ise p = q = ^pq). I n add i tion, many authors have suggested that p and q should bo strong 
5 primes [56]. Th e H el lman Bach patont (US patent numb e r 4,633,036) covers a method for 
g e n e rating strong RSA pr i mes p and q such that n- pq and factoring n i s boliovod to bo 
computationa l ly infoasiblo. 

Th e RSA a l gor i thm patont was issued i n 1983 (US patont numbor 4 , 4 05,820). Th e patont exp i res 
on Soptombor 20, 2000. 
10 DSA 

DSA (Dig i ta l Signature A l gorithm) i s an a l gor i thm design e d as part of tho Digita l S i gnature 
Standard (DSS) [29]. As dofinod, it cannot bo used for gonoral i z e d e ncryption. I n add i t i on, 
compared to RSA, DSA i s 10 to 40 times olowor for oignaturo verificat i on [^0]. DSA e xplicit l y uses 
th e SHA - 1 hash i ng algorithm (soo Sect i on 5.5.3.3 on pago 1). 
15 DSA k e y gen e ration re l ies on finding two primes p and q such that g divid e s p 1 . According to 
Schneier [78], a 1024 b i t p va l u e i s r e quir e d for long term DSA secur i ty. However tho DSA 
standard [29] does not permit va l ues of p l arger than 1021 bits (p must a l so bo a mult i p l e of 6 4 

Th e US Government owns tho DSA algor i thm and has at l e ast ono r e l e vant patent (US patont 
20 5,231,688 granted in 1093). Howev e r, according to NIST [61]: 

"Tho DSA patont and any foreign countorparte that may Igguo aro availablo for uso 
without any writton pormieeion from or any payment of royalti e s to tho U.S. 
govornmont. " 

In a much stronger dec l aration, NIST states in the some document [61] that DSA do e s not infringe 
25 third party's rights: 

"NIST roviowod all of tho aeeertod pat e nts and concludod that non e ofthom would 
b e Infringod by DSS. Extra protection will bo writton into tho PK1 pilot projoct that 
will pr e vent an organization or individual from suing anyone exc e pt th e government 
for patont infringement during tho course of tho projoct. " 
30 It must however, be not e d that tho Schnorr authenticat i on a l gorithm [81] (US patent 4 ,995,082) 
patont holder c l aims that DSA i nfr i ng e s his patent. Tho Schnorr patont is not du e to e xp i r e unt il 
2QG8t 

§t3t3 E I Gama l 

Tho E I Gamal scheme [22][22] is used for both encryption and digita l s i gnatures. The secur i ty i s 
35 bas e d on th e conj e ctur e d difficu l ty of calcu l at i ng d i screte logarithms i n a f i n i t e f iel d. 

K e y s ele ct i on i nvo l ves the selection of a pr i me p, and two random numbers g and x such that both 
g and x ar e l ess than p. Thon calculate y gx mod p. Th e publ i c key i s y, g, and p. The pr i vate 
key i s x. 
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E I Gamal i s unpat e nt e d. Although it usos tho potontod Diff i o Hollman pub li c koy a l gor i thm [15][15], 
thos e pat e nts expired i n 1097. EIGamal pub l ic k e y encrypt i on and d i g i ta l s i gnoturos can now bo 
safely us e d w i thout infr i ng i ng third party pat e nts. 

§t4 Cryptographic challenge response protocols and zero knowledci: proopc 

5 The genera l princ i p l e of a oha ll ong e response protocol i s to provid e ident i ty authent i cat i on. Tho 
simplest form of cha l l e ng e- r e spons e tak e s the form of a secret password. A asks B for tho socrot 
password, and if B responds w i th tho correct password, A doclaros B auth e nt i c. 

Thoro ar o throe main problems with th i s k i nd of s i mpl i stic protocoL First l y, onco B has responded 
10 with the password, any observ e r C w i l l know what tho password i s. S e condly, A must know tho 
password i n order to ver i fy i t. Thirdly, if C i mp e rsonates A, then B w i ll g i ve tho password to C 
(thinking C was A), thus comprom i sing tho password. 

Using a copyr i ght t e xt (such as a haiku) as tho password i s not suffic i ent, b e cause we aro 
15 assum i ng that anyone is able to copy tho password (for exampl e i n a country wher e i nt e ll e ctual 
prop e rty is not respected). 

Th e id e a of cryptographic chailong e- responsB protocols is that ono entity (tho claimant) proves its 
identity to another (the v e r i fier) by d e monstrating knowl e dg e of a s e cr e t known to b e associated 
20 with that e nt i ty, without r e v e aling tho eocr e t its e lf Xo tho ver i fi e r during tho protoco l [56]. In the 

g e neralized cas e of cryptographic oha l long e- r e sponso protoco l s, w i th some Gchomos tho vorifior 
knows the secret, wh i le in others the socrot is not e v e n known by tho ver i fier. A good overview of 
th e s e protocols can b e found in [25], [78], and [56], 

25 Sinc e this documentation spec i f i cal l y concerns Auth e nt i cat i on, tho actua l cryptographic challenge 
r e spons e protocols us e d for authentication aro detailed I n the appropr i ate sections. However tho 
concept of Z e ro Knowledge Proofs bears m e ntion i ng here. 

Th e Z e ro Knowledge Proof protoco l , first d e scr i b e d by Fo i ge, F i at and Shamir in [2^] is 
30 e xt e ns i v e ly used in Smart Cards for th e purpos e of authontication [34][34][34]. Tho protocol's 

e ff e ctiv e n e ss is based on tho assumption that i t i s computat i onal l y infoosib l o to compute squar e 
roots modulo a l argo composito int e g e r with unknown factor i zation. This i s provab l y equiva le nt to 
th e assumpt i on that factoring l arg e integers Is difficu l t. 

I t shou l d be noted that there I s no n e ed for th e claimant to have s i gnif i cant computing power. 
35 Smart cards I mp l em e nt this k i nd of authentication using on l y a few modu l o multip l icat i ons [34][34]. 

Final l y, it should bo not e d that th e Z e ro Knowl e dg e Proof protocol is pat e nt e d [82] (US patent 
4,748,668, I ssued May 31, 1088). 

40 StS One way functions 
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A ono way function F op e rates on an i nput X, and roturns F[X] ouch that X cannot bo dotormined 
from F[X]. Wh e n th e r e is no rostr i ction on tho format of X, and F\X] conta i no f e w e r b i ts than X, 
thon coi l io i onQ must oxist. A co l l i s i on is d e fined as two d i fferent X input valuoG produc i ng th e sam e 
FM value i .o. X4 and X^ ex i st such that X4 9 6 X^ yot F[X4 ^H=-Fp^ 

5 

When X contains more bits than F[X], tho i nput must bo compr e ssed In somo way to create tho 
output, in many cas e s, X is bro l <on i nto b l ocks of a particu l ar s i z e , and comprossod over a 
numb e r of rounds, with th e output of ono round be i ng tho input to tho next. Tho output of tho hash 
funct i on i s th e l ast output onco X has boon consum e d. A peeudo ooUielon of tho compress i on 
1 0 funct i on CF is d e fined as two different initia l values V^. and and two inputs X4. and X^ (possib l y 
i dent i ca l ) aro g i v e n such that CF(V4 rX^ ) - CF(V;j, X;.). Note that tho oxistenco of a psoudo 
coll i s i on do e s not mean that it is easy to comput e an Xg for a g i ven X4 T 

W e are only int e r e sted In on e- way funct i ons that ar e fast to compute. In add i tion, we are only 
15 i nterested in dotorminietic ono way functions that aro ropoatab le in different impl e mentat i ons. 
Con s id e r an e xample F where F[X] is tho t i me b e tween cal l s to F. For a given F[X] X cannot bo 
det e rm i ned b e cause X is not even used by F. How e ver the output from F wi l l b e different for 
different i mplementations. This k i nd of F i s th e refore not of i nt e r e st. 

20 In th e scope of this document, w e are int e r e sted in tho fol l owing forms of on e way functions: 

•* Encr^^tion uoing an unlcnown key 

Random number GcquonGGO 

Ha oh Functiono 

Mooaagc Authentication Codog 

25 

Encrypt i on using on unknown key 

Wh e n a message is encrypted using an unknown key K, tho encryption funct i on E is offoct i vcly 
one way. Without th e key, i t i s computational l y infeas i b l o to obtain M from EK[M] without K. An 
encryption function is on l y one way for as long as th e k e y remains hidd e n. 

30 

An encrypt i on algor i thm do e s not cr e at e collis i ons, sinc e E creat e s EK[M] such that i t is poss i bl e 
to r e construct M using funct i on D. Cons e quent l y F[X] contains at least as many b i ts as X (no 
informat i on is l ost) i f tho ono way funct i on F is E. 

35 Symmetric e ncrypt i on a l gor i thms (s ee Soction 5.2 on pag e 1) have the advantag e over 

asymm e tr i c a l gorithms (see Sootion 5.3 on page 1) for produc i ng one way funct i ons based on 
e ncrypt i on for the fo ll ow i ng reasons: 

Tho key for a given otrcngth cncr]y^tion algorithm io ohortcr 

for a oymmotric algorithm than an aoymmetric algorithm 
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SyTnmotriG algorithms arc faotcr to computQ and require Icoo 

ooftware or oilicon 
Nolo howovor, that tho soleot i on of a good koy dep e nds on the e ncrypt i on algorithm chos e n. 
Certain keys ore not strong for part i cular e ncrypt i on algorithms, so any key noods to b e t e st e d for 
5 strength. Tho more t e sts that n ee d to b e p e rform e d for k e y s e l e ct i on, tho loss l ikely th e k e y wil l 
rema i n h i dd e n. 

5.5.2 Random numb e r s e qu e nc e s 

Conoid e r a random number s e qu e nc e Rq i-Ri .. R,, We define tho one way function F such 
10 that F[X] r e turns the random number in th e random s e quence. However wo must ensure that 
F[X] i s r e p e atable for a g i v e n X on differ e nt impl e m e ntations. The random numb e r s e qu e nc e 
th e refore cannot bo truly random. Inst e ad, i t must b e ps e udo random, with the generator making 
us e of a sp e cific s ee d. 

15 Ther e ar e a l arg e number of Issu e s conc e rned w i th d e fin i ng good random number generators. 
Knuth, i n [ 4 8] descr i b e s what makes a g e nerator "good" (inc l uding statist i ca l t e sts), and th e 
genera l prob le ms associat e d w i th construct i ng th e m. Moreau g i v e s a high l e v e l survey of tho 
cunront state of tho fie l d i n [60]. 

20 Tho majority of random number generators produce tho random number from tho / 1^ stat e - 
th e only way to determin e the numb e r i s to it e rate from the 0^ numb e r to the I f / is large, it 
may not b e practical to wait for / i terat i ons. 

However there is a type of random number generator that does al l ow random acc e ss. I n [10], 
25 B l um, Blum and Shub defin e th e ideal gen e rator as fo ll ows: "... wo would iiko a ps e udo - random 
e e quenoo gonorator to quickly produc e , from short eoeds, long s e qu e nc e s (of bite) that appear in 
ovory way to bo gonoratod by cuccocsivo flips of a fair coin". They defined tho mod n gen e rator 
[10], more commonly ref e rr e d to as th e BBS g e n e rator. Th e y show e d that g i v e n c e rta i n 
assumptions upon which mod e rn cryptography r el i e s, a BBS g e n e rator passes e xtrem e ly 
30 stringent stat i stica l tests. 

Tho BBS generator re li es on se l ecting n which i s a Blum i nteger (n ~ pq where p and q are larg e 
pr i m e numbers, p^ q, p mod 4 3, and q mod 4 ~ 3). Th e in i t i a l stat e of th e gen e rator i s giv e n by 
where Xu" )^ mod n, and x is a random int e g e r r el at i v el y prim e to n. Th e / * * ps e udo random b i t 
35 i s the least sign i ficant b i t of wh e r e : 

X ■ — jg; _ I mod n 
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As an extra prop e rty, know l odge of p and q a ll ows a d i r e ct ca l cu l ation of tho number i n tho 
soquonco as fo l lows: 



X{ - mod f t where y - 2* mod {{p — — \^ 

Without knowl e dge of p and q, tho gonorator must itoroto (tho o e cur i ty of calcu l ation r elie s on tho 
5 conj e ctur e d difficulty of factor i ng l arg e numbers). 

Whon f i rst d e fined, th e pr i mary problem with th e BBS gonorator was th e amount of work required 
for a single output b i t. Tho a l gor i thm was cons i d e r e d too slow for most app l icat i ons. How e v e r tho 
adv e nt of Montgomory r e duction arithm e tic [58] has g i v e n rise to mor e pract i ca l i mplom e ntations, 
10 such as [59]. I n add i t i on, Vaz i ran i and Vazirani hav e shown in [93] that depending on th e size of 
n, mor e bits can safely b e taken from without compromising tho s e curity of th e generator. 

Assuming wo only take 1 bit per x/, N bits (and h e nc e N i terations of tho bit gonorator function) are 
need e d i n order to gonorato an N bit random number. To tho outs i de obs e rver, givon a part i cular 

15 set of bits, there is no way to d e t e rmine the n e xt bit other than a 50/50 probab i l i ty. I f tho x, p and q 
are hidden, they act as a key, and it is computationally infeasiblo to tak e an output b i t str e am and 
compute X, p, and q. I t is a l so computationally inf e asible to d e t e rmine tho valu e of / used to 
gonorato a givon sot of psoudo random bits. This last f e ature makos th e generator on e- way. 
D i fferent values of / can produce Idontical bit s e qu e nces of a givon le ngth (o.g. 32 bits of random 

20 b i ts). Ev e n i f x, p and q are known, for a givon F[/], / can only b e der i ved as a set of possib i l i t i es, 
not as a c e rta i n value (of course if th e domain of / I s known, th e n th e set of poss i bilit i es is reduced 
furth e r). 

However, thoro aro prob le ms in sel e ct i ng a good p and g, and a good s ee d x. I n part i cular, R i tter 
25 i n [68] describes a prob le m i n s e l e cting x. Th e nature of the problem is that a BBS gonorator does 
not cr e at e a s i ngle cycle of known l ength. I nstead, i t cr e at e s cycles of var i ous l e ngths, i nclud i ng 
degenerate (zero length) cycles. Thus a BBS generator cannot b e initial i z e d w i th a random state 
i t might bo on a short cyc l e. Spocific a l gorithms e xist in section 9 of [10] to d e t e rmin e the length of 
tho per i od for a g i von seed g i von certain strenuous cond i t i ons for n. 

30 

5.5.3 Hash functions 

Specia l one way funct i ons, known as Hash funct i ons, map arbitrary l e ngth m e ssag e s to fixed 
l ength hash va l ues. Hash functions aro referred to as H[M]. Since the input is of arb i trary length, a 
hash funct i on has a compression component I n ord e r to produc e a fixed l ength output. Hash 
35 funct i ons a l so have an obfuscation component in order to make it d i ff i cu l t to find collisions and to 
det e rmine informat i on about M from H[M]. 
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Becaus e col li sions do e xist, most app l ications r e quir e that th e hash algor i thm is proimago 
r e sistant, in that for a g i von X4 i t is difficu l t to find such that H[X4] - H[X^]. In addition, most 
app li cat i ons a l so requ i r e th e hash algor i thm to bo colliGion roeiGtant ( i .e. i t should bo hard to find 
two m e ssag e s X4 and such that HPQ] " HpCJ). Howovor, as descr i bod I n [20], i t is an opon 
5 probl e m wh e ther a co lli s i on rosistant hash function, in tho idea l s e nse, can ox i st at a l l. 

The pr i mary app l icat i on for hash functions is i n tho reduction of an i nput m e ssage i nto a dig i ta l 
"fingerprint" before tho application of a d i gita l signatur e a l gor i thm. Ono problem of collisions with 
dig i tal signatures can bo soon i n tho fol l ow i ng oxamp l o. 
1 0 A has a long m e ssage M4 that says 7 owe B $10". A s i gns HfM^] us i ng his pr i vate 

k e y. B, being greody, thon soarchos for a col l is i on mossag o M3 wh e r e H[M2 ]-= 
HfM j but whoro M^t is favorab l e to B, for oxamplo "/ ow e B $1million". Cl e arly it is in 
A's i nterest to ensure that it i s difficult to find such an M^. 

15 Exampl e s of co l lision r e sistant ono way hash functions are SHA 1 [28], MD5 [73] and RIPEMD 
160 [66], a l l dor i vod from MD1 [70][70]. 

6.5.3.1 — MD4 

Ron R i vQst I ntroduced MD 4 [70][70] i n 1090. I t i s only mention e d h e ro bocauso a ll othor ono way 
20 hash functions aro dorivod in some way from MD 4 . 

MD4 i s now oons i derod compiotoly broken [18][18] In that collisions can b e calculat e d instead of 
searched for. I n tho oxamplo abovo, B cou l d trivial l y g e nerate a substitut e m e ssage with tho 
sam e hash valu e as tho or i gina l m e ssage M4 T 

25 

6.5.3.2 — MD6 

Ron Rivest introduc e d MD5 [73] i n 1991 as a more s e cur e MD4. L i ke MD4, MD5 produces a 128 
b i t hash value. MD5 i s not pat e nted [80]. 

30 Dobb e rt i n d e scr i b e s th e status of MD5 after rocont attacks [20]. Ho dGscribos how ps e udo - 
co l l i sions hav e b ee n found i n MD5, i ndicating a w e akn e ss i n tho compr e ss i on funct i on, and mor e 
r e c e nt l y, collisions have been found. Th i s m e ans that MD5 should not b e us e d for compr e ss i on i n 
d i gital signatur e schem e s wh e re th e e xist e nc e of coll i sions may havo d i re consequences. 
However MD5 can sti ll b e us e d as a one way funct i on. I n addition, tho HMAC MD5 construct (s ee 

35 S e ct i on 5.5. 4 .1 on pago 1) i s not aff e ct e d by thos e r e c e nt attacks. 

5.6.3.3 — SHA 1 

SHA 1 [28] is vory s i milar to MD5, but has a 160 - b i t hash va l uo (MD5 on l y has 128 bits of hash 
va l u e ). SHA 1 was design e d and i ntroduced by tho N I ST and NSAfor use In tho D i g i tal Signature 
40 Standard (DSS). Tho original pub li shed descr i ption was called SHA [27], but vory soon 
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afterwards, was r e v i s e d to bocom e SHA - 1 [28], suppos e d l y to corr e ct a security flaw in SHA 
(although th o NSA has not r e ieosod tho mathematical reasoning b e hind the change). 

Th e r e aro no known cryptographic attacks aga i nst SHA 1 [78]. it i s also moro res i stant to bruto 
5 force attacks than MD^ or MD5 s i mp l y bocauso of the l ong e r hash r e su l t. 

Tho US Govornmont owns tho SHA 1 and DSA algorithms (a digital signature authent i cat i on 
algorithm def i ned as part of DSS [20]) and has at least one rolovant patent (US patent 5,231,688 
granted i n 1093). Howovor, accord i ng to NIST [61]: 
10 "Th e DSA patont and any foroign counterpartG that may icsu e ar e avaifablo for ugo 

without any written p e rmission from or any payment of royalties to th e U.S. 

govornmont. " 

I n a much stronger doc l arat i on, NIST states i n tho same document [61] that DSA and SHA 1 do 
15 not i nfr i ng e third party's rights: 

"NiST reviowod ail of tho assorted patents and ooncludod that nono of th e m would 
b e infring e d by DSS. Extra protoction will bo written into the PK1 pilot proj e ct that 
will prevent an organization or individual from suing anyone exc e pt th e gov e rnment 
for patont infringomont during th e course of the project. " 

20 

It must howovor, bo noted that tho Schnorr auth e nt i cation a l gorithm [81] (US pat e nt numb e r 
4,995,082) patont holder claims that DSA i nfr i nges h i s patent. Tho Schnorr patont is not du e to 
e xpir e unt il 2008. Fortunate l y th i s does not affect SHA 1 . 

25 5.5.3.4 — RIPEMD 160 

RIPEMD 160 [66] is a hash funct i on d e rived from its pred e c e ssor R I PEMD [1 1] (develop e d for th e 
European Community's RIPE project in 1992). As its name suggests, RIPEMD 160 producos a 
160 b i t hash r e su l t. Tun e d for softwar e i mpl e mentat i ons on 32 bit arch i tectures, RIPEMD 160 i s 
i ntended to prov i de a high leve l of s e cur i ty for 10 y e ars or moro. 

30 

Although thor e hove be e n no succ e ssfu l attacks on R I PEMD 160, i t is comparat i v e ly n e w and has 
not beon oxtons i voly cryptanalyzod. Tho original R I PEMD algorithm [11] was sp e cifica l ly designed 
to r e s i st known cryptograph i c attacks on MD4. Th e r e c e nt attacks on MD5 (d e tailed in [20]) 
showed s i m il ar weakness e s in tho R I PEMD 128 - bit hash function. A l though th e attacks showed 
35 only theoretical w e aknesses, Dobbort i n, Pronool and Boss e laors furth e r str e ngth e ned R I PEMD 
into a n e w a l gorithm RIPEMD 160. 

R I PEMD 160 i s In tho publ i c domain, and requires no licensing or roya l ty payments. 
40 &7&tA M e ssag e authentication codes 
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Tho prob le m of messag e auth e nticat i on can bo oummod up as followo: 
How can A b e sur e that a moeeago suppoGOdly from B fe in fact from B? 



Messag e auth e nt i cat i on is different from entity Quthont i cation (doscribed i n tho Geotion on 
5 cryptographic chal l ongo rosponso protoco l s). W i th entity authontiootion, ono entity (tho c l aimant) 
proves its i dent i ty to anoth e r (the ver i fier). With m e ssag e authent i cat i on, wo are concerned w i th 
making euro that a given message i s from who wo th i nk i t is from i .o. it has not been tampered 
with e n rout e from th e sourc e to its dest i nation. Wh ile this section has a brief overv i ew of 
m e ssag e authent i cat i on, a more detailed surv e y can b e found i n [88]. 

10 

A on e way hash function is not suffici e nt prot e ction for a messag e . Hash functions such as MD5 
r e ly on g e n e rat i ng a hash value that is repr e s e ntat i ve of tho or i gina l input, and th e orig i nal input 
cannot b e d e rived from th e hash value. A s i mp l e attack by E, who i s i n between A and B, i s to 
i ntercept the message from B, and subst i tut e h i s own. Even if A also s e nds a hash of the or i g i nal 
15 m e ssag e , E can simply subst i tut e tho hash of his n e w message. Using a ono way hash function 
alone, A has no way of know i ng that B's message has b ee n changed. 

On e solution to th e problem of m e ssag e authent i cat i on is th e Message Authent i cat i on Cod e , or 

20 

When 8 sends message M, it also sends MAC[M] so that the r e c e iv e r will know that M is actually 
from B. For this to be possib l e, only B must be able to produc e a MAC of M, and in add i tion, A 
should be abl e to v e rify M aga i nst MAC[M]. Not i ce that this is different from encryption of M ■ 
MACS are us e fu l wh e n M does not hav e to b e secret. 

25 

The simplest method of constructing a MAC from a hash funct i on is to e ncrypt th e hash va l u e with 

a symm e tr i c algor i thm: 

4^ Hash tho I nput messag e H[M] 

30 

This is mor e secure than first encrypting th e message and thon hash i ng tho encrypt e d messag e - 
Any symmetr i c or asymm e tr i c cryptographic funct i on can bo us e d, with tho appropriate 
advantages and d i sadvantage of e ach type descr i bed i n Sect i on 5.2 on page 1 and Section 5.3 en 
page 1 . 

35 

However, there are advantages to us i ng a koy - depondont one way hash function i nstead of 
techniqu e s that use e ncryption (such as that shown above): 

Speed, — bocauoo ono way haah functiono in general wor]c much 

faotcr than cncr^y^tion; 
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Mcoaago aizc, — because Ek[M] i s at l e ast the samo size as M, wh i lo H[M] i s a f i x e d 

G i zo (usua l ly oons i dorab l y sma lle r than M); 

Hardware/ aof twarc rcquirGmcnta keyed one way haah functiono 

are typically far Icqs complex than their encr^^^tion baoed 
5 counterparts ; — and 

One way hash function implementations are not considered to 

be encryption or decryption devices and therefore are not 
■gab ject to US export controls. 
I t should b e noted that hash functions wor e never origina ll y d e sign e d to conta i n a koy or to 
10 support mossago authontlcation. As a result, som e ad hoc methods of using hash functions to 
perform message auth e ntication, i nclud i ng var i ous functions that concat e nat e m e ssages with 
s e cr e t pr e fix e s, suffix e s, or both have boon proposed [56][56]. Most of thos e ad hoc methods 
havo boon succ e ssfully attacked by sophrstioatod moans [ 4 2][ 4 2][ 4 2]. Addit i onal MACs have boon 
suggested basod on XQR ochomos [8] and Toop l itz matric e s [49] ( i nclud i ng the special case of 
15 LFSR - bas e d (L i near F ee d Sh i ft Reg i ster) constructions). 

5.5.^.1 — HMAC 

The HMAC construction [6][6] in particular i s ga i ning accoptance as a solut i on for I nternet 
message auth e nticat i on security protocols. The HMAC construct i on acts as a wrapper, us i ng the 
20 und e r l ying hash function i n a b l ack box way. R e p l ac e ment of th e hash function i s straightfonyard 
i f d e s i r e d duo to security or performance reasons. However, th e major advantag e of th e HMAC 
construct is that it can b e prov e n s e cur e prov i ded th e und e rly i ng hash funct i on has some 
roasonablo cryptographic strengths that i s, HMAC'o strengths aro direct l y connected to th e 
strength of the hash funct i on [6]. 

25 

S i nce tho HMAC conGtruct is a wrapper, any itorativo hash funct i on can bo us o d i n an HMAC. 
Examples i nclude HMAC MD5, HMAC SHA1, HMAC RIPEMD160 otc. 

Giv e n the fo l lowing definitions: 

30 -* II =^ the.haoh function (e.g. MD5 or SIIA 1) 

ft — =- number of bito output from II — (e.g. — 160 for CIIA 1, — iSB- 

bita for MD5) 

M — = the data to which the MAC function io to be applied 

K — ° the occret key ohared by the two parties 

35 ipad 0x36 repeated 64 timeo 

opad = 0x5C repeated 64 timeo 

Th e HMAC algorithm is as fol l ows: 

4^ Extend K to 6^ bytes by appending 0x00 bytes to the end of K 
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2-. XOR th e 6 4 byt e string created in (1) w i th ipad 

^. app e nd data str e am M to th e 6 4 byt e string created i n (2) 

4-. Apply H to the stream gen e rat e d in (3) 

XOR th e 6 4 byto str i ng croatod i n (1 ) w i th opad 

5 St App e nd th e H result from (4) to th e 6 4 byt e str i ng r e su l ting from (5) 

7-, App l y H to the output of (6) and output tho rosult 

Thus: 

HMAC[M] - H[(K 0 - opad) | H[(K 0 i pad) | M]] 

10 

Tho r e commondod k e y length is at le ast n bits, a l though i t should not b e longer than 6 4 bytos (tho 
length of th e hashing b l ock). A key longer than n bits does not add to th e security of the function. 

HMAC optiona l ly a l lows truncat i on of tho final output e.g. truncation to 128 bits from 160 b i ts. 

15 

The HMAC designers' Requ e st for Comments [51] was i ssu e d in 1997, one year after tho 
a l gorithm was f i rst introduc e d. Th e d e s i gners c l aimed that the strongest known attack against 
HMAC i s bas e d on th e fr e qu e ncy of col l is i ons for the hash function H (see Section 1 ^.10 on page 
1), and i s tota l ly impract i ca l for m i nimal l y r e asonab le hash funct i ons: 
20 Ag an oxampio, if wo coneidor a hash function Uko MD5 wh e r e tho output longth fe 

128 bits, the attack e r neoc/G to acquir e th e corr e ct m e ssag e auth e ntication tags 
comput e d (with th e same s e cr e t k e y K) on about 2^ known plaint e xts. This would 
require tho proc e ssing of at l e ast 2^ blocks und e r /-/, an impossible task in any 
r e alistic Gconario (for a block l e ngth of 6^ byt e G thiG would tak e 250,000 y e are in a 
25 continuous 1 GbpG link, and without changing tho socrot koy K all thiG time). This 

attack could bocomo roalietic only if s e rioue flawG in tho collicion behavior of tho 
function H ar e diGCov e r e d (e.g. Collisions found after 2^ m e sGsgoG). Such a 
diGcovery would d e t e rmin e th e imm e diat e roplacomont of function H (th e e ffects of 
Guch a failure would bo far moro Govoro for tho traditional ugog ofHin the cont e xt 
30 of digital GignaturoG, public k e y c e rtificat e G e tc). 

Of course, if a 160 b i t hash function i s used, then 2^ should be replaced with 2^ t 

Th i s should b e contrast e d w i th a r e gular coll i s i on attack on cryptograph i c hash functions whore no 
35 s e cr e t k e y is i nvo l ved and 2^ off li ne paral le lizab le op e rations suff i ce to f i nd co l lisions. 

More recent l y, HMAC protocols with rep l ay prevention components [62] have been d e f i n e d i n 
order to pr e vent tho captur e and r e play of any M, HMAC[M] comb i nation w i th i n a g i ven tim e 
p e r i od. 

40 
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Fina l ly, i t should bo notod that HMAC is in th e pub li c domain [50], and i ncurs no l iconsing fooQ. 
Thoro aro no known patents I nfrlngod by HMAC. 

§T@ Random num b ers and t i me vary i ng messages 

5 Th e use of a random numb e r g e nerator as a ono way funct i on has a l ready boon oxam i nod. 

Howovor, random number gonorator theory is very much Intertwin e d with cryptography, socur i ty, 
and authont l cat i on. 

Th o ro ar o a larg e number of issues conc e rn e d w i th d e fining good random numbor gonorators. 
10 Knuth, i n [^8] descr i b e s what makos a g e n e rator good (includ i ng statistical tosts), and th e g e nera l 
problems assoc i ated with constructing th e m. Moroau giv e s a h i gh l ove! surv e y of tho current stato 
of thofiold in [60]. 

On e of th e uses for random numbers I s to ensure that m e ssages vary ov e r time. Consider a 
15 syst e m wh e r e A e ncrypts commands and s e nds them to B. I f th e e ncryption a l gorithm produc e s 
th e sam e output for a giv e n i nput, an attacker could simply rocord tho messages and play them 
back to fool B. Thoro i s no n e ed for tho attackor to crack the e ncryption m e chanism other than to 
know which messag e to p l ay to B (wh ile protend i ng to be A). Cons e qu e ntly mossagos often 
i nc l ude a random numbor and a tim e stamp to e nsur e that tho message (and henco its encrypted 
20 count e rpart) varies e ach time. 

Random number generators aro also often usod to gen e rate keys. Although K l app o r has r e c e ntly 
shown [ 4 5] that a family of secure f ee dback registers for the purpos e s of build i ng koy - str e ams 
do e s e xist, ho does not g i ve any pract i ca l construction. I t is thoroforo best to soy at the moment 
25 that a ll generators aro insecure for this purpose. For e xampl e , tho Borlekamp Mass e y algor i thm 
[5 4 ], i s a class i c attack on an LFSR random numb e r g e nerator. If th e LFSR is of length n, th e n 
on l y 2n bits of tho sequ e nc e suff i c e to d e term i ne tho LFSR, compromis i ng the key gonorator. 

I f, howovor, th e on l y role of the random numbor gonorator is to mako euro that m e ssag e s vary 
30 ov e r tim o , tho secur i ty of th e g e nerator and s ee d is not as important as i t i s for session key 

g e nerat i on. I f however, tho random number s ee d g e nerator i s comprom i s e d, and an attack e r is 
able to calcu l at e future "random" numbers, it can l e ave some protocols op e n to attack. Any n e w 
protocol shou l d bo oxaminod w i th r e spect to this s i tuation. 

35 The actual typ e of random numbor generator requ i red will dep e nd upon tho i mp l ementat i on and 
the purposes for wh i ch th e g e nerator i s usod. G e nerators includ e B l um, B l um, and Shub [10], 
str e am ciph e rs such as RC 4 by Ron R i vost [71], hash funct i ons such as SHA 1 [28] and R I PEMD 
160 [66], and trad i tiona l generators such LFSRs (Lin e ar Feedback Shift Reg i st e rs) [ 4 8] and th e ir 
more recent counterpart FCSRs (Feedback w i th Carry Shift R e gisters) [^4], 

40 
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Attacks 

This sootion descr i b e s the var i ous typos of attQcks that can b e undertaken to break an 
authent i cation cryptosystem. The attacks ar e group e d into phyeioal and iogicat attacks 



5 Log i cal attacks work on the protocols or a l gor i thms rather than tho i r physical imp l emontation, and 
att e mpt to do one of throe things: 

D^^aoo the authQntication proccoo altogether 

Obtain the secret key by force or deduction, — oo that any 

question can bo answered 

10 -* Find enough about the nature of the authenticating queotiono 

and anawera in order to, — without th e key, give th e r i ght answor to each 
qu e stion. 

R e gard l ess of the algor i thms and protocol used by a Gccurity chip, the oircuitry of th e 
15 auth e nt i cation part of the chip can come under phys i ca l attack. Phys i cal attacks com e i n four main 
ways, although tho form of the attack can vary: 

Bypaooing the oecurity chip altogether 

rhyoical examination of the chip while in operation 

(dootructive and non deatructive) 
20 ^ rhyoical decompooition of chip 

rhyoical alteration of chip 

Th e attack stylos and th e forms they tak e ar e d e ta il ed bo l ow. 

25 This section does not sugg e st solutions to th e s e attacks. It m e rely doscrib e s e ach attack typo. 
The e xam i nat i on Is r e str i cted to tho cont e xt of an auth e nticat i on chip (as oppos e d to some other 
k i nd of system, such as Int e rnet authentication) attach e d to some System. 

^tTtI Logica l attacks 

30 Th e s e attacks are thos e which do not d e p e nd on tho phys i ca l implemontat i on of tho cryp 

tosystem. They work against the protocols and th e secur i ty of the a l gorithms and random numb e r 
g e n e rators. 

5.7.1.1 — Ciph e rt e xt only attack 
35 This i s wh e re an attacker has one or more encrypted messages, all e ncrypted using tho samo 
algorithm. Th e a i m of the attacker is to obta i n th e plaint e xt m e ssages from tho encrypted 
m e ssag e s. Ideal l y, tho key can b e recovered so that all messages i n th e future can also bo 
r e covered. 
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5.7.1.2 — Known plaint e xt attack 

Th i s i s wh e ro an attack e r has both the p l aintext and th e e ncrypt e d form of th e plointext^ In tho 
cas e of an authont i cation chip, a known p l a i nt e xt attack is one whoro th e attacker can soo the 
data flow betwoon the system and tho authent i cation ch i p. Tho i nputs and outputs are obsorvod 
5 (not chos e n by th e attacker), and can b e analyzed for weaknesses (such as b i rthday attacks or by 
a search for difforont i a l ly i nterest i ng input/output pairs). 

A known pla i nt e xt attack can bo carr i od out by conn e cting a l ogic ana l yz e r to tho connect i on 
between tho system and th e authont i cat i on chip. 

10 

5.7.1.3 — Chocon plaintext attackc 

A chos e n pla i ntext attack describes ono whoro a cryptanalyst has th e ab i lity to s e nd any choson 
message to th e cryptosystem, and observe tho response. I f tho cryptanalyst knows the a l gorithm, 
ther e may b e a r el ationship between i nputs and outputs that can b e exploited by f ee ding a 
15 spocifrc output to th e input of another function. 

Th e chos e n plaintext attack is much stronger than tho known p l aintext attack s i nce th e attackor 
can choos e the messag e s rath e r than simp l y observe tho data flow. 

20 On a syst e m using an e mb e dd e d authontication chip, it is g e n e ra l ly v e ry difficu l t to prov o nt 

chos e n p l aint e xt attacks s i nce the cryptanalyst can logically pr e t e nd h e /sh e Is tho syst e m, and 
thus s e nd any choson bit pattern streams to th e authent i cat i on chip. 

5.7.1.4 — Adaptive chos e n plaintext ottacke 

25 Th i s typo of attack is s i mi l ar to tho choson p l a i nt e xt attacks exc e pt that th e attack e r has the added 
abil i ty to mod i fy subsequent chos e n pla i ntexts based upon tho results of previous e xp e r i m e nts. 
Th i s i s certa i n l y tho case w i th any system / authont i cation ch i p sc e nar i o d e scr i b e d for 
consumab l es such as photocopi e rs and toner cartr i dges, esp e cial l y since both systems and 
consumab l es are made available to tho pub l ic. 

30 

5.7.1.5 — Bruto forc e attack 

A guarant e ed way to break any koy based cryptosystem algorithm is simp l y to try every key. 
Ev e ntual l y th e right one w i l l b e found. This is known as a bruto forc e attack. Howev e r, th e mor e 
k e y poss i b ili t i es there ar e , the more keys must bo tried, and hence tho longer i t tokos (on 
35 averag e ) to find tho right on e . If th e re are N k e ys, it will take a maximum of N trios. I f tho key is N 
b i ts long, it wil l take a max i mum of 2*^ tr i os, w i th a 50% chance of find i ng tho koy after on l y half the 
att e mpts (2*^). The long e r N b e com e s, tho long e r it wil l tak e to find th e key, and h e nc e the mor e 
secure tho koy is. Of course, an attack may guess the k e y on th e f i rst try, but th i s i s more unlike l y 
tho longer tho koy i s. 

40 
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Consider a koy length of 56 bits. I n the worst caso, a ll 2 t e st s (7.2 x 10 " ^ t e sts) muot bo made to 
find the koy. I n 1977, Diffie and H e llman d e sor i bod a spoc i al i z e d mach i n e for cracking DES, 
cons i st i ng of one mi lli on processors, oach capab le of runn i ng on e mi ll ion tosts per second [17]. 
Such a mach i n e would take 20 hours to break any DES codo. 

5 

Consid e r a key length of 128 b i ts. I n th e worst caso, a l l 2^ t e sts (3. 4 »f 10^ t e sts) must b e mado 
to find tho key. Th i s would take ton b i llion y e ars on an array of a tril li on processors oach runn i ng 1 
b il lion t e sts por second . 

10 With a long e nough k e y length, a brut e foroo attack tak e s too l ong to bo worth tho attaokor'o 
efforts. 

5.7.1.6 — Guessing attaok 

Th i s typo of attack i s wh e r e an attack e r att e mpts to s i mply "guess" tho koy. As an attack it i s 
15 i dentical to tho bruto force attack (soo S e ction 5.7.1.5 on pag e 1) where tho odds of suocoss 
d e p e nd on th e l e ngth of tho koy. 

5.7.1.7 — Quantum computor attack 

To br e ak an n - bit k e y, a quantum comput e r [83] (NMR, Opt i ca l , or Cag e d Atom) conta i n i ng n 
20 qubits emb e dd e d in an appropr i ate algor i thm must be bui l t. Th e quantum comput e r effoctivo l y 
e x i sts in 2^ s i mu l tan e ous cohoront stat e s. Tho trick i s to extract th e r i ght coh e r e nt stat e w i thout 
cau s ing any d e coh e renco. To dat e this has been achieved w i th a 2 qub i t system (wh i ch ex i sts i n 4 
cohoront stat e s). It i s thought possibl e to extend this to 6 qubits (with 6 4 simu l tanoous coherent 
stat e s) with i n a few y e ars. 

25 

Unfortunate l y, every add i tional qub i t ha l v e s th e re l at i v e str e ngth of tho s i gna l roprosonting tho 
koy. This rap i dly becomes a serious impod i mont to koy retrieva l , especia ll y with the l ong keys 
us e d in cryptogrophical l y s e cure systems. 

30 As a r e sult, attacks on a cryptograph i ca ll y s e cure koy ( e .g. 160 bits) us i ng a Quantum Computor 
ar e l ik e ly not to bo foasib l o and it is oxtromoly un li k el y that quantum computers w i ll have ach i eved 
more than 50 or so qub i ts within tho comm e rcia l lifet i me of the authentication chips. Even us i ng a 
50 qubit quantum computer, 2"^ t e sts are required to crack a 160 bit koy. 

35 5.7.1.8 — Purposoful e rror attack 

With certa i n a l gor i thms, attackers can gather va l uab le informat i on from th e r e su l ts of a bad i nput. 
Th i s can rango from th e error m e ssage text to tho tim e tak e n for tho error to be generated. 

A simple exampl e is that of a ucerid/pacoword schem e . I f th e e rror message usually soys "Bad 
40 us e r i d", th e n when an attackor gets a message saying "Bad password" i nstead, th e n th e y know 
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that tho user i d is correct. If tho m e ssag e always says "Bad uG e rid/password" thon much le ss 
i nformat i on I s giv e n to th e attackor. A more oomplox oxamp i o is that of the rocont pub li shod 
m e thod of cracking e ncrypt i on cod e s from seouro wob s i tes [ 4 1]. Th e attack involves sending 
part i cular m e ssag e s to a sorvor and observing tho orror mossago rosponsos. Th e rosponsos g i ve 
5 enough i nformation to l oam th e k e ys ovon tho lack of a response g i v e s some i nformat i on. 

An oxomp i o of algorithm i c tim o can bo s e en w i th an a l gorithm that returns an orror as soon as an 
orronoous bit is dotoctod i n tho i nput message. Dep e nd i ng on hardwar e i mplementation, i t may bo 
a simple method for tho attack e r to time tho respons e and aitor each bit one by ono doponding on 
10 th e timo tak e n for tho orror response, and thus obtain tho key. Corta i nly i n a chip i mplem e ntat i on 
th e t i mo tak e n can be observed w i th far gr e at e r accuracy than ov e r the Internet. 

6.7.1,9 — Birthday attack 

Th i s attack is nam e d aft e r th e famous "birthday paradox" (wh i ch is not actual l y a paradox at all). 
15 Tho odds of ono person sharing a birthday w i th another, i s 1 in 365 (not counting l e ap years). 

Therefore there must bo 183 p e ople in a room for tho odds to be more than 50% that on e of th e m 
shar e s your birthday. Howovor, thoro on l y needs to be 23 peopl e in a room for there to bo more 
than a 50% chance that any two share a birthday, as shown in the following relation: 



20 



„ , , nPr , 365/^23 ^™ 
Prob =1 r " ^ - ;i ^ ^^^^ 



B i rthday attacks are common attacks against hashing algorithms, e specially thos e a l gor i thms that 
comb i ne hashing w i th dig i ta l s i gnatures. 

If a message has boon generated and already sign e d, an attacker must s e arch for a co lli sion 
25 mossago that hash e s to the same va l u e (ana l ogous to f i nding one person who shar e s your 

b i rthday). However, if the attackor can generate tho mossago, tho birthday attack comes i nto p l ay. 
The attacker s e arches for two messages that share tho same hash va l u e (ana l ogous to any two 
peop l e shar i ng a birthday), on l y ono messag e i s acceptable to the person s i gning it, and th e oth e r 
i s b e n e f i cial for tho attacker. Onc e th e p e rson has sign e d th e original m e ssage tho attack o r simp l y 
30 c l aims now that tho person signed tho altornat i vo message — math e mat i ca ll y thoro is no way to tol l 
which message was tho origina l , sinc e th e y both hash to the same value. 

Assum i ng a brute force attack is tho on l y way to d e termine a match, tho w e ak e n i ng of an n b i t k e y 
by th e birthday attack is 2"^. A k e y le ngth of 128 bits that is susc e pt i b l e to the birthday attack has 
35 an effectiv e le ngth of on l y 6^ b i ts. 

6.7.1.10 Chaining attack 
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Thoso Qro attacks mad e against tho chaining natur e of hash functions. Thoy focus on th o 
compross i on funct i on of q hash funct i on. Tho idoa i s basod on tho fact that a hash funct i on 
gonera ll y tak e s arbitrary l e ngth Input and produces a constant l e ngth output by processing th e 
input n b i ts at a time. Tho output from ono b l ock Is used as the cha i ning var i ab l e sot i nto th e next 
5 b l ock. Rath e r than find i ng a col l ision against an entir e input, th e i d e a Is that given an i nput 
chaining variabl e s e t, to f i nd a sub s titut e b l ock that w i ll r e sult i n tho same output cha i n i ng 
variab l es as tho proper mossago. 

Th e numb e r of choicos for a particular b l ock is basod on tho l e ngth of the block. I f th e chaining 
10 variable i s c b i ts, tho hash i ng funct i on b e haves l ik e a random mapping, and tho block length is b 
b i ts, th e numb e r of such b bit blocks is approximatoiy ^ 4- ^. Tho cha l long e for find i ng a 
substitut i on block is that such blocks are a spars e subs e t of all possibl e b l ocks. 

For SHA - 1 , th e number of 512 bit blocks is approx i matoiy Th e chanc e of find i ng 

15 a block by brut e forc e search is about 1 in 2' *^t 

6. 7.1.11 Substitution with a compl e t e lookup tabio 

If tho number of potential messag e s s e nt to tho ch i p i s smal l , then thor o is no n e ed for a clone 
monufaoturor to crack th e key. Inst e ad, th e c l one manufactur e r cou l d incorporat e a ROM in the i r 
20 ch i p that had a r o cord of al l of th o r e spons e s from a g e nu i n e ch i p to th e codes s e nt by tho 

system. Th e larger th e key, and th e larg e r tho r e spons e , the moro space is r e qu i red for such a 
lookup tab l e. 

6.7.1. 12 Substitution with a epare e lookup table 

25 If tho messages cent to tho ch i p are som e how pr e d i ctabl e , rath e r than e ff e ct i v el y random, then 
tho clone manufacturer n ee d not prov i de a comp l ete l ookup tab le . For example: 

* If the moooago io oimply a oorial number, — the olono 
manufacturor nood oimply provide a loolcup tc± > lG that containo 
30 values for paot and predicted future ocrial numbcra. There arc 
\inlikGly to be more than 10^ of th e s e . 

— If the toot code io oimply the date, — then the clone 
manufacturer can produce a lookup tabic uoing the date ao the 
address . 

35 — If the teat code io a pocudo random number uoing cither the 

ocrial number or the date ao a accd, — then the clone manufacturer 
ju3t nccdo to cracJc the pocudo random number generator in the 
oyotcm. Thio io probably not difficulty — ao they have acccoo to 
the object code of the oyotcm. The clone manufacturer would then 
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produce a content addrcsGablQ momory — (or other oparoc array 
loolcup) — uoing thoae Godo3 to acceoo otorcd authentication codco. 

5.7.1.13 Dffforontiai Gryptanalycie 
5 D i ff e r e ntial cryptanalysis doscrib e s an attack wh e r e pa i rs of input ctr e ams aro gonoratod w i th 
known differ e nc e s, and th e d i ff e rencGS in the oncodod stroamo aro ana l yzed. 

Existing differential attacks are heavi l y dep e nd e nt on th e structure of S boxes, as used In DES 
and oth e r sim i lar a l gorithms. Although oth e r algor i thms such as HMAC SHA1 havo no S boxes, 
10 an attacker can und e rtake a diff e r e nt i a l li ko attack by undertaking statistical analysis of: 

' Minimal difference inputo, — and their correoponding outputo 
• Minimal difference outputs, — and their correoponding inputs 

Most algorithms wore strongthonod aga i nst difforont i a l cryptana l ysis once tho proc e ss was 
15 describ e d. This i s covorod in tho cpocif i c sections devoted to each cryptographic algorithm. 

How e v e r som e r e c e nt algorithms d e v el op e d i n s e cr e t hav e boon broken becaus e th e developers 
had not consid e r e d c e rta i n stylos of diff e rent i al attacks [Q^] and did not subject th e ir algorithms to 
public scrut i ny. 

20 5.7.1.14 MoGGogo substitution attacks 

I n c e rta i n protocols, a man i n the m i ddle can substitut e part or a ll of a m e ssag e . This Is whore a 
real authent i cat i on ch i p i s plugged i nto a rousab l o c l ono chip w i th i n tho consumabl e . Th e c l one 
ch i p I nt e rc e pts a ll m e ssages botwoon tho system and th e auth e ntication chip, and can p e rform a 
number of substitution attacks. 

25 

Consid e r a m e ssag e contain i ng a h e ad e r followed by content An attacker may not bo ab l o to 
g e nerat e a val i d header, but may bo ab l e to subst i tute tho i r own cont e nt, e spec i a ll y if tho val i d 
r e spons e is something a l ong th e li nos of "Y e s, I r e c ei ved your m e ssag e ". Ev e n if the return 
m e ssag e is "Y e s, I r e c ei v e d th e following message tho attackor may be abl e to subst i tute the 
30 or i g i na l mossogo before sending tho acknowl e dgment back to the origina l s e nder. 

M e ssag e Authentication Codes woro developed to combat m e ssage subst i tution attacks. 

5.7.1.15 Rovorso ongin ee ring tho /cey gonerator 

35 I f a psoudo random number gonorator is used to gonorato koys, thoro i s tho potent i a l for a clone 
manufactur e to obtain th e g e nerator program or to deduce tho random seed used. Th i s was the 
way i n which the security l ayer of tho Netscap e browser program was i n i tial l y broken [33]. 

5.7.1.16 Bypassing tho authontication procoGO 
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It may b e that th e r e are problems i n tho authont i cation protoco l s that can a ll ow a bypass of tho 
authent i cat i on process altogeth e r. W i th thos e k i nds of attacks th e key i s complotoly irrelevant, and 
tho attackor has no nood to rocovor i t or deduco i t. 

5 Considor an oxamp i o of a system that authenticates at power up, but does not authont i cato at any 
other t i me. A r e usable consumablo with a c l one authontication ch i p may mako uso of a real 
authentication ch i p. Th e clon e authont i cation ch i p uses the roa l ch i p for th e authont i cation ca ll , 
and then simulat e s tho rea l authont i cat i on chip's state data after that. 

10 Anoth e r e xamp l e of bypassing auth e ntication i s if tho system authenticat e s only aft e r tho 

consumabl e has boon us e d. A clone authont i cation ch i p can accomp l ish a simple authont i cat i on 
bypass by simulating a loss of connection after tho uso of the consumab l e but before tho 
auth e ntication protocol has comp l eted (or e ven started). 

15 On e infamous attack known as tho "Kentucky Fr i ed Chip" hack [2] i nvo l ved roplaoing a 

microcontro l lor chip for a sate ll ite TV syst e m. When a subscriber stopp e d paying th e subscr i ption 
foe, tho syst e m wou l d s e nd out a "disable" message. Howev e r tho now micro controller would 
simp l y d e t e ct this mossogo and not pass i t on to tho consumer's sat ell it e TV system. 

20 5.7.1.17 Garrot e /bribo attack 

I f people know tho key, there is tho possib i l i ty that thoy could toll someone e ls e . The tel li ng may 
bo duo to cooroion (bribe, garroto e tc.), rev e nge (o.g. a d i sgruntl e d employee), or simp l y for 
princ i ple. These attacks are usual l y cheapor and oasior than oth e r e fforts at deducing th e k e y. As 
an oxamp i o, a number of peop le claiming to b e i nvolved w i th tho development of th e (now 

25 d e funct) D i vx standard for DVD claim e d (before tho standard was r e j e ct e d by consum e rs) that 
thoy would like to help d e v e lop Divx sp e cific cracking d e v i c e s out of princ i p l e. 

5.7.2 Physical attacks 

Tho following attacks assume i mplomentation of an authonticat i on mechanism i n a si li con chip 
30 that tho attack o r has physica l acc e ss to. Th e first attack, Roading ROM, describes an attack when 
k e ys are stor e d in ROM, wh i le th e rema i n i ng attacks assume that a secret key is stored in Flash 
m e mory. 

5.7.2.1 — R e ading ROM 

35 If a key i s stored in ROM i t can be r e ad dir e ct l y. A ROM can thus bo safe l y used to hold a pub l ic 
k e y (for uso in asymmetric cryptography), but not to hold a pr i vate koy. In symmetric 
cryptography, a ROM is completely i noocuro. Using a copyr i ght t e xt (such as a haiku) as tho key 
is not suffici e nt, bocauso wo are assuming that the c l oning of tho chip i s occurr i ng i n a country 
wh e r e i nt e ll e ctua l property is not resp e cted. 
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5.7.2.2 — Rovoreo enginooring of chip 

Rovorso onginoor i ng of tho chip i s whoro an attacker opens tho ch i p ond ana l yzeo tho circuitry. 
Once tho circuitry has b ee n ana l yzed tho inn e r work i ngs of tho chip's a l gorithm can bo rocovorcd. 
Lucent Toohnolog ie s hav e dovo l opod an activo method [A] known as TOB I C (Two photon OB I C, 
5 wher e OBIC stands for Opt i cal B e am Induced Curr e nt), to i mag e circu i ts. D e velopod pr i mari l y for 
static RAM ana l ys i s, th e process invo l voo removing any back mat e ria l s, po l ish i ng tho back 
surface to a mirror f i nish, and thon focusing light on the surface. The excitation wav ele ngth is 
sp e cifically choson not to i nduc e a curr e nt in tho I C. 

10 A K e rokhoffs i n tho n i n e t ee nth century mado a fundamontal assumption about cryptanolysio: if tho 
Qigorithm'G inner workings ar e tho soio eecrot of th e ech e mo, th e echemo is ae good as brokon 
[39]. H e stipulated that tho socr e cy must r e sid e entirely i n th e k e y. As a result, the best way to 
protect against rovorso onginoor i ng of tho ch i p is to make tho inner workings i rrelevant. 

15 5.7.2.3 — Usurping tho authontication proGOGG 

I t must bo assum e d that any clone manufacturer has access to both the system and consumablo 
d e signs. 

I f th e same chann e l is usod for commun i cation botwoon tho syotom and a trust e d system 
20 authontication chip, and a non trusted consumabl e auth e nt i cation ch i p, it may b e poss i b l e for th e 
non trusted chip to i ntorrogato a trust e d authonticat i on ch i p in ord e r to obta i n tho "corr e ct 
answ e r". If th i s i s so, a clon e manufacturer wou l d not have to determine tho key. They would only 
hav e to trick th e system i nto using tho responses from th e system authonticat i on chip. 

25 Tho alternat i ve method of usurp i ng tho auth e nt i cat i on process follows the same method as tho 

l og i cal attack descr i bed in Soction 5.7.1.16 on page 1, invo l v i ng s i mu l ated l oss of contact with tho 
system whonovor auth e nticat i on proc e ss e s tak e p l ace, s i mulating pow e r down e tc. 

5.7.2.4 — Modification of syetom 
30 Th i s kind of attack is wh e r e tho system itsolf is mod i fied to accopt clone consumablos. Tho attack 
may bo a change of system ROM, a rew i r i ng of th e consumablo, or, takon to tho extreme case, a 
complete l y clone system. 

Note that th i s kind of attack requ i res each ind i v i dua l syst e m to bo mod i f i ed, and would most l ikely 
35 require th e owner's consent. Thoro wou l d usua l ly have to b e a c l ear advantag e for the consum e r 
to undertake such a mod i fication, sinco i t wou l d typ i ca l ly vo i d warranty and wou l d most l i ko l y bo 
costly. An example of such a mod i fication with a clear advantage to the consumer is a softwar e 
patch to chang e fixed region DVD p l ayers into reg i on free DVD players (although i t should be 
noted that this is not to uso c l one consumab l os, but rathor or i ginals from the sam e compan i es 
40 s i mply targeted for sale i n other oountr i oo). 
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5.7.2.5 — Diroct viowing of chip op e ration by convontionai probing 

I f ch i p oporatlon cou l d bo dirootly viowod using an STM (Scanning Tunno ii ing M i croscopo) or an 
el ectron boam, tho koys could bo rocordod as thoy arc road from the i ntornal non volat il o memory 
5 and l oaded i nto work rog i storc. 

These forms of convontionai probing requir e d i rect accoss to the top or front s i doo of tho IC while 
it is poworod. 

10 5.7.2.6 — Diroct viowing of the non volatilo memory 

If tho chip woro sliced so that tho floating gates of th e Flash memory w e r e exposed, without 
d i scharging them, then tho key cou l d probab l y bo viewed direct l y us i ng an STM or SKM 
(Scann i ng K e lv i n M i croscopo). 

15 Howevor, s li cing tho chip to this l eve l w i thout discharging tho gates is probab l y impossib le . Using 
wet e tching, plasma etch i ng, ion m il ling (focusod ion b e am etching), or ch e m i ca l mochan i oal 
polishing wil l almost certainly d i scharge tho sma l l charges present on tho floating gates. 

5.7.2.7 — Viewing tho light bursts cauGOd by state changos 

20 Whonovor a gate chang e s state, a small amount of i nfrared onorgy is omitted. S i nce sil i con i s 
transparent to infrared, theso changos can b e observ e d by look i ng at tho circu i try from tho 
und e rside of a chip. Wh i le tho om i ss i on process i s weak, it i s br i ght enough to b e dot o ct o d by 
high l y s e nsit i ve equ i pment doveloped for use i n astronomy. Tho techniqu e [92], deve l oped by 
I BM, i s ca ll ed P I CA (P i cosecond I mag i ng Circuit Analyz e r). If tho stat e of a reg i st e r is known at 

25 time t, thon watch i ng that reg i ster change over time w ill r e vea l the exact va l ue at t i me and if 
th e data is part of tho key, thon that part is compromised. 

5.7.2.8 — Viowing tho keys using an SEPM 

A non i nvaoiv e testing device, known as a Scanning Electric Potentia l Microscop e (SEPM), allows 
30 the diroct viewing of charg e s w i thin a ch i p [37]. The SEPM has a tungst e n probe that is plac e d a 
few m i crometers above tho chip, with the probe and c i rcuit form i ng a capac i tor. Any AC signal 
flow i ng b e n e ath the prob e causes d i splacement current to flow through this capacitor. S i nce the 
value of the current change depends on tho amp l itude and phase of the AC signal, tho signal can 
b e i mag e d. I f th e signa l is part of tho key, thon that part i s comprom i sed. 

35 

5.7.2.9 — Monitoring EMI 

Whonovor electron i c c i rcu i try operates, fa i nt e l octromagnot i o s i gna l s aro given off. Ro l ot i vo l y 
inoxponsive equipment can monitor those s i gnals and cou l d give enough i nformat i on to a ll ow an 
attacker to deduce tho koys. 

40 
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5. 7.2.10 Vio wing fluctuatione 

Even if koys cannot bo v i owod, thore i s a fluctuat i on i n current whenov e r rogistors change stat e . I f 
th e re is a h \ gh e nough signal to no i se ratio, an attack e r can monitor th e difforonoo i n I ^m that may 
occur when programm i ng over either a h i gh or a low bit. Tho chang e in 1^^ can r e voa l i nformat i on 
5 about the key. Attacks such as th e s e hav e a l ready b ee n usod to br e ak smart cards [16]. 

5. 7.2.11 Differ e ntial Fault AnafysiG 

This attack assumes introduct i on of a b i t e rror by ion i zat i on, microwav e rad i ation, or onvi 
ronmcntal stroos. I n most cas e s such an e rror i s mor e li kely to adv e rs el y affect tho chip (e.g. 
10 caus e th e program code to crash) rather than cause bonefioial changes which would reveal tho 
k e y. Targ e t e d fau l ts such as ROM ov e rwr i te, gate d e struction etc. are far more like l y to produce 
us e fu l r e su l ts. 

5.7.2.12 Clock giitch attache 

15 Chips aro typically designed to proper l y operate w i thin a certain clock sp e ed rang e . Somo . 

attack e rs attempt to Introduce faults in logic by runn i ng tho chip at extr e m e ly high clock sp ee ds or 
introduce a clock gl i tch at a particu l ar time for a particular duration [1]. Tho idea i s to create race 
conditions wh e r e th e circuitry dees net function properly. An e xampl e cou l d b e an AND goto that 
(because of race conditions) gat e s through Inputs all the time instead of th e AND of Input t^^aod 

20 Input^ T 

If an attaokor knows the interna l structure of th e ch i p, they can attempt to introduce race 
cond i t i ons at tho correct moment in th e a l gor i thm e xecution, th e reby rovoa l ing i nformat i on about 
th e key (or i n tho worst case, tho koy i tso l f). 

25 

5.7.2.13 Power supply attacks 

Instead of cr e ating a g l itch i n th e c l ock signa l , attack e rs can also produce g l itches i n th e power 
supply whore the power is i ncreased or decreased to bo outside th e work i ng op e rat i ng vo l tage 
range. The n e t effect is the same as a c l ock glitch — i ntroduction of error i n the execution of a 
30 part i cular instruct i on. Th e Id e a is to stop the CPU from XQRing the key, or from shift i ng tho data 
one b i t pos i tion etc. Sp e c i f i c instructions ar e targeted so that information about tho key is 
r e v e al e d. 

5.7.2.14 Ov e rwriting ROM 

35 S i ngl e bits i n a ROM can bo overwritten using a l aser cutter microscop e [1], to either 1 or 0 

depend i ng on th e s e ns e of tho l og i c. If the ROM conta i ns i nstruct i ons, it may bo a s i mple matter 
for an attacker to chang e a conditional jump to a non conditiona l jump, or p e rhaps change th e 
destinat i on of a r e gister transfer, if the target instruct i on is chosen carefu ll y, i t may resu l t i n tho 
koy being revea le d. 
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5.7.2.15 Modifying EEPROM/Flaeh 
Th e s e attacks fail into two catogor i os: 

thooG oimilar to tho ROM attacks oxGcpt that the laocr cutter 

microocope technique can be uoed to both oet onof rosot indiv i dua l b i ts. 
5 This g i v e s much gr e ater scop e i n t e rms of modifioation of algor i thms. 

-* Electron beam programming of floating gates. Aa dcacribed in 

[00] — etR^ — [32] , — a focuoed electron beam can change a gate by 
depoaiting clectrono onto it, — Damage to the root of the 
circuit can be avoided^ — ao deocribed in — [31] . 

10 

5.7.2.16 Gat e d e struction 

And e rson and Kuhn doscr i b e d the rump sess i on of th e 1997 workshop on Fast Software 
Encrypt i on [1], wh e r e Biham and Shamir pr e s e nt e d an attack on DES. Th e attack was to uso a 
l as e r cutter to destroy an indiv i dual gat e i n th e hardware imp l omontat i on of a known b l ock c i pher 

15 (DES). Th e n e t e ffect of tho attack was to forco a part i cular bit of a regist e r to b e "stuck". Biham 

a nd Sh a m i r descr i b e d the effect of forcing a particular register to b e affected in this way tho l oast 
sign i f i cant b i t of tho output from tho round function i s set to 0. Comparing th e 6 least s i gnificant 
b i ts of tho l oft half and th e right half can rooovor sovoral bits of tho koy. Damaging a numb e r of 
chips In this way can rev e al enough i nformation about th e k e y to make complete key r e cov e ry 

20 e asy. 

An e ncryption ch i p modifi e d in this way wil l hav e tho property that e ncrypt i on and decryption w i ll 
no long e r b e invorsos. 

25 5.7.2.17 O v e rwrit e attacl<6 

I nstead of trying to road tho Flash memory, an attack e r may simp l y sot a sing l e bit by uso of a 
l as e r cutt e r microscope. Although the attackor doosn't know tho prev i ous va l ue, thoy know the 
new value. I f th e ch i p st il l works, th e bit's origina l stat e must b e the same as the n e w stat e . I f th e 
chip do e sn't work any long e r, the bit's origina l stat e must be tho logical NOT of th e curr e nt stat e . 

30 An attack e r can p e rform this attack on each b i t of tho koy and obtain tho n bit koy us i ng at most n 
ch i ps (if th e now b i t match e d th e old bit, a n e w chip is not requ i r e d for d e t e rmin i ng th e n e xt b i t). 

6. 7.2.16 Toot circuitry attack 

Most ch i ps contain tost c i rcuitry spocifica ll y d e s i gned to ch o ck for manufactur i ng d e f e cts. Th i s 
35 includ e s B t ST (Bui l t I n S el f Tost) and scan paths. Qu i to often the scan paths and test circuitry 
inc l udes access and readout mechanisms for al l the embedded l atches. I n some cas e s tho tost 
circuitry cou l d potont i a l ly bo used to give information about tho contents of part i cu l ar registers. 
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T e st c i rcu i try is oft e n disab le d onco tho chip has passed al l manufactur i ng tootQ, i n somo casoo by 
blowing a spooific conn e ction w i th i n tho ch i p. A dot e rminod attackor, how e ver, can roconnoct tho 
test c i rcu i try and h e nc e e nabl e i t. 



5 5.7.2.19 M e mory r e mnants 

Va l ues roma i n in RAM long aft e r tho powor has been romov e d [35], although thoy do not remain 
long e nough to bo cons i d e red non volatilo. An attack e r can removo pow e r onco sonsitivo 
i nformat i on has boon moved into RAM (for e xamp l e work i ng registers), and then attempt to road 
tho v a lu e from RAM. This attack is most usefu l against socur i ty syst e ms that havo regular RAM 
10 chips. A c l ass i c exampl e is c i t e d by [1], wh e re a socur i ty system was dos i gnod with an automatic 
powor shut off that is tr i gg e r e d wh e n tho comput e r cas e Is opened. Th e attack e r was abio to 
s i mp l y open the case, r e mov e th e RAM chips, and rotr i ovo th e key b e cause tho values pers i sted. 

6.7,2.20 Chip thoft attack 

15 I f th e r e ar e a number of stag e s in th e lifetim e of an auth e nticat i on ch i p, e ach of th e s e stages must 
be e xamined in t e rms of ram i fications for socurity should chips bo stolon. For e xample, i f 
information is programmed into tho chip i n stages, th e ft of a chip betw e en stag e s may a l low an 
attack e r to hav e access to koy informat i on or r e duc e d efforts for attack. S i m i lar l y, i f a chip i s 
stol e n dir e ctly aft e r manufacture but b e for e programming, doos it give an attacker any l ogical or 

20 physical advantage? 
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5.7.2.21 — Trojan hors e attack 

At some stag e th e auth e nt i cation chips must bo programmod with a secr e t key. Suppose an 
attackor builds a c l ono authent i cation chip and adds i t to tho pi l e of ch i ps to bo programmod. Tho 
attack e r has e spec i al l y bu i lt tho clone ch i p so that i t l ooks and bohavoo just li ko a real 
5 auth e nticat i on ch i p, but wil l giv e tho key out to tho attacker when a sp e c i al attacker known 
command i s i ssu e d to tho ch i p. Of course tho attackor must hove access to tho chip aft e r tho 
programming has token plac e , as we ll as phys i cal acc e ss to add tho Trojan horso auth e nt i cation 
ch i p to the g e nuin e chips. 

10 6 Roquiromonts 

Ex i sting solut i ons to th e prob le m of authont i cating consumabl e s hav e typica ll y re l i e d on patents 
cov e ring physical packag i ng. Howev e r this does not stop hom e r e f i l l op e rations or c l ono 
manufacture i n countr i es w i th w e ak i ndustr i al property protection. Consequently a much h i gher 
lovol of protection i s roquirod. 

15 

Tho authenticat i on mechanism is th e r e fore built into an auth e nt i cation chip that is e mbedded in 
th e consumabl e and allows a system to authent i cate that consumab l e securely and easi l y. 
Limiting ours e lves to th e system auth e nticating consumables (wo don't consider th e consumable 
authont i cating tho system), two l e v e ls of protection can bo consid e r e d: 

20 

Prosonco Only Authont i cation: 

Th i s is whore only tho pr e s e nce of an auth e nticat i on chip is tested. Th e authent i cation 
ch i p can be r e mov e d and used i n othor consumables as long as bo us e d ind e finite l y. 

25 Consumab le Lif e tim e Auth e ntication: 

This is where not only is th e pr e s e nc e of tho auth e ntication chip t e sted for, but also tho 
auth e nt i cation chip must only last th e l i fotimo of th e consumab l o. For tho ch i p to b e r e 
used it must bo compl e t el y erased and reprogrammod. 

30 Th e two l ovo l s of protoct i on addr e ss d i ff e r e nt r e qu i rements. Wo aro pr i mar il y concerned with 
Consumab le Lif e time authont i cat i on in ord e r to pr e vent clon e d v e rsions of high volume 
consumab l es. I n this cas e , e ach chip should hold s e cur e stat e i nformat i on about th e consumabl e 
being authont i catod. It should bo not e d that a Consumabl e Lifet i m e authonticat i on ch i p cou l d b e 
used in any s i tuat i on requ i ring a Pr e sence Only authont i cat i on ch i p. 

35 

R e quir e ments for auth e ntication, data storage integrity and manufacture aro consid e r e d 
separate l y. Tho fo l low i ng sections summarize requirements of each. 

&7A Aut h entication 
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Th e auth e nt i cation requ i romonto for both Pr e senc e On l y and Consumablo L i fotimo authont i cation 
are r e str i otod to th e case of o cystom auth e nt i cat i ng a consumab l e. W e do not cono i dor bi 
directiona l auth e ntication whore th e consumab le also authenticates tho system. For exampl e , i t i s 
not nocessary for a va li d tonor cartridg e to e nsur e i t is being used in a val i d photocopior. 

5 

For Prosonco On l y authont i cation, we must be assured that an authont i cation chip is phys i cally 
pr e sent. For Consumable Lifet i m e auth e ntication wo a l so nood to bo assured that stato data 
actua l ly cam e from th e authent i cat i on ch i p, and that it has not boon a l t e r e d en route. Thoso 
issu e s cannot b o separated — data that has beon altered has a now sourc e , and if tho source 
10 cannot b e d e t e rm i ned, tho question of alterat i on cannot bo sottlod. 

I t is not enough to prov i de an auth e ntication method that is s e cr e t, r el y i ng on a hom e brow 
security method that has not boon scrutiniz e d by s e curity e xperts. Tho primary requ i rement 
thoreforo I s to prov i d e authont i cat i on by moans that hav e w i thstood tho scrutiny of oxports. 

15 

The auth e nticat i on sch e m e us e d by tho auth e nticat i on chip shou l d be res i stant to defeat by log i cal 
means. Logical typos of attack are extens i ve, and att e mpt to do on e of throe things: 

B^'paoa tho authentication proaooe altogether 

Obtain the secret key by force or deduction, — oo that any 

20 que ot ion can be anowered 

Find enough about the nature of the authenticating questions 

and answer a in order to, — without the key, — give the right 
answer to each question. 

25 Tho l ogioai attack stylos and the forms th e y take ar e detail e d in Sect i on 5.7.1 on page 1 . 

Th e a l gorithm should hav e a flat k e yspace, al l owing any random bit string of tho required length to 
bo a possib l e key. Ther e should be no weak k e ys. 

30 ©tS Data storage integr i ty 

Although auth e nt i cat i on protocols tak e car e of ensur i ng data integrity I n communicated messages, 
data storage I ntegr i ty I s a l so requir e d. Two kinds of data must b e stored with i n th e auth e nt i cat i on 

jp* 

Authentication data, — ouch as secret Iceys 

35 -* Consumable state data^ — ouch as serial numbers, — and media 

remaining etc. 
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Th e aocoss r e quir e m e nts of thes e two data typos d i ff e r gr e atly. Tho authontication ch i p thorofore 
r e quires a storag e /acc e ss contro l moohanism that a l lows for tho i ntegrity requ i r e ments of each 

5 §A4 Authent i cat i on data 

Auth e nt i cation data must rema i n confident i a l . It noods to bo stored in tho chip dur i ng a 
manufactur i ng/programming stag e of tho ch i p's lif e , but from then on must not bo porm i ttod to 
loavo tho chip. I t must bo resistant to boing road from non - volati le memory. Th e authonticat i on 
sch e m e i s rosponstb l o for ensur i ng tho koy cannot bo obta i nod by deduct i on, and tho 
10 manufacturing process is r e sponsible for ensuring that tho koy cannot b e obtainod by physica l 
moans. 

The siz e of tho authonticat i on data memory area must bo large enough to hold the necessary 
keys and secr e t i nformat i on as mandated by the auth e ntication protocols. 

Consumab le stat e data 

Consumable state data can b e divided i nto tho fo l lowing types. Depend i ng on tho appl i cat i on, 
there will bo difforont numb e rs of e ach of theso typ e s of data i tems. 

Read Only 

RcadWritG 

DGGrGmcnt Only 

R e ad On l y data noods to bo storod in tho chip dur i ng a manufactur i ng/programming stago of tho 
chip's l ife, but from then on should not bo a ll owed to change. Examp l es of Read On l y data 
25 it e m s ar e consumabl e batch numbers and ser i a l numb e rs. 

ReadWrito data i s chang e ab le state information, for oxampio, tho l ost time tho particu l ar 

consumab le was us e d. ReadWrito data i t e ms can b e r e ad and writt e n an un l im i ted number 
of t i mes during tho l ifetim e of tho consumab l e. They can bo used to store any stat e 
i nformation about th e consumab l e. Th e on l y requir e ment for this data i s that it n e eds to bo 
30 kept in non volatile m e mory. Sinc e an attackor can obtain acc e ss to a syst e m (which can 

wr i t e to R e adWrit e data), any attackor can potontia l ly chang e data fie l ds of this typo. This 
data typo should not bo usod for s e cr e t i nformation, and must b e cons i d e r e d i nsecure. 
Decromont Only data i s us e d to count down th e ava il ab ili ty of conoumabi o resourc e s. A 

photocop ie r's ton e r cartr i dg e , for example, may store th e amount of toner rema i ning as a 
35 Decromont On l y data item> An ink cartridg e for a color printer may store tho amount of each 

i nk color as a Decrement On l y data i tem, r e qu i r i ng 3 (one for each of Cyan, Mag e nta, and 
Yel l ow), or oven as many as 5 or 6 D e cromont Only data i tems. Tho roquiromont for th i s 
kind of data item is that once programm e d w i th an i nitial valuo at tho 
manufacturing/programming stago, it can only r e duce in vaiuo. Once i t reaches tho 



15 
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min i mum valuo, i t cannot docromont any further. The Docrom e nt On l y data itom i s on l y 
required by Consumab l e Lifotimo authont i oation. 



Not e that the s i ze of the oonsumab i o state data otorage requ i red is on l y for that i nformat i on 
5 r e quir e d to bo authent i cat e d. I nformat i on which would be of no us e to an attacker, such as ink 
co l or curve charact e r i stics or i nk viscos i ty do not have to be stored in th e secure state data 
memory area of th e auth e nt i cat i on chip. 

§t5 Manufacture 

10 Th e auth e nt i cation ch i p must have q l ow manufacturing cost in ord e r to bo i ncluded as the 
auth e nticat i on mechanism for l ow ccst consumables. 

The authentication chip should use a standard manufacturing proc e ss, such as Flash. Th i s i s 
n e c e ssary to: 

15 Allow a great range of manufacturing location options 

Uoc well dofincd and well bohavcd technology 

RoduGQ Goat 

Regardl e ss of the auth e nt i cation scheme used, the c i rcu i try of the authentication part of the ch i p 
20 must b e r e sistant to physica l attack. Phys i ca l attack comes in four main ways, a l though the form 
of the attack can vary: 

B^^^aoQing the authentication chip altogether 

^ rhyoical examination of chip while in operation — (dootructive 

and non deotructivc) 

25 -"-j^ rhyaical decompooition of — chip 

rhyaical alteration of chip 

Th e phys i cal attack styl e s and the ferms they tak e are deta i led i n Section 6.7.2 en page 1 . 
I d e a l ly, th e ch i p should b e e xportable from the USA, so it shou l d not bo possibl e to us e an 
30 auth e ntication chip as a s e cur e e ncrypt i on device. Th i s is l ew priority r e qu i rem e nt sinc e th e r e are 
many compani e s i n other countri e s abl e to manufacture the authentication chips. I n any case, the 
export restr i ctions from the USA may change. 

Authent i cat i on 

35 7 I ntroduct i on 

Ex i sting so l utions to the problem of authenticating consumabl e s have typical l y rolled on physica l 
patents on packag i ng. However th i s does not stop homo ref i l l operations or clone manufactur e i n 
countr ie s with weak industr i al property protoct i on. Consequently a much high e r le v e l of protect i on 
i s requ i red. 
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It i o not onough to prov i d e an auth e nt i cation mothod that is s e crot, ro l ying on a homo brow 
socurity method that has not b ee n scrutinized by security exp e rts. S e cur i ty systoms such as 
Notscopo's or i g i na l propri e tary system and tho GSM Fraud Provont i on Network used by co l lu l ar 
5 phones ore examp l es where des i gn socrocy caus e d th e vu l n e rab i lity of th e socur i ty [33][33]. Both 
s e cur i ty systems w e r e brolc e n by conventional moans that would hav e b e en detected i f the 
compan ie s had follow e d an op e n d e sign process. The so l ution i s to prov i d e authent i cat i on by 
means that have w i thstood tho scrut i ny of exports. 

10 I n this s e ction, w e e xam i n e a number of protoco l s that can bo usod for consumables 

auth e nticat i on. W e only use security m e thods that aro publicly d e scr i b e d, us i ng known bohav i ors 
i n this now way. Roadors shou l d bo fami l iar w i th th e conc e pts and torms descr i b e d in Sect i on 5 
on pag e 1 . W e avo i d the Z e ro Knowlodgo Proof protoco l sinc e it i s pat e nt e d. 

15 For a l l protocols, the security of the scheme rolios on a s e cr e t k e y, not a s e crot a l gor i thm. I n th e 
n i notoonth c e ntury, A K e rckhoffs made a fundamenta l assumption about cryptanalysis: if the 
a lgorithm's inn e r workings ar e th e sol e secret of tho sch e m e , th e schem e is as good as broken 
[39]. H e st i pu l ated that tho socrocy must reside entirely in tho k e y. As a r e sult, th e b e st way to 
prot e ct against revers e e ngin ee ring of any auth e ntication ch i p i s to mak e th e algorithmic inn e r 

20 workings irrolovant (tho a l gorithm of th e inn e r workings must still b e must b e va li d, but not th e 
actua l s e cr e t). 

Th e QA Chip i s a programmable d e vic e , and can ther e fore be setup with an appl i cation - sp e cific 
program tog e ther w i th an app li cat i on specif i c sot of protoco l s. Th i s sect i on descr i bes tho following 
25 sots of protocols: 

oinglo key ainglc memory vector 

multiple 3cey oinglo memory vector 

multiple key multiple memory vector 

30 Th e s e protocols r e f e r to tho number of val i d k e ys that an QA Ch i p knows about, and th e siz e of 
data required to b e stor e d in the chip. 

From th e s e protocols i t i s straightforward to construct protocol sots for tho sing le k o y mu l t i p l e 
memory vector case (of course th e mu l t i p le m e mory v e ctor can bo considered to bo . and mu l tipl e 
35 k e y sing l e memory vector. Other protoco l s e ts can also be defined as necessary. Of cours e 
mu l t i p le m e mory vector can b e convon i ont l y 

A ll th e protoco l s re l y on a t i me var i ant cho ll onge (i.e. the chal le ng e is d i ffer e nt each t i me), wh e re 
th e r e spons e dep e nds on tho challenge and the secr e t. The cha lle ng e involves a random numb e r 
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so that any observ e r w i l l not bo ab l o to gather usefu l i nformat i on about a subsoquont 
i dentifioation. 

8 S i ngle Key Single Memory Vector 

5 StI — Protocol b ackground 

This protooe l set is provided for two reaoenc: 

tho other protocol octo defined in thia documont arc oimply 

cxtenoiono of thio one; — aad 
it io uaeful in ita own right 

10 

Th e singl e key protoco l s e t i s us e fu l for applications wh e r e only a s i ngl e k e y i s required. Not e that 
th e r e can b e many consumab l es and systems, but th e r e is only a single k e y that connects them 
all. Examples i nc l ude: 

car and Iccyo . A car and the car Icey oharc a oingle ]cGy. — There 

15 can be multiple oeta of car keya, — each effectively cut to the 

□ame key. A company could have a oct of caro^ — each with the 
oame key. Any of the car Iceyo could then be uoed to drive any 
of the caro . 

printer and inJc cartridge. All print ero of a certain model 

20 uoe the oame ink cartridge, — with printer and cartridge 

oharing only a oingle key. Note that to introduce a new 
printer model that acccpto the old ink cartridge the new 
model would need tho oame key ao the old model . Sec the 
multiple key protocola for alternative oolutiono to thio 
25 problem, 

&72 REQUiREMEhfr S OF PROTOCOL 

Each QA Ch i p conta i ns the fo ll ow i ng va l u e s: 

K Th e s e cr e t key for calculat i ng Fk[X]. K must not be otor e d dir e ctly in th e QA Chip. 

30 I nst e ad, each chip n e eds to store a random number Rk (diff e r e nt for e ach ch i p), 

K^Rk , and .KGRk. Th e stor e d KeRK can bo XORod with Rk to obtain tho real K. 
Although . KSRk must bo stored to protect aga i nst d i ffer e ntial attacks, it is not 
used. 

RCurr e nt random number used to e nsure time varying moGsages. Each chip i nstanc e must 
35 b e seeded w i th a d i ffer e nt in i tia l va l ue. Changes for each signatur e generat i on. 

M — Memory vector of QA Ch i p. 

P2 ele ment array of access p e rmiss i ons for e ach part of M. Entry 0 ho l ds ooooss 

p e rm i ss i ons for non authenticated wr i t e s to M (no key roqu i red). Entry 1 ho l ds 
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aoo e ss p e rmissionQ for authont i oated writoo to M (koy roqulrod). PormiGGion 
cho i ces for each part of M ore Road Only, Road/Write, and D e oromont Only. 

C3 constants used for gonorating s i gnatures. C4, C^, and ar e constants that pad out a 
submossago to a hashing boundary, and al l 3 must bo difforont 
5 Each QA Chip contains tho following private function: 

SkP^J Int e rnal function only. Returns Sk[X], tho resu l t of apply i ng a dig i ta l signature 

funct i on S to X bas e d upon k e y K. The digita l signature must b e l ong enough to 
count e r the chanc e s of som e on e gonorat i ng a random signature. Tho length 
depends on tho signature scheme chos e n, although th e sch e m e choson for tho 
10 QA Ch i p Is HMAC SHA1 (soo Sect i on 13 on page 1), and th e refor e the l ength of 

th e signature i s 1 60 bits. 



Additiona l functions are required in certain QA Chips, but thes e ore descr i bed as roqulrod. 

15 StS Reads of M 

I n this cas e , wo havo a trusted ch i p (ChlpT) connected to a System. Tho Syst e m wants to 
authenticate an object that conta i ns a non trust e d ch i p (ChipA). I n e ffect, th e Syst e m wants to 
know that i t can securely r e ad a memory vector (M) from ChipA: to b e sure that Ch i pA is val i d and 
that M has not boon altered. 
20 Th e protoco l r e qu i res th e fol l ow i ng public l y ava i lab le funct i on i n Ch i pA: 

R e ad[X] — Advanc e s R, and returns R, M, SK P^t^tG^ ^ I M]. The time tak e n to calculate tho 
s i gnature must not be based on tho contents of X, R, M, or K. 

Th e protocol requires the fol l ow i ng pub l ic l y avai l able functions in ChipT: 
25 Random □ R e turns R (does not advance R). 

T e st[X, Y, Z] Advances R and returns 1 If Sk {RP^4 ^ | Y] - Z. Oth e rwis e returns 0. Tho t i me 
tak e n to calcu l at e and compar e signatures must be indepondont of data content. 

To auth e nticate ChipA and road ChipA's m e mory M: 
30 a. Syst e m ca l ls Ch i pT's Random funct i on; 

b. Ch i pT returns R|. to System; 

c. Syst e m cal l s ChipA's R e ad funct i on, passing in the resu l t from b; 

d. ChipA updates Ra, th e n calcu l at e s and returns RA r-MAT-SKtRTtRA|C4{MA}7 

e. Syst e m ca l ls Ch i pT's Test funct i on, passing i n RA i-MAT-SKtRFtRvlG^IMAiy 

35 f . Syst e m chocks response from ChipT. If tho respons e i s 1 , th e n Ch i pA is cons i dered authentic. 
I f 0, ChipA i s cono i dorod invalid. 

Th e data flow for road authenticat i on is shown in Figure 33 4 . 

Th e protocol allows Syst e m to simply pass data from one chip to anoth e r, with no special 
40 processing. Tho protection re li es on ChipT boing trusted, even though System does not know K. 
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Wh e n ChipT i s physical l y separate from Systom (og is chip on a board oonnoctQd to Systom) 
Syst e m must also occoGelonQlly (bas e d on syst e m clock for oxampio) cal l ChipT'o T e st funct i on 
w i th bad data, e xp e ct i ng a 0 r e spons e . This i s to pr e v e nt someone from i nserting a fako ChipT 
5 i nto th e syst e m that a l ways returns 1 for tho Tost funct i on. 

%A Writes 

I n this case, the System wants to update M in som e chip r e f e rred to as ChlpU. Th i s can bo non 
authenticat e d (for e xample, anyone is a l lowed to count down the amount of consumab l e 
10 rema i ning), or authenticated (for examp l e, replenishing the amount of consumable remaining). 

%AA Non - auth e nticated wr i tes 

Th i s i s tho most frequ e nt typ e of wr i te, and tokos p l ace between the Syst e m / consumable dur i ng 
normal everyday op e ration. In this k i nd of wr i t e , Syst e m wants to chang e M i n a way that do e sn't 
15 r e quir e sp e c i a l authorization. For exampl e , tho Systom could bo decrementing th e amount of 
consumable r e main i ng. Although System dooG not no e d to know K or e v e n havo accees to a 
trust e d chip, Syst e m must fo l low a non - auth e nticated write by on authenticated read if it needs to 
know that the wr i te was successfu l . 

20 The protoco l r e quir e s the fo ll owing publ i c l y ava i lab l e funct i on: 

Write[X] Wr i tes X ev e r those parts of M subject to and the existing va l ue for M. 

To authontlcate a write of Mn e w to ChipA's memory M: 
a. System ca ll s Ch i pU's Write function, pass i ng i n Mn e^i 
25 b. Th e auth e nt i cation procedur e for a Road is carried out (see Sect i on 8.3 on pago 1 ); 
c. I f ChipU i s authent i c and - M r e turned in b, th e write succ ee ded. I f not, i t fo il ed. 

8t472 Authenticat e d wr i t e s 

In this kind of wr i t e , Syst e m wants to chang e Ch i p U's M i n an author i zed way, without b e ing 
30 subj e ct to tho perm i ssions that apply during norma l op e ration (Po). For e xampl e , th e consumab l e 
may be at a ref il l i ng stat i on and the normal l y D e crement Only sect i on of M should be updat e d to 
inc l ude tho now val i d consumabl e . I n th i s case, tho ch i p whos e M i s being updated must 
authenticate th e writes b ei ng g e nerated by th e e xt e rna l Systom and in addition, apply permissions 
to ensure that on l y tho correct parts of M are updated. 
35 In th i s transact i on protoco l , th e Syst e m's ch i p i s r e f e rred to as ChipS, and tho ch i p being updated 
i s rofonrod to as ChipU. Each chip distrusts tho oth e r. 
Th e protocol requ i res tho fol l owing publ i cly ava i lab l e funct i ons i n Ch i pU: 

R e ad[X] Advances R, and returns R. M, S kP^IRIC ^ I M]. Th e time takon to ca l cu l ate tho 

signatur e must bo i dent i ca l for a ll i nputs. 
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Writ e A[X, Y, Z]R e turns 1, advances R, and roplacos M by Y subject to P:^ on l y if SK {RtXiG^pq 
- Z. Otherw i s e r e turns 0. The t i mo tak e n to ca l cu l ate and compare 
signatures must b e Independ e nt of data cont e nt. This function i s 
id e ntica l to ChipT's Tost function except that i t addit i onally wr i tes Y ov e r 
5 thoso parts of M subj e ct to P4 when the signature match e s. 

Auth e nticated wr i tes requ i re that th e Syst e m has acc e ss to a Ch i pS that i s capablo of generat i ng 
appropr i oto signatures. ChipS requires th e fo l lowing variables and function: 

CountRemaining Part of M that conta i ns the number of signatures that Ch i pS is allowed 

10 to gen e rat e . Decromonts with e ach succ e ssful cal l to SignM and SignP. 

Permissions in Ch i pS's Po for th i s part of M noods to b e R e adonly onco 
Ch i pS has boon setup. Th e r e for e CountRemaining can only b e updat e d 
by another Ch i pS that will perform updates to that part of M (assum i ng 
ChipS's P4 al l ows that part of M to be updated). 

15 Q Part of M that contains th e write perm i ss i ons for updating ChipU's M. By adding 

Q to Chips we al l ow diff e r e nt ChipSs that can updat e diff e r e nt parts of 
M y. Permissions in ChipS's P^^ for this part of M needs to be ReadOnly 
onc e Ch i pS has boon setup. Therefore Q can only bo updated by 
another ChipS that w il l perform updates to that part of M. 

20 S i gnM[V,W,X,Y,Z] — Advanc e s R, d e cr e ments CountR e ma i ning and r e turns R, 

appl ie d to X w i th p e rm i ssions Q), fo ll ow e d by Sk[W | R | C 4|Zq x] on l y i f 
S k[V|W|C4.|X] - Y and CountR e main i ng > 0. Oth e rwis e r e turns all Os. 
The timo taken to calculat e and compare s i gnatur e s must b e 
i nd e p e nd e nt of data content. 

25 

To updat e ChipU's M v e ctor: 

a. Syst e m ca l ls ChipU's R e ad function, pass i ng in 0 as the input parameter; 

b. ChipU produces F^u r-Myr^fOtR^^jC^jM y] and r e turns these to System; 

c. Syst e m calls Ch i pS's SignM funct i on, passing in 0 (as used i n a), Ru i-Mur-SKt^tRt^tC^IM u], and 
30 Mp (th e desired vector to bo wr i tten to Ch i pU); 

d. Chips produc e s Rs r-Mop (proc e ss e d by running M o aga i nst My us i ng Q) and SK tRul^i^^jMop} 
if th e i nputs wore va l id, and 0 for al l outputs if tho inputs were not val i d. 

o. If values return e d in d ar e non zero, then ChipU is considered auth e ntic. System can th e n call 

Ch i pU's WriteA function w i th th e s e va l u e s. 
35 f. ChipU shou l d return a 1 to i nd i cat e success. A 0 should on l y b e r e turn e d i f the data g e n e rat e d 

by Ch i pS i s i ncorrect ( e .g. a transmission error). 
Th e data flow for authenticated writ e s is shown i n F i gur e 335. 

Not e that Q i n Ch i pS is part of Ch i pS's M. Th i s a l lows a us e r to set up Ch i pS w i th a p e rmiss i on 
40 s e t for upgrades. Th i s should bo done to ChipS and that part of M designated by Pu sot to 
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RoadOnly bofor e ChipS i s programmod w i th K^ ^-tf-K g is programmod w i th Ku first, thoro i s a risk 
of somoono obtaining a half setup Ch i pS and changing al l of My i nst e ad of on l y tho s e ctions 
spoctfiod by Q. 

5 The samo is true of CountRomaining, Tho CountRoma i ning va l uo noodo to bo setup ( i ncluding 
mak i ng i t Readon l y in Py) boforo ChipS is programm e d with Ky. ChipS is thoroforo programmod 
to only p e rform a limited number of SignM operat i ons (thereby l imit i ng comprom i se exposure i f a 
Ch i pS is stolen). Thus Ch i pS wou l d i tself need to b e upgraded w i th a new CountRoma i ning every 
so oft e n. 

10 

8i4r3 Updating p e rmiss i ons for future writes 

I n ord e r to roduco exposur e to accidental and mal i cious attacks on P and c e rta i n parts of M, only 
authoriz e d users aro al l owed to update P. Writes to P oro the sam e as author i zed wr i t e s to M, 
e xc e pt that they update Pb i nst e ad of M. I nit i a l ly (at manufactur e ), P I s sot to b e R e ad/Wr i te for al l 
15 parts of M. As different process e s fi ll up different ports of M, they can be sealed aga i nst future 
chang e by updat i ng th e p e rm i ss i ons. Updating a chip's Pg chang e s p e rmiss i ons for unauthoriz e d 
wr i t e s, and updating P^. changes perm i ss i ons for author i zed wr i tes. 

Pfl is only a ll ow e d to change to b e a mor e restr i ctiv e form of i ts e lf. For e xample, i nit i a ll y al l parts of 
20 M havo p e rm i ssions of RoadWrit e . A p e rmission of R e ad/Write can b e updated to Docromont 
On l y or R e ad On l y. A p e rmiss i on of Decr e m e nt On l y can bo updat e d to bocomo Read Only. A 
R e ad On l y perm i ssion cannot bo furth e r restr i cted. 

I n th i s transaction protoco l , th e Syst e m's chip is r e f e rr e d to as ChipS, and th e chip b e ing updat e d 
25 i s r e f e rred to as ChipU. Each chip distrusts tho other. 

Th e protocol requ i res th e following publ i c l y availab le funct i ons in ChipU: 
Random □ R e turns R (do e s not advanc e R). 

S e tP e rmiss l on[n,X,Y,Z] Advances R, and updates P^ according to Y and r e turns 1 fo l lowed 
30 by th e r e su l tant P„ only if Sk[R | X|Y | C j - Z. Oth e rwis e r e turns 0. P^ -gbb 

on l y bocomo more restr i cted. Pass i ng i n 0 for any permission le av e s it 
unchanged (pass i ng I n Y-Q returns tho current P^ ^r 

Authent i cated wr i tes of perm i ssions r e qu i re that tho Syst e m has access to a Ch l pS that I s capab le 
35 of g e n e rat i ng appropr i ate s i gnatur e s. ChipS requ i res th e fol l owing var l ab l os and function: 

CountRoma i ning Part of M that conta i ns th e numb e r of s i gnatur e s that Ch l pS is a l lowed to 
generate. Decrements w i th each successful ca l l to SignM and S I gnP. 
P e rm i ss i ons i n ChipS's P^ for this part of M needs to b e RoadOnly onco 
Chips has be e n setup. Ther e fore CountR e ma l n I ng can only bo updated by 



PEA23US 



666 



anoth e r ChipS that w il l p e rform updat e s to that part of M (assuming 
ChipS's P4 a ll ows that part of M to b e updated). 

SignP[X,Y] Advanc e s R, deor e monts CountRoma i n i ng and returns R and Sk[X | R | Y|C^ 

on l y i f CountRemalning > 0. Oth e rwis e returns a ll Os. Tho time taken to 
5 calcu l ate and compar e s i gnatur e s must bo i ndepend e nt of data content. 



To updat e ChipU's P» t 
a — System calls ChipU's Random funct i on; 
b-. — ChlpU returns Ry to Syst e m; 
10 G: — Syst e m calls ChipS's S i gnP function, passing in R^ and Py (tho desired P to b e written to 
Ch i pU); 

4-. — Chips producos Rs and SK tRy|RsF&{^ a] if i t is st il l p e rmitted to produc e s i gnatur e s. 

e: — I f values returned i n d ar e non zero, th e n Syst e m can th e n call ChipU's S e tP e rmisston 

funct i on with tho d e sired n, R&, Py and SK tRujR s | Pp |Ca]. 
1 5 fz — ChipU v e rifies tho rece i ved s i gnature aga i nst SK {Ry|R s | P&|C^] and appl i es Py to Pft -if-lt=ffi 

s i gnatur e match e s 
§: — System ch e cks 1st output param e t e r. 1 - success, 0 ~ failure. 
Th e data flow for auth e nticated wr i tes to permissions is shown in Figure 336 below. 

20 8t5 Programm i ng K 

I n this case, w e have a factory chip (ChlpF) connoctod to a System. Tho System wants to 
program the key in another chip (ChipP). System wants to avoid passing the now k e y to Ch i pP in 
the cl e ar, and also wants to avo i d th e poss i bility of the key upgrade message be i ng replay e d on 
another ChipP ( e v e n i f the user doesn't know the key). 

25 Th e protoco l assum e s that ChipF and Ch i pP already sharo a s e cr e t k e y Kew. This k e y is used to 
e nsur e that on l y a ch i p that knows Ke i ^ can s e t Kn ew- 
The protocol requires tho fo ll owing publ i c l y avai l ab l e funct i ons i n ChipP: 
RandomQ R e turns R (do e s not advanc e R). 

R e plac e Key[X, Y, Z] — Roplacos K by SK e w[R|X | CJ®Y, advances R, and returns 1 only i f 
30 SKet tf[X | Y | CJ ~ Z. Oth e rw i s e r e turns 0. Th e t i m e tak e n to calculat e 

signatures and compar e va l ues must be identica l for a ll I nputs. 
And tho fol l owing data and funct i on in ChipF: 

CountR e malning Part of M w i th contains tho numb e r of s i gnatur e s that Ch i pF is 

allowed to generate. Docromonts with each succ o ssfu l ca ll to 
35 GotProgramKey. Permissions i n P for th i s part of M needs to be 

R e adonly once ChipF has boon setup. Ther e for e can only b e 
updated by a Ch i pS that has authority to perform updates to that 
part of M. 

KhewT Th e n e w k e y to b e transf e rred from ChipF to Ch i pP. Must not bo 

40 visib le . 
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S e tPart i a l Koy[X,Y] If word X of has not y e t be e n sot, sot word X of Kn e w to Y and 

roturn 1 . Othorw i so return 0. Th i s funct i on a l lows K^ e w to b e pro- 
grammed i n multipio stops, thoroby allowing difforont poopio or 
syst e ms to know differ e nt parts of tho koy (but not the wholo K ^eJ^ 
5 Kne w i s stor e d i n ChipF's flash memory. Sinc e th e r e i s a sma ll 

numb e r of ChipFs, i t is theorotioa l ly not necessary to store tho 
invorso of Kn ew , but it i s strong e r protoction to do so. 

G e tProgram Koy[X] Advances Rp, d e cr e m e nts CountRoma i n i ng, outputs Rp, tho 

e ncrypted koy SK e w [X| Rp |C ^] ^ KH e w and a s i gnatur e of tho f i rst two 
10 outputs plus Ca if CountR e ma i n i ng>0. Oth e rwis e outputs 0. Tho 

time to calcu l at e tho encrypt e d k e y & signature must bo i dentica l 
for a l l i nputs. 

To updat e P's key : 

a. Syst e m calls Ch i pP's Random function; 
15 b. Ch i pP r e turns Rp to System; 

c. Syst e m calls Ch i pF's G e tProgramKey function, passing in tho rosu l t from b; 

d. ChipF — updat e s — Rp; — then — calculat e s — and — returns — Rr — SKei 4[Rp| Rp|C;a] 0 K| ^ — an4 

^Kel^fRFi^KowfRpfRFlCgJ^KoewlCajT 

e . I f th e r e sponse from d is not 0, Syst e m ca l ls Ch i pP's Replac o Koy function, pass i ng i n tho 
20 response from d; 

f. System ch e cks r e sponse from Ch i pP. I f tho response is 1, th e n Kp has been correctly updated 
te-K ^. I f the respons e is 0, Kp has not boon updated. 

Th e data flow for koy updat e s is shown i n Figur e 337. 

Not e that Kn e w i s never passed i n th e open. An attacker could send i ts own Rp, but cannot produce 
25 SKe w[Rp|Rp | C^] without K^. Tho th i rd param e t e r, a signature, i s s e nt to ensure that ChipP can 
d e termine i f ei th e r of th e first two param e ters havo be e n changed e n rout e . 

CountRomaining noods to be sotup i n Mp (includ i ng mak i ng it R e adOniy in P) b e fore ChipF i s 
programmed w i th Kp. ChipF shou l d therefor e b e programm e d to on l y p e rform a l i m i t e d numb e r of 
30 GotProgramKoy oporat i ons (thoroby li miting compromis e e xposur e if a Ch i pF i s stol e n). An 

authorized Ch i pS can b e usod to update this count e r i f noccosary (soo Section 8.4 on pag e 1). 

8t§r1 Ch i ck e n and Egg 

Of course, for th e Program Koy protoco l to work, both ChipF and Ch i pP must both know Ke i^r 
35 Obvious l y both chips had to be programm e d with Ke t ^, and thus K^ i d oan be thought of as an oldor 
Knew^-Ke M oan b o placed in ch i ps if another ChipF knows Ke ide^ , and so on. 

A l though this process al l ows a cha i n of roprogramm i ng of keys, with each stage s o cur e . at somo 
stage the very first koy {K^) must bo placed in tho ch i ps. K^ ^ t i s i n fact programm e d with tho 
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chip's m i crocod e at th e manufactur i ng t e st station as th e last st e p i n manufacturing tost. K^ -gbb 
bo a manufactur i ng batch key, ohangod for e ach batch or for oach customer oto, and can hav e as 
short a l if e as desir e d. Compromis i ng nood not resu l t in a comp l oto compromise of th e chain 
of Ks. 



9A Protocol b ackground 

Th i s protoco l sot is an ext e nsion to th e s i ng l e key singl e memory vector protocol sot, and is 
provided for two reasons: 

the multiple koy multiple memory vector protocol — act dofinod 

in thio document io Dimply extensions of thio one; — and 

3rt — io useful — in ito own right 

Th e multipl e k e y protocol sot i s typica l ly us e fu l for app l icat i ons where thoro aro mu l t i p le typ e s of 
systems and consumables, and they nood to work w i th oach other i n various ways. This is 
typically in th e following s i tuations: 

when different oyatcms want to oharc oomo conoumablca^ — fe«rfe 

not others . — For example printer modclo may oharc some ink 
cartridgeo and not share othoro, 

when there are different owner a of data in M. — Part of the 

memory vector may be owned by one company — (eg the apeed of 
the printer) — and another may be owned by another — (eg the 
serial number of the chip) . — In thio case a given key KnnoodGto 
be ab l e to wr i t e to a g i v e n part of M, and oth e r k e ys Kn n e ed to b e d i sallow e d from writ i ng 
to these samo areas. 

0t2 Requ i rements of protocol 

Each QA Chip conta i ns the follow i ng va l ues: 

N Th e max i mum numb e r of k e ys known to tho ch i p. 

Kn Array of N s e cret k e ys used for ca l culat i ng Fk « [X] whoro is tho nth olomont of tho 
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acGOSS pormiss i ons for authontioatod writ e s to M, ono for oach K. Pormission ohoio e s 
for e ach part of M are Road Only, Road/Wr i te, and D e oromont On l y. 

G 3 constants us e d for gonorat i ng signatures. C4, C^, and aro constants that pad out a 

subm e ssag e to a hashing boundary, and al l 3 must bo d i fforont. 

5 

Each QA Chip contains th e fo l low i ng privat e funct i on: 

SKnfNrX] — intorn o l function only. Returns SK f> [X], th e r e su l t of applying a d i g i ta l s i gnature function 
S to X bas e d upon tho appropriato key K^. Th e d i g i ta l signatur e must bo long enough 
to counter tho chanc e s of som e on e g e n e rat i ng a random signature. The l ength 
10 doponds on th e signature schemo chosen, a l though th e scheme chosen for the QA 

Chip is HMAC SHA1 (see S e ction 1 3 on page 1 ), and ther e fore the l ength of the 
signature i s 160 b i ts. 

Add i t i ona l functions are requ i r e d In certain QA Ch i ps, but these aro describ e d as required. 

15 9t3 Read s 

As with tho sing l e key sc e nario, wo hav e a trusted chip {ChipT) conn e cted to a System. The 
System wants to authenticat e an object that contains a non trusted ch i p (ChipA). In offoct, tho 
Syst e m wants to know that it can s e curely road a m e mory vector (M) from ChipA: to be sure that 
Ch i pA i s va l id and that M has not be e n alt e r e d. 

20 Th e protoco l requires tho fo ll owing pub li cly ava i lab l e functions: 
Random □ — Returns R (do e s not advance R). 

Road[n, X] Advances R, and r e turns R, M, SK ft^X^R^G: ^ | M]. Th e t i me taken to ca l culate the 

s i gnature must not b e based on th e contents of X, R, M, or K. 
Test[n,X, Y, Z] Advanc e s R and r e turns 1 i f SK nt^lXtG ^ I Y] - Z. Oth e rwise returns 0. Th e tim e 
25 tak e n to calcu l at e and compar e s i gnatures must bo i ndependent of data content. 

To authent i cate ChipA and read ChipA's m e mory M: 

a. System ca l ls ChipT's Random function; 

b. ChipT returns R^ to Syst e m; 

30 c. System ca l ls Ch i pA's Road funct i on, pass i ng i n some k e y number n1 and tho r e su l t from b; 
d. ChipA updates Ra, th e n calculates and r e turns RA r-MA7-SKAf^tRptRA|C4.|M/^ 
o. System ca ll s ChipT's Test funct i on, passing in n2, RA r-MA7^KA»4tRTiRAiC4|MA}f 
f. Syst e m chocks respons e from ChipT. I f th e r e spons e is 1 , then ChipA is cons i dered authent i c. 
If 0, ChipA is cons i dered i nva li d. 

35 

Th e choic e of n1 and n2 must be such that Ch i pA's K^^ - Ch i pTs 
Th e data flow for road authenticat i on i s shown i n F i gur e 338. 
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Th e protoco l a l lows Syst e m to simply pass data from ono chip to another, with no spocia l 
proc e ss i ng. Th e prot e ct i on re li es on Ch i pT bo i ng trusted, ovon though System dooc not know K. 

Wh e n ChipT i s physica l ly s e parate from Syst e m ( e g i s ch i p on a board connected to System) 
5 System muGt ateo occaesionaliy (based on syst e m clock for oxampio) call ChipT's Test funct i on 
w i th bad data, e xp e ct i ng a 0 r e sponse. Th i s i s to prevent somoeno from ins e rting a fake ChipT 
i nto the syst e m that a l ways r e turns 1 for the Tost function. 

It i s i mportant that n1 i s choson by Syst e m. Otherwis e Ch i pA would n ee d to return Na sots of 
10 signatures for e ach r e ad, s i nc e ChipA does not know which of th e k e ys will satisfy ChipT. 

Sim i larly, syst e m must a l so choos e n2, so it can pot e nt i a ll y r e strict the number of k e ys in ChipT 
that are match e d against (oth e rwis e Ch i pT wou l d have to match against all its keys). This is 
important in ord e r to r e str i ct how d i fferent keys are used. For e xampl e , say that Ch i pT conta i ns 6 
k e ys, k e ys 0 - 2 ar e for various pr i nter related upgrad e s, and k e ys 3 6 ar e for inks. ChipA contains 
15 say 4 keys, ono key for each print e r mode l . At power up, System goes through each of ch i pA's 
k e ys 0 - 3, try i ng each out aga i nst Ch i pTs k e ys 3 - 6. Syst e m do e sn't try to match against ChipT's 
keys 0 2. Otherwise knowl e dg e of a speed upgrade key cou l d be used to prov i d e ink OA Chip 
chips. This match i ng n ee ds to be don o only once (eg at power up). Onc e match i ng koys are 
found, Syst e m can continu e to use thos e k e y numbers. 

20 

S i nce System needs to know N^. and Na, part of M is used to ho l d N ( e g in Read Only form), and 
the system can obtain i t by ca l l i ng the Road function, pass i ng in key 0. 

9zA Writes 

25 As with the s i ngl e key sc e nario, the System wants to update M i n Ch i pU. As before, this can be 
' dono in a non authenticated and authent i cat e d way. 

^tAA Non - auth e nt i cated writes 

This is the most frequent type of writo, and takes p l ace betw ee n the Syst e m / consumable during 
30 normal ev e ryday op e ration. In this k i nd of wr i t e , Syst e m wants to chang e M subj e ct to P. For 
e xamp l e, tho System could b e d e crementing the amount of consumab le rema i ning. A l though 
Syetom dooc not nood to know any of the Kg or ovon bavo access to a truGtod chip to perform the 
wr i t e , Syst e m must follow a non authent i cat e d wr i te by an authenticated road if i t needs to know 
that tho write was successfu l . 
35 The protocol r e quires th e fo ll owing pub li c l y ava i lab l e function: 

Wr i to[X] Writes X over those parts of M subject to Pu and the exist i ng va l ue for M. 

To authenticate a wr i to of to Ch i pA's m e mory M: 
a. System ca ll s ChipU's Writ e funct i on, passing in 
40 b. The authent i cat i on proc e dure for a Read i s carried out (see Section 9.3 on page 1 ); 
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c. I f Ch i pU i s authentic and M^ e w ~ M roturnod i n b, tho writo cucc ee dod. If not, it failed. 
9i472 Auth e nticated writes 

I n th i s kind of wr i t e , Sy s t e m wants to change Chip U's M i n an authoriz e d way, without b e ing 
5 subj e ct to the perm i ss i ons that apply during norma l operation (Pq). For e xamp le , tho consumable 
may b e at a r e f i l l ing stat i on and tho normally Dooremont Only soction of M should be updated to 
i nc l ude th o n e w val i d consumabl e . I n this case, the chip whoso M is being updat e d must 
authenticato the writes be i ng gen e rat e d by the external System and i n add i tion, apply tho 
appropriat e porm i ssion for the k e y to e nsur e that on l y the corr e ct parts of M are updated. Having 

10 a d i ff e r e nt perm i ssion for each k e y is required as when mu l t i pl e keys are i nvo l ved, all koyo shou l d 
not n e c e ssari l y be g i v e n open acc e ss to M. For e xamp l e, suppose M conta i ns printer sp ee d and a 
counter of money availab le for frank i ng. A Ch i pS that updat e s printer speed shou l d not bo 
capable of updating tho amount of mon e y. Since Pq i s used for non authent i cat e d wr i t e s, each K« 
has a correspond i ng p e rm i ssion that determin e s what can be updat e d in an authent i cated 

15 wr i t e . 

I n this transact i on protocol, the Syst e m's ch i p is referred to as Ch i pS, and th e chip b ei ng updated 

is r e f e rr e d to as Ch i pU. Each ch i p distrusts tho other. 

Th e protocol requ i res th e fo ll owing publ i cly ava i lable functions i n ChipU: 

20 Road[n. X] Advanc e s R, and returns R, M, SK B{XtRjG 4|M]. Th e t i m e taken to calculat e 

th e s i gnature must not bo based on tho contents of X, R, M, or K. 

Writ e A[n, X, Y, Z] Advanc e s R, replaces M by Y subject to P^^, and returns 1 on l y i f 

SKfltRP^ ^ I Y] - Z. Otherwise returns 0. The t i mo taken to ca l culate and 
oonriparo signatures must b e independent of data cont e nt. Th i s funct i on i s 
25 id e ntical to ChipT's T e st function e xc e pt that it addit i ona ll y writ e s Y 

subj e ct to Ph 44 . to its M when tho s i gnature matches. 
Authenticated writes r e quire that the System has access to a Ch i pS that i s capabl e of gen 
orating appropr i ate s i gnatures. ChlpS roquiros th e following variables and function: 

CountR e ma i n i ng Part of M that conta i ns the number of s i gnatures that Ch i pS i s a ll owed to 

30 g e n e rate. Decrements w i th each successful cal l to S i gnM and S i gnP. 

P e rm i ssions in Ch i pS's Pq for th i s part of M ne e ds to b e R e adon l y onc e 
ChipS has b ee n setup. Therefore CountR e main i ng can only b e updat e d 
by another ChipS that w ill perform updates to that part of M (assuming 
Ch i pS's P allows that part of M to b e updated). 

35 Q Part of M that conta i ns tho write permissions for updating ChipU's M. By add i ng 

Q to ChipS wo a l low d i fferent Ch i pSs that can update different parts of 
M y. Permissions in ChipS's Pq for th i s part of M ne e ds to b e Readon l y 
onc e Ch i ps has be e n setup. Therefore Q can on l y be updat e d by another 
Chips that wi l l perform updates to that part of M. 
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SignM[n,V,W,X,Y,Z] Advancos R, docrom e nts CountRomain i ng and roturns R, Zqx (Z app lie d 
to X with pormiss i ons Q), SK»[W|R|C4 fe xl only i f Y- SK »fV^Wt€4{X^af^ 
CountR e mainIng > 0. Othorw i so roturno al l Os. Th e timo taken to calcu l at e 
and comparo s i gnatur e s must bo i ndopondont of data contont. 

5 

To updat e ChlpU's M v e ctor: 

a. Syst e m calls ChipU's R e ad function, pass i ng in n1 and 0 as th e i nput poramotoro; 

b. ChipU produc e s Ry rM^Ki^tOIR^^j^^lM y] and returns th e s e to Systom; 

c. Syst e m calls ChipS's S i gnM funct i on, passing i n n2 (th e k e y to b e us e d i n ChipS), Q (as used 
1 0 i n a), Ry rMyr-SKn4{0tRytG:^tMu ], and Mq (th e dos i rod vector to bo written to ChlpU); 

d. Ch i ps — producoG — Rgi — K4qo — (proc e ss e d — by — running — — against — My — us i ng — Q) — afi4 
SKnafRylRsjC^tMo p] if tho i nputs wore va l id, and 0 for all outputs if the inputs wore not val i d. 

e . If va l u e s r e turn e d i n d are non z e ro, th e n ChlpU i s cons i d e r e d auth e ntic. Syst e m can th e n cal l 
Ch i pU's Wr i t e A funct i on w i th th e s e va l u e s from d. 

15 f. ChipU should return a 1 to ind i cate succ e ss. A 0 shou l d only bo r e turn e d if tho data g e n e rat e d 
by Chips i s incorr e ct ( e .g. a transm i ssion orror). 
Th e choic e of n1 and n2 must b e such that ChipU's " Ch i pS's 

The data flow for authenticated writes i s shown i n Figure 339 below. 

20 

Not e that Q i n Ch i pS is part of Ch i pS's M. This al l ows a user to sot up Ch i pS with a permission 
s e t for upgrad e s. This should b e don e to ChipS and that part of M designat e d by Pq s e t to 
R e adonly bofor e ChipS is programmod with Ky r-if-K & is programm e d with Ky first, th e ro I s a risk 
of som e on e obtaining a ha l f - s e tup ChipS and chang i ng al l of My i nstead of only tho soct i ons 
25 spocifiod by Q. 

I n add i t i on, CountRema i nIng i n ChipS n ee ds to b e setup ( i nclud i ng mak i ng it R e adon l y in Pg ) 
before Ch i pS is programmed with Ky. ChipS should thoroforo bo programmod to only perform a 
l imit e d numb e r of SignM op e rations (th e r e by l imiting compromise e xposur e i f a ChipS is sto lo n). 
30 Thus ChipS wou l d itsoif nood to b e upgrad e d with a new CountRemain I ng e v e ry so often. 

9. 4 .3 Updat i ng p e rm i ss i ons for futur e writes 

I n ord e r to reduce exposur e to acc i denta l and malic i ous attacks on P (and c e rta i n parts of M), on l y 
author i z e d us e rs are a ll owed to updat e P. Wr i tes to P ar e th e same as author l zod wr i tes to M, 
35 e xc e pt that th e y updat e P^ instead of M. I n i tia ll y (at manufacture), P I s sot to b e R e ad/Wr i t e for al l 
parts of M. As different procossos fi ll up diff e rent parts of M, they can bo s e al e d against futur e 
chang e by updat i ng th e p e rm i ssion s . Updat i ng a ch i p's Pp chang e s p e rmiss i ons for unauthor i zod 
writes, and updat i ng chang e s porm i ss i ons for author l zod wr i tes w i th key K^ t 
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P n is on l y allow e d to chang e to b e a mor e r e striot i vo form of i tsolf. For oxample, init i ally al l parts of 
M hav e p e rmissions of R e ad/Wrlto. A porm l ss i on of Read/Wr i to can bo updatod to Dooromont 
On l y or R e ad Only. A p e rmission of D e cr e mont Only can bo updat e d to b e com e Road Only. A 
R e ad Only p e rmiss i on cannot bo further restrict e d. 
5 In th i s transaction protoco l , the Syst e m's ch i p i s r e ferr e d to as Ch i pS, and th e chip being updated 
i s ref e rred to as ChipU. Each ch i p distrusts th e other. 

The protoco l r e quir e s th e fol l owing pub li c l y available functions i n Ch i pU: 

RandomQ R e turns R (doos not advance R). 

10 S e tP e rmiss i on[n,p,X,Y,Z] Advances R, and updates accord i ng to Y and returns 1 fol l owed by 
th e resultant Pp only i f Skr[R | X | Y|CJ " Z. Oth e rw i se r e turns 0. Pp can only 
b e come more r e str i cted. Passing I n 0 for any porm l ssion le aves I t unchanged 
(passing in Y-0 returns the current P^ ^r 

15 Auth e nticat e d writes of perm i ss i ons roquiro that the System has access to a ChipS that is capable 
of generating appropriat e s i gnatur e s. ChipS requires th e fo l low i ng var i abl e s and function: 

CountRomain i ng Part of M that conta i ns tho numb e r of s i gnatur e s that ChipS is allow e d to 

g e n e rat e . D e cr e m e nts with e ach succ e ssfu l cal l to SignM and SignP. 
P e rm i ssions in ChipS's Pq for th i s part of M needs to bo RoadOnly once 
20 Chips has boon setup. Thorofor e CountR e maining can on l y b e updated 

by another ChipS that w i l l perform updates to that part of M (assuming 
ChipS's Pn a ll ows that part of M to bo updated). 

S i gnP[n,X,Y] Advanc e s R, docrom e nts CountR e main i ng and returns R and SKflPC | R|Y|CJ 

only if CountRomaining > 0. Otherwise returns all Os. The t i m e tak e n to 
25 ca l cu l at e and compar e s i gnatur e s must be ind e p e nd e nt of data cont e nt. 

To updat e ChipU's P^ t 

a. Syst e m ca l ls Ch i pU's Random function; 

30 c. System calls ChipS's S i gnP funct i on, passing i n n1, Ry and Py (the d e s i r e d P to b e writt e n to 
ChipU); 

d. Ch i ps produces Rs ^aBd-SKR^tRy^RsPp^C ^] i f i t is stil l perm i tt e d to produc e s i gnatur e s. 

o. I f values returned i n d ar e non z e ro, then System can thon cal l ChipU's S e tP e rmission function 

with n2, th e d e sired p e rm i ssion e ntry p, R^, Py and SK i^{R u |Rs|P & |Ca]. 
35 f. ChipU ver i fies th e r e ce i ved s i gnature aga i nst SK natRyjRsiP &ICj and appl i es Py to Pa -tf-the 

signature matchos 
g. System ch e cks 1st output param e ter. 1 - success, 0 ~ fai l ure. 



Tho choice of n1 and n2 must b e such that ChipU's K^^ - ChipS's K» g7 



40 
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The data flow for auth e nt i cat e d writ e s to p e rm i ssions i s shown i n Figure 3^0 bo l ow. 
9.AA Protect i ng M in a mu l t i pl e k e y syst e m 

To protect tho,appropr i ato part of M, tho SotPormission funct i on must b e ca ll ed aft e r the part of M 
5 has been sot to the des i red va l ue. 

For e xampl e , if add i ng a serial number to an aroa of M that is currently RoadWr i to so that noono 
Is pormittod to updat e the number again: 

tho Write function io callod to write the ocrial number to M 

10 SetPcrmiooion ±3 called for n =• — {^r^ — . . . , — N-) — to act that part 

of M to be Readonly for authorized writca uoing key n 1. 

^ Setrermiooion ia called for 0 to act that part of M to be 

Readonly for non authorized writes 

15 For e xampl e , add i ng a consumable valuo to M such that on l y k e ys 1 2 can updat e it, and keys 0, 
and 3 N cannot: 

tho Write function io called to write the amount of 

Gonoumablc to M 

^ Setrermiooion io called for n ^ — {-3r7 — 4-; — 5-, — , . . , — N l) — to act 

20 that part of M to bo Readonly for authorized writeo uoing Icey 

n 1, Thio leavca kcyo 1 and 2 with ReadWrite pcrmiooiono, 
^ Setrermiooion io called for 0 to act that part of M to be 

DccrcmcntOnly for non authorized writeo . — Thio allowa the 

amount of conaumable to decrement . 

25 

I t is possib l e for someon e who knows a key to furth e r r e str i ct other keys, but it i s not i n anyone's 
i nterest to do so. 

9r§ Programming K 

30 I n this caso, wo havo a factory ch i p (ChipF) connQctod to a System. Tho System wants to 

program tho k e y in anoth e r chip (ChipP), System wants to avo i d pass i ng tho now key to ChipP i n 
th e cl e ar, and also wants to avo i d tho poss i bi li ty of th e koy upgrade messag e b e ing rep l ayed on 
another Ch i pP ( e v e n if tho user doesn't knew tho koy). 

35 Tho protocol i s a s i mple oxtons l on of the s ingl e koy protoco l in that i t assumes that ChipF and 

ChipP alr e ady share a s e cr e t key Ke i 4- Th i s koy i s used to e nsur e that on l y a chip that knows Ke w 
can sot 

Th e protoco l r e qu i r e s tho fo l lowing public l y ava il able funct i ons i n ChipP: 
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Random □ R e turns R (do e s not advanoo R). 

Rep l acoKoy[n, X, Y, Z] Rop l ooos K^ -by-SKotRpCtG ^lSY, odvancQc R, and returns 1 on l y i f 

SK ft[X|Y|CJ ~ Z. Otherw i so r e turns 0. Tho timo tak e n to ca l oulato s i g 
natures and comparo valu e s must bo idont i oal for all i nputs. 

5 

And tho fol l ow i ng data and funct i ons in ChipF: 

CountRomain i ng Part of M w i th contains th e numbor of s i gnatures that ChipF is al l owod 

to gonorato. Docromonts with oach succossfu l cal l to GotProgramKoy. 
P e rmissions in P for th i s part of M noods to bo R e adonly once ChipF 
10 has b e on setup. Thoroforo can only bo updated by a Ch i pS that has 

authority to perform updates to that part of M. 

Kf>ew Th e n e w k e y to b e tronsforrod from Ch i pF to Ch i pP. Must not be visible. 

SotPart i alKoy[X,Y] I f word X of has not y e t been sot, sot word X of to Y and 

r e turn 1 . Otherwiso return 0. Th i s funct i on a l lows K^ ew to bo pro 
15 grammod i n multip l e steps, thereby allowing differ e nt people or 

syst e ms to know different parts of tho key (but not tho whole K^ ew^ 
Kne w is stored in ChipF's flash memory. Since th e r e is a small numb e r 
of ChipFs, it i s th e oret i cal l y not necessary to store the i nv e rs e of Kn ew? 
but it is stronger protection to do so. 
20 GetProgramKey[n, X] — Advanc e s R^, d e cr e ments CountRoma i ning, outputs R^, th e encrypted 

key-SK B[X|Rp. | Ca]®Kn e w and a s i gnature of th e first two outputs plus C^ 
if CountRcma i ning>0. Otherwise outputs 0. Th e timo to ca l cu l ate the 
e ncrypt e d key & s i gnature must bo id e nt i cal for a ll inputs. 

25 To updat e P's k e y : 

a. System calls ChipP's Random function; 

b. ChipP returns Rp to Syst e m; 

c. Syst e m cal l s ChipF's GotProgramKey funct i on, passing in n1 (tho desired k e y to use) and the 
r e su l t from b; 

30 d. Ch i pF — updates — Rp, — then — ca l culat e s — af)d — r e turns — Rp? — SKft4 . [ RR | Rk I C^^ISKb swi — ao^ 

SKn4-[Rp.|SKR4-[RM| Rk|C J^KnewjCgJj 

e. I f th e r e sponse from d i s not 0, System cal l s Ch i pP's Rop l acoKoy function, pass i ng i n n2 (tho 
key to use in ChipP) and tho response from d; 

f. Syst e m checks respons e from ChipP. I f tho response i s 1, th e n Kp n a has b ee n corr e ct l y 
35 updat e d to K^. I f tho response i s 0, Kp u a has not boon updated. 

Th e cho i c e of n1 and n2 must b e such that ChipF'c K^^ - Ch i pP's Ka gr 

The data f l ow for key updates i s shown i n Figur e 341 b e low. 
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Not e that K^ e w ' s n e ver passed in the opon. An attack e r oou l d send its own R^, but cannot produce 
Skb ^[Rp | Rf |C 3] w i thout K^. Tho signature based on is sont to onsuro that ChipP wi l l b e ab le 
to d e termin e i f e ither of tho first two param e t e rs have boon chang e d e n rout e . 
5 CountRema i n i ng noods to bo sotup i n Mk ( i ncluding making it R e adon l y in P) befor e Ch i pF is 
programm e d with Kp. Ch i pF should therefore b e programm e d to on l y perform a l i mit e d number of 
G e tProgramKoy operations (ther e by l i miting compromise exposure i f a ChipF i s stolon). An 
authorized Ch l pS can b e us e d to update this count e r i f n e ccesary (seo Sect i on 9.^ on page 1 ). 

10 ^StA Chick e n and Egg 

As w i th tho s i ngl e k e y protoco l , for tho Program K e y protoco l to work, both Ch i pF and ChipP must 
both know Kew. Obv i ously both chips had to b e programmed with Ke i ^, and thus Ke w-ean-be 
thought of as an o l d e r Kn ew^^-Ke w can bo placed i n ch i ps i f another ChipF knows Ke wer * and so on. 

15 A l though this proc e ss al l ows a chain of reprogramming of keys, w i th each stage secure, at som e 
stage th e v e ry f i rst k e y (Kfe s t) must bo placed in tho chips. Kft ^ t i s in fact programmed with the 
chip's m i crocod e at th e manufactur i ng t e st station as th e last st e p i n manufacturing tost. Kfi grQaft 
b e a manufactur i ng batch k e y, chang e d for each batch or for ooch custom e r e tc, and can havo as 
short a l if e as d e sir e d. Compromising n ee d not resu l t in a complete comprom i se of tho chain 

20 ef-Ksr 

Depending on th e reprogramming requir e m e nts, K^ s t can b e th e samo or d i fforont for all K^ t 

40 Multiple K e ys Multiple Memory V e ctors 

25 40.^ Protocol b ackground 

Th i s protoco l s e t is a s li ght restr i ction of th e mu l tipl e k e y s i ngle memory v e ctor protocol sot, and is 
th e e xpect e d protocol. I t i s a restr i ction i n that M has boon optim i zod for F l ash memory utilizat i on. 

M is broken into mu l tip le memory voctors (som i f i xed and variab l e components) for th e purpos e s 
30 of opt i m i z i ng flash memory util i zation. Typ i cal l y M conta i ns some parts that are fixed at som e 

stage of tho manufactur i ng proc e ss ( e g a batch number, serial numb e r e tc), and once s e t, ar e not 
ever updated. This i nformat i on does not conta i n tho amount of consumab l e rema i n i ng, and 
th e r e for e i s not road or wr i tten to w i th any gr e at frequency. 

35 W e therefor e define Mo to bo the M that conta i ns the frequent l y updated sections, and tho 

rema i n i ng Ms to bo rare l y writt e n to. Authent i cated wr i t e s on l y vwite to M^, and non auth e nticat e d 
writes can bo d i rected to a specific M^. This r e duc e s th e size of permissions that are stored in the 
QA Chip (cinco key bas e d writes are not required for Ms other than M^). I t also m e ans that Mo and 
th e r e maining Ms can b e manipu l ated i n d i fferent ways, th e r e by i ncreasing flash memory 

40 long e v i ty. 
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40t2 Requ i rement s of protocol 

Each OA Ch i p conta i ns tho fo ll ow i ng va l u e s: 

N The maximum number of koys Imown to the ohip. 

5 T The numbor of v e otors M i s brok e n i nto. 

Km Array of N socret koys us e d for ca l culat i ng FkbP<1 whoro Kb i s tho nth oloment of tho array. 

Each-K ft must not be stored diroct l y i n the QA Ch i p . I nstead, oach chip needs to store a single 
random numbor Rr (diff e r e nt for each ch i p), Ka S Rk , an d — iKb^ Rk. The stored K^ ^ Rk can be 

XORod with Rk to obtain th e rea l K^. Although — iK r S Rk must bo stored to protect aga i nst 
10 diff e r e ntia l attacks, i t i s not us e d. 

R Current random numb e r usod to e nsure timo vary i ng messages. Each ohip i nstanco must 

bo soodod with a differ e nt i n i t i al valuo. Changes for each signature generat i on. 

Mp Array of T m e mory v e ctors. On l y Mq can bo written to with an authorizod wr i to, whil e a l l Ms 

can b e written to i n an unauthorized wr i to. Wr i tes to Mq ar e optimiz e d for Flash usago, while 
15 updates to any other M^, ar e e xpens i v e with regards to F l ash ut i lizat i on, and aro oxpoctod to bo 

only performed once p e r s e ct i on of M^ t-M ^ contains T and N in R e adOnly form so users of tho 

ch i p can know these two valu e s. 

Pt4 n T+N el e ment array of access permiss i ons for each part of M. Entries n-{0... T 1) ho l d 
acc e ss p e rmissions for non auth e nticated writes to (no k e y required). Entr ie s n-{T to T+N 
20 1}hold access perm i ssions for authenticated writes to for K^,. Perm i ssion cho i c e s for oach part 
of M are R e ad On l y, Read/Writ e , and Decr e m e nt On l y. 

G 3 constants us e d for generating s i gnatures. C^., Ca, and C;^ ar e constants that pad out a 

subm e ssag e to a hash i ng boundary, and al l 3 must b e diff e r e nt. 

25 Each QA Ch i p contains th e fo l lowing privat e function: 

SkaINtX] int e rnal function only. R e turns SKn[X], th e resu l t of app l ying a d i gita l signature 

function S to X based upon th e appropriate key K^. The dig i tal signatur e must b e 
long enough to counter the chances of someon e g e n e rating a random 
signatur e . Th e l ength dep e nds on the signature scheme choson, a l though the 

30 sch e m e chos e n for th e QA Chip is HMAC SHA1 , and th e r e fore tho le ngth of tho 

s i gnatur e Is 160 b i ts. 

Additiona l functions are r e qu i red i n c e rtain QA Chips, but those aro describ e d as r e quir e d. 

35 4-073 Reads 

As w i th th e prev i ous scenar i os, w e have a trusted chip (ChipT) connoctod to a System. Tho 
Syst e m wants to authenticate on object that contains a non trust e d ch i p {ChipA), I n effect, tho 
Syst e m wants to know that i t can s e curely read a memory vector (MO from Ch i pA: to be sure that 
ChipA i s va l id and that M has not boon a l tered. 

40 Th e protoco l requires tho fol l ow i ng pub li c l y ava il ab le functions: 
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RandomQ Returns R (do e s not advanoo R). 

Road[n. t, X] Advanc e s R, and returns R, M^, SK »{X{RtG4 .|MJ. Th e timo taken to ca l culato th e 
signature must not bo based on the cont e nts of X, R, Mt, or K. I f t is 
inva l id, tho function assumes t~0. 

5 Tost[n,X, Y, Z] Advancos R and returns 1 if SkrCR I XIC^IY] - Z. Otherwise returns 0. Tho 

time ta l <on to calculat e and compare signatures must bo independent of 
data oontont. 

To Quthont i cato ChlpA and rood Ch i pA's momory M: 

10 a-. System cal l s Ch i pT's Random funct i on; 

b-. ChipT returns R^. to System; 

G: System ca l ls ChipA's R e ad funct i on, passing i n som e k e y numb e r n1, the dosirod M 

number t, and the result from b; 

€k Ch l pA updates Ra, then calcu l at e s and returns RA r-MAtr-SKAf^tR4BA^G4]MAjr 

1 5 e: Syst e m ca l ls ChipTs Tost function, passing in n2, RA r-MAtr-SKAtv ^CR rt RA lC^IMAdi 

f: System checks respons e from Ch i pT. If th e r e sponse is 1, then ChipA I s cons i d e r e d 

authentic. If 0, Ch l pA is consid e r e d inva li d. 

Tho choice of n1 and n2 must bo such that ChipA's Kf^ ~ ChipTs K, ^ 

20 

Th e data flow for read auth e nt i cat i on i s shown in F i gure 3^2 bolow. 

Th e protOGo l a l lows Syst e m to simp l y pass data from on e ch i p to anoth e r, with no specia l 
proc e ss i ng. The protection re l ies on Ch i pT be i ng trusted, ovon though Syst e m do e s not know K. 

25 

Wh e n Ch i pT i s phys i cal l y s e parat e from System (og i s ch i p on a board conn e ct e d to System) 
System must also oGcasBionally (bas e d on syst e m c l ock for e xamp le ) ca l l ChipT's Tost funct i on 
with bad data, e xp e cting a 0 respons e . This is to pr e vent som e one from i nserting a fake Ch i pT 
into the system that always r e turns 1 for the Tost function. 

30 

I t is i mportant that n1 i s chos e n by System. Qthorw i s e ChipA would need to return Na s e ts of 
signatures for each road, since ChipA doos not know wh i ch of the keys wi ll satisfy Ch i pT. 
Sim il ar l y, syst e m must also choose n2, so it can potentially rostrict tho number of koys In ChipT 
that are match e d aga i nst (otherwis e Ch i pT wou l d hav e to match against al l i ts k e ys). This is 
35 i mportant in order to r e str i ct how d i fforont k e ys ar e us e d. For exampl e , say that ChipT contains 6 
k e ys, k e ys 0 - 2 are for var i ous pr i nter re l ated upgrades, and koys 3 - 6 ar e for i nks. ChipA contains 
say 4 koys, one key for e ach pr i nt e r model. At pow e r up, System go e s through e ach of ohipA's 
keys 0 3. trying e ach out aga i nst ChipT's k e ys 3 6. Syst e m doesn't try to match against ChipT's 
keys 0 - 2. Otherw i se knowl e dg e of a speed upgrade key cou l d bo usod to provide ink QA Chip 
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chips. This matching noodo to bo dono on l y onc e ( e g at powor up), Onco match i ng koys aro 
found, Syst e m can continue to use those key numbers. 

S i nce System noods to know N^, NA T-Qft^ A» part of M4. i s usod to ho l d N (eg i n R e ad On l y form), 
and th e syst e m can obta i n i t by calling th e R e ad function, passing in key 0 and t-'l . 

5 

40:4 Writes 

As w i th the pr e vious scenar i os, tho System wants to update Mt i n ChipU. As before, this can bo 
don e in a non - authent i cated and authontioatod way. 

10 10. 4 .1 Non auth e nticated writes 

This is th e most frequ e nt typo of wr i t e , and takes plac e betw e en th e System / consumable during 
normal e veryday operation for Mu> and during tho manufacturing proc e ss for M| 7 

I n this kind of writo, System wants to change M subject to P. For e xamp le , tho System cou l d b e 
15 decrementing tho amount of consumable remain i ng. Although System doos not n ee d to know and 
of th e Kg or e ven havo aoc e se to a trust e d chip to perform the wr i te, System must fo l low a non 
auth e nt i cated wr i to by an authenticated road i f i t noods to know that th e wr i t e was succ e ssfu l . 

Th e protoco l r e quir e s th e fo l low i ng publ i cly ava il ab le function: 

20 Writo[t, X] Writes X ov e r thos e parts of subj e ct to Pt and tho ex i sting 

valu e for M. 

To auth e nticate a wr i to of Mn ew to ChipA's memory M: 
a. System cal l s ChipU's Writo funct i on, pass i ng in Mn ewf 
25 b. Th e authentication procedur e for a R e ad is carri e d out (see Section 9.3 on page 1 ); 
c. If ChipU is authent i c and Mn e w ~ M roturnod I n b, th e writ e succ ee ded. I f not, I t fa i l e d. 

10.4.2 Auth e nt i cated wr i tes 

I n tho multiple m e mory v e ctors protoco l , on l y Mq can b e wr i tt e n to an an authent i cated way. Th i s 
30 is becaus e on l y Mq i s cons i d e red to havo components that nood to b e upgraded. 

I n this k i nd of writ e , System wants to chang e Chip U's Mo in an authorized way, without being 
subject to the perm i ss i ons that app l y dur i ng normal operation. For e xampl e , th e consumabl e may 
b e at a r e fi lli ng station and the norma ll y D e cromont On l y section of Mo should bo updated to 

35 i nc l ud e th e n e w va l id consumable, in this case, th e ch i p whos e Ma i s b ei ng updat e d must 
authenticate th e writ e s be i ng gen e rated by th e e xt e rna l System and in addit i on, app l y th e 
appropriate permission for tho k e y to ensure that on l y th e correct parts of Mo aro updat e d. Having 
a d i fferent perm i ss i on for each key is requ i red as when multiple koys ore involvod, a ll k e ys should 
not nocossarily be g i v e n open accoss to Mq. For examp l e, suppose Mo conta i ns print e r speed and 

40 a counter of money availab l e for franking. A ChipS that updates pr i nter speed should not bo 
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capablo of updat i ng tho amount of monoy. S i nco P^ , ^ i s usod for non authont i catod writos, each 
K b has o corrospond i ng perm i ssion that d e t e rm i nes what can b e updat e d i n an auth e nt i cat e d 



5 I n this transaction protoco l , th e Syst e m's chip i s roforrod to as Ch i pS, and tho ch i p bo i ng updated 
i s roforrod to as Ch i pU. Each chip distrusts th e other. 

Tho protoco l requ i res tho fo ll ow i ng pub l icly ava i lable functions i n Ch i pU: 

R e ad[n, t, X] Advanc e s R, and roturns R, M tr-SKn [X | R|C 4{M t]. Tho timo takon to 

10 ca l cu l oto tho s i gnature must not bo basod on tho contonts of X, R, 

M. n r K 

WritoA[n, X. Y. Z] Advanc e s R, roplacos by Y subject to P^^, and r e turns 1 on l y if 

Sk b[R | X | C4. | Y] - Z. Otherwis e r e turns 0. Th e tim e takon to co l culato 
and comporo signatures must b e i nd e p e ndent of data content. Th i s 
15 funct i on i s id e nt i cal to ChipT's T e st funct i on e xc e pt that it 

addit i ona l ly wr i t e s Y subj e ct to to i t s M wh e n th e s i gnature 
matches. 

Authenticated wr i t e s requir e that th o Syst e m has acc e ss to a Ch i pS that is capab le of generating 
20 appropriat e signatures. ChipS r e qu i res th e fo ll owing var i abl e s and funct i on: 

CountRoma i ning Part of M that conta i ns tho numb e r of s i gnatur e s that ChipS is 

a ll owed to g e n e rat e . D e cr e m e nts with each successfu l cal l to 
SignM and S i gnP. P e rmissions in ChipS's Pu^ for th i s part of M 
noods to bo RoadOn l y onc e ChipS has boon sotup. Th e r e for e 
25 CountRoma i ning can on l y b e updated by anoth e r ChipS that w il l 

perform updates to that part of M (assuming ChipS's P a l lows that 
part of M to b e updated). 

Q Part of M that contains th e writ e p e rm i ss i ons for updat i ng ChipU's M. By 

adding Q to ChipS wo a l low d i fferent Ch i pSs that can update d i ffer 
30 e nt parts of My. P e rm i ssions i n ChipS's Po^ for this part of M 

noods to b e Readon l y once ChipS has boon sotup. Thoroforo Q 
can on l y be updated by another Ch i pS that wil l perform updates to 
that part of M. 

S i gnM[n,V,W,X,Y,Z] Advances R, decrements CountRoma i n i ng and returns R, Zq ^^ 

35 appl ie d to X w i th p e rm i ssions Q), SKRlWIR j C^ jZo x] on l y if Y - 

SK ft[V|W|C4. | X] and CountRomain i ng > 0. Oth e rwise r e turns a ll Os. 
Th e tim e takon to calculate and compar e signatur e s must b e 
ind e pendent of data content. 

40 To update Ch i pU's M v e ctor: 
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a. Syst e m ca ll s ChipU's Read function, passing in n1 , 0 and 0 as th e i nput paramot o rG; 

b. ChipU produc e s Ru rMyoT-SKft^t^t^j^^jMy o] and r e turns thoso to System; 

o. System ca l ls ChipS's S i gnM funct i on, pass i ng in n2 (the koy to b e us e d in Ch i pS), 0 (as us e d 
in a), R^ ^rMyor-SKni.tO|RytG4.tMy o], and Mq (th e d e sired vector to bo written to Ch i pU); 
5 d. Ch i ps — produc e s — R^, — Mq p (process e d — by runn i ng — M q against Myo us i ng — Q) and 
SKngtRytRsjC^iMo o] if the i nputs wore val i d, and 0 for a l l outputs i f the inputs woro not valid, 
e. I f values roturnod in d are non zero, th e n ChipU is consider e d authentic. System can th e n co ll 

Ch i pU's Wr i teA function with th e s e va l u e s from d. 
f-. — Ch i pU should r e turn a 1 to ind i cate success. A 0 shou l d on l y b e r e turn e d i f the data g e n e rated 
10 by Ch i ps i s i ncorrect ( e .g. a transmiss i on e rror). 

The cho i co of n1 and n2 must bo such that ChipU's - ChipS's K^ ^gr 

The data flow for authenticated writ e s i s shown in F i gur e 3 4 3 b el ow. 

15 

Note that Q in ChipS i s part of ChipS's M. This allows a us e r to s e t up Ch i pS with a p e rmiss i on 
s e t for upgrad e s. This should b e dono to ChipS and that part of M d e signated by -P o..T 1 s e t to 
R e adon l y b e for e ChipS i s programm e d with Ky. I f Ks is programmed with first, thoro i s a risk 
of som e on e obtain i ng a half s e tup ChipS and changing a l l of My inst e ad of on l y th e sect i ons 
20 sp e c i fi e d by Q. 

I n add i tion, CountRomain i ng in Ch i pS ne e ds to b e setup ( i nclud i ng making i t ReadOn l y i n P^ ) 
b e for e Ch i pS i s programmed with Ky. Ch i pS shou l d thoroforo bo programm e d to only perform a 
l imit e d numb e r of SignM op e rations (th e r e by lim i t i ng compromis e exposure if a Ch i pS i s stolen). 
25 Thus Ch i pS would itse l f need to bo upgraded with a now CountRomain i ng every so oft e n. 

10.4.3 Updating pormiss i ons for futur e writ e s 

I n ord e r to reduce exposure to acc i denta l and malic i ous attacks on P (and c e rta i n parts of M), only 
author i zed users ar e a l lowed to updat e P. Writes to P ar e th e sam e as authorized wr i t e s to M, 
30 e xc e pt that th e y updat e P ^ i nst e ad of M. I n i t i a ll y (at manufacture). P i s sot to bo Road/Write for a ll 
M. As d i fferent proc e sses fil l up d i ff e r e nt parts of M, thoy can b e s e al e d against future chang e by 
updating the permiss i ons. Updat i ng a ch i p's Pq^ chang e s p e rmiss i ons for unauthorized writes to 
M ft, and updat i ng P4, jp>n-4 . chang e s permiss i ons for author i zed wr i tes with k e y K^ t 

35 P ft is only a ll ow e d to change to b e a more restr i ctiv e form of I tself. For examp le . I n i t i a ll y all parts of 
M hav e p e rm i ss i ons of R e ad/Wr i te. A permiss i on of RoadA/Vr l to con bo updated to Docromont 
Only or R e ad On l y. A permiss i on of Docromont Only can b e updat e d to b e come Read On l y. A 
R e ad On l y p e rm i ssion cannot bo further rostr i otod. 
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I n th i s transaction protocol, tho System's ch i p i s rof e rr e d to as ChipS, and th e chip bo i ng updated 
i s roforrod to as Ch i pU. Each chip distrusts tho othor. 



Th e protoco l r e quir e s the fol l owing pub l ic l y ava i lab l e functions in Ch i pU: 
RandonnD — R e turns R (does not advanco R). 

S e tP e rmi s sion[n,p,X,Y,Z] Advances R, and updates Pp according to Y and returns 1 fo ll owod 



Auth e nt i cat e d writes of perm i ssions r e qu i r e that th e Syst e m has acc e ss to a Ch i pS that i s capable 
of gen e rating appropriate s i gnaturos. ChipS requir e s th e fol l ow i ng var i ablos and function: 



c. Syst e m calls Ch i pS's SignP function, pass i ng i n n1, Ry and Py (the dos i rod P to bo wr i tten to 
Ch i pU); 

d. Ch i pS produc e s Rs and SK B^tRyjR&P&l^ a] ' t is sti ll permitted to produce signatures. 

e . I f va l u e s r e turn e d in d ar e non z e ro, th e n Syst e m can th e n call Ch i pU's S e tPermiss l on funct i on 
w i th n2, tho dosirod permission ontry p, R^^, Py and SK ft4tR y | Rs | PB | Ca]. 

f. Ch i pU v e rifi e s the received signatur e aga i nst SK HgtRyjR s | P& | Ca] and app l ies Pp to Pn i f tho 
si gnatur e match e s 

g. System chocks 1st output parameter. 1 - succ e ss, 0 - fa i lure. 

Tho cho i c e of n1 and n2 must b e such that ChipU's K^. " Ch i pS's Kn gT 

Tho data flew for auth e nticated writes to permissions i s shown i n F i gure 3^1 below. 



by the resultant Pp only i f SK ^ [R | X | Y | Cd - Z. Otherwis e r e turns 0. 

can on l y becom e mor e r e str i ct e d. Passing In 0 for any 
permission leav e s i t unchang e d (pass i ng in Y~0 r e turns th e 
current P ^^t 



CountR e maining 



Part of Ch i pS's Mo that conta i ns tho numb e r of signaturos that 
Chips is a l lowed to generate. Docromonts w i th each successfu l 
ca ll to S i gnM and SignP. P e rmissions in Ch i pS's P«^^ for this 
part of Mq n ee ds to be Readonly once Ch i pS has b e en setup. 
Th e r e for e CountRemain i ng can on l y b e updat e d by anoth e r 
Ch i pS that will perform updates to that port of (assuming 
ChipS's P p , al l ows that part of Mo to be updat e d). 
Advances R, decrem e nts CountR e maining and r e turns R and 
Sk «[X | R | Y|C j only if CountRemaining > 0. Otherwis e returns a ll 
Os. Th e time tak e n to calculat e and compar e s i gnatures must bo 
i ndependent of data content. 



SignP[n,X,Y] 



To update Ch i pU's P^ t 

a. System ca l ls ChipU's Random funct i on; 
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10. 4 . 4 Prot e ct i ng M in a mult i p i o key multipio M systom 

To protect tho appropr i ate part of aga i nst unauthorized writes, call SetP e rm i ssions[n] for n - 0 
to T - 1 ■ To protect the appropriate part of a gainst author i zed wr i t e s with k e y n, ca l l 
5 SetPormissionsU^^n] for n-O to N 1 . 

Note that only can bo wr i tten In an auth e nticat e d fashion. 

Noto that tho S e tP e rm i ss i on function must b e called aftor tho part of M has been sot to the 
10 d e sired valu e . 

For e xampl e , if adding a s e ria l number to an ar e a of M4 that is curr e ntly R e adWr i te so that noon e 
is perm i tted to updat e the number aga i n: 

the Write function ia callod to write the ocrial number to M4 . 

15 SetPermiooion (1) — ±3 called for to act that part of M to be 

Readonly for non authorized writes. 

If add i ng a consumab l e valu e to Mg such that on l y keys 1 - 2 can updat e i t, and keys 0, and 3 - N 
cannot: 

20 the Write function ia called to write the amount of 

conoumablo to M 

Sctrcrmiooion io called for 0 to oet that part of Motobo 

D e cremontOnly for non authorizod writ e s. This a ll ows the amount of consumable to 
d e cr e m e nt. 

25 Sctrcrmioaion io called for n - — f^F^ — T + 3 , — ?M-4 — . . . , — T 1 I^J 1 ] — fee 

□ct that part of Mq to be RoadOnly for authoriz e d writes using all but keys 1 and 
2. This leaves keys 1 and 2 w i th ReadWrit e p e rmiss i ons to M^ t 

It i s poss i b l e for someone who knows a key to further restrict oth e r keys, but i t is not i n anyon e 's 
30 i nterest to do so. 

40t5 PROCRAMMir4C K 

This s e ction is i dent i cal to th e mu l t i pio k e y s i ngle memory vector ( Section 0.5 on page 1). I t is 
repeated hero with ment i on to inst e ad of M for CountRoma i n i ng. 

35 

In th i s case, wo have a factory ch i p (ChipF) conn e ct e d to a System. Tho Systom wants to 
program the key i n another chip {ChipP). Systom wants to avo i d pass i ng the n e w key to Ch i pP i n 
th e c l ear, and a l so wants to avo i d the possibil i ty of tho key upgrade message being replayed on 
anoth e r Ch i pP ( e ven i f th e user doesn't know th e key). 
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Tho protoco l is a s i mp le e xt e nsion of th e sing l e key protocol i n that i t assumos that ChipF and 
Ch i pP already share a secret key K^. This key is us e d to e nsur e that on l y a ch i p that knows Ke w 
can sot Kfl ew^ 

5 

The protocol requires the following pub li cly availabl e functions in Ch i pP: 
RandomQ R e turns R (do e s not advanc e R). 

RoplacoKoy[n, X, Y, Z] Replaces by SKft[R|X|C^]®Y, advanc e s R, and returns 1 on l y i f 

Sk bP(|Y|CJ - Z. Oth e rwis e returns 0. Tho t i m e tak e n to calculate 
10 signatures and compare valu e s must b e ident i cal for a ll inputs. 

And tho follow i ng data and functions in ChipF: 

CountRemain i ng Part of Mq with contains tho number of signatures that Ch i pF i s 

a l lowed to generat e . D e cr e m e nts w i th each suco e ssfu l ca l l to 
G e tProgramK e y. Perm i ssions in P for this part of Mq needs to be 
15 Readonly onc e ChipF has b e en setup. Th e r e for e can only bo 

updat e d by a Ch i pS that has authority to p e rform updates to that 

Knew The now koy to bo transforrod from ChipF to ChipP. Must not be visib le . 

SotPartia l KeyP(,Y] I f word X of Kn e w has not yot boon sot, sot word X of Kn ew-tG-Y 

20 and r e turn 1 . Otherwise return 0. This function allows K^ e w to b e 

programm e d in multipl e st e ps, th e r e by a ll owing d i ff e r e nt p e opl e 
or syst e ms to know d i ff e r e nt parts of th e k e y (but not the whole 
KnewM^ftew I S stor e d in ChipF's flash m e mory. S i nc e th e r e is a 
small number of Ch i pFs, it is theoret i cally not n e c e ssary to store 
25 the i nverse of Kn e w, but it is stronger prot e ct i on to do so. 

G e tProgramK e y[n, X] Advanc e s R^^, d e crem e nts CountRoma i n i ng, outputs Rp, the 

encrypted koy SKn [X| RK |C j®Kn e w and a signatur e of tho first two 
outputs plus C^ if CountR e ma i ning>0. Oth e rwise outputs 0. Tho 
t i me to ca l cu l at e the e ncrypted key & s i gnature must b e id e ntica l 
30 for al l inputs. 



To update P's koy : 

a. Syst e m ca ll s Ch i pP's Random funct i on; 

b. Ch i pP r e turns Rp to System; 

35 c. Syst e m cal l s Ch i pF's GetProgramKoy funct i on, pass i ng i n n1 (th e d e sir e d k e y to use) and th e 

result from b; 

d. ChipF — updates — Rp^ — then — calculates — and — returns — Rp; — SKB+fRpfRplCaJ^Knewi — 

Skh4.[Rp|Ska4.{Rp| RhlC^l^Knewl^s}? 
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e« If th e respons e from d i s not 0, Systom calls ChipP's Rop l acoKoy function, paoo i ng in n2 (th e 

k e y to us e in ChipP) and th e rosponso from d; 
f-. — Systom chocks rosponso from Ch i pP. If the rosponso i s 1, then Kp n a has boon correctly 

updat e d to Kn e w- I f th e response Is 0, has not b ee n updat e d. 
5 Tho cho i ce of n1 and n2 must b e such that Ch i pF's K^^ ~ ChipP's K nar 
The data flow for k e y updates is shown i n F i gur e 3 4 5b e low. 

Noto that Kfl e w is novor passed in the open. An attack e r could send i ts own Rp. but cannot produce 
SKfvi^[Rp|RfitG 3] without K^. The signature based on K^ e w ' s sent to e nsur e that ChipP wi l l b e ab l e 
to d e term i ne if o ithor of the first two param e t e rs have boon changed on route. 
10 CountRemaining needs to bo s e tup in Mpo (inc l uding making i t RoadOn l y i n P) befor e Ch i pF i s 

programmed with K^^. ChipF shou l d th e roforo bo programmed to only p e rform a l i m i ted numb e r of 
GetProgromKoy op e rat i ons (ther e by limit i ng comprom i se exposure if a ChipF is sto l on). An 
authoriz e d ChipS can b e used to update this counter if noccosary (soo Section O.A on pago 1 ). 

15 10.5.1 Chicken and Egg 

As w i th th e s i ng le koy protoco l , for tho Program Key protocol to work, both Ch i pF and Ch i pP must 
both know K^. Obviously both ch i ps had to bo programm e d w i th Ke i ^, and thus can b e 
thought of as an o l der Kn ew^-Ke w oan bo plac e d i n ch i ps i f anoth e r ChipF knows K ^we^ , and so on. 

20 A l though th i s process a l lows a chain of roprogramming of k e ys, with e ach stag e s e cur e , at som e 
stage tho very first koy (K^) must bo p l aced in th e ch i ps. K^ st is in fact programm e d with the 
ch i p's microcod e at th e manufactur i ng tost stat i on as th e last st e p in manufacturing t e st. K gret-eaft 
b e a manufactur i ng batch k e y, changed for each batch or for each custom e r etc, and can hav e as 
short a l if e as d e sir e d. Compromising need not resu l t in a comp l ete comprom i se of tho cha i n 

25 ef4<sr 

D e pending on r e programming requirem e nts, K^^ can b e th e sam e or d i ff e r e nt for a ll K^ r 
10.5.2 S e curity Noto 

D i fforont Ch i pFs shou l d have d i ff e r e nt Rp valu e s to pr e v e nt K ne w from boing determined as 
30 fo ll ows: 

Th e attacker noods 2 ChipFs, both with tho samo Rk and but difforont va l ues for K^ ^-B^ 
know i ng K^ ew ^ the attacker can doterm i ne Th e siz e of is 2" * ^, and assum i ng a l i fespan of 
approx i mate l y 2^ Rs, an attackor n e eds about 2^ ChipFs with tho samo to l ocato tho correct 
chip. Given that th e r e are l ikoly to bo only hundreds of ChipFs w i th the sam e K^, th i s is not a l i kely 
35 attack. The attack can be el i m i nat e d comp l ete l y by mak i ng C^ difforont p e r chip and transm i tting i t 
w i th th e n e w s i gnature. 

4-1 Summary of functions for a l l protocols 

Al l protoco l sets, whether single key, mu l t i ple koy, sing l e M or multipl e M, all rely on th e same s e t 
40 of functions. Tho function sot is listed hero: 
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44t1 All c hi ps 

S i nco overy chip must act og ChipP, Ch i pA and potent i ally ChipU, o// ch i ps requ i ro th e fo ll ow i ng 
funct i ons: 

5 Random 

RcplacoKoy 

Read 

Write 

^ WritoA 

10 SGtrcrmiaoions 

44^2 Gh4pT 

Chips that ar e to bo us e d as ChipT also r e qu i r e : 
^ Test 

15 

44.3 Gh4pS 

Chip s that ar e to b e us e d as ChipS also requiro e i th e r or both of: 

SigpnM 

^ Sicfnr 

20 

44.;4 GH4PP 

Chips that ar e to be us e d as Ch i pF a l so requ i re: 

Set Part ialKoy 

GctrrogramKcy 

25 

45 R e nriot e Upgrad e s 

45t^ Basic remote upgrades 

R e gardless of the number of k e ys and th e numb e r of m e mory vootors, th e use of authenticated 
r e ads and writ e s, and of rep l ac i ng a n e w key w i thout r e v e a l ing or Ke i 4 a l lows th e possib ili ty of 
30 r e mot e upgrad e s of ChipU and ChipP. The upgrade typica ll y invo l ves a remote server and follows 
two basic steps: 

a-. Dur i ng th e f i rst stag e of th e upgrad e , th e r e mote syst e m auth e nticat e s th e us e r's syst e m to 

e nsur e th e us e r's syst e m has the setup that i t c l a i ms to have. 

1^. Dur i ng th e s e cond stag e of the upgrad e , th e us e r's system auth e nticat e s th e r e mot e 

35 syst e m to ensure that the upgrade is from a trusted source. 

12.1.1 Us e r r e qu e sts upgrad e 

Th e us e r r e quests that h e wants to upgrade. Th i s can be done by runn i ng a specific upgrade 
app l ication on th e us e r's comput e r, or by visiting a sp e c i fic w e bs i te. 
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12.1.2 — Remot e system gath e rs i nfo secur el y about us e r's curr e nt s e tup 

In this stop, tho romoto system dotorminos tho current setup for the us e r. Tho current sotup must 
bo authenticated, to e nsure that th e us e r truly has th e setup that is cla i med. Trad i tienally, this has 
5 boon by checking tho ex i stenc e of f i l e s, g e nerating ch e cksums from those f i les, or by gett i ng a 
s e ria l numb e r from a hardware dong le , a l though th e s e trad i t i ona l m e thods have d i fficu l t i es s i nce 
they can b e g e n e rat e d loca l ly by "hack e d" softwar e . 

Th e authont i cat e d read protoco l d e scrib e d in Sect i on 8.3 on pag e 1 can be us e d to ocoompHGh 
10 this stop. The uso of random numbers has th e advantag e that tho local us e r cannot capture a 
succ e ssful transaction and p l ay i t back on another computer system to fool th e r e mote system. 

12.1.3 R e mot e system gives us e r cho i c e of upgrad e poss i b i l i ti e s & user chooses 

I f th e r e i s more than one upgrade poss i b i l i ty, the various upgrade opt i ons ore new presented to 
15 th e us e r. Th e upgrade opt i ons cou l d vary based on a numb e r of factors, i ncluding, but not lim i ted 
tef 

Gurrcnt user ootup 

^ uocr^o profGrcncc for payment ochcmco — (c.g, — oinglc payment 

va. multiple payment) 
20 number of other products owned by uocr 

Th e us e r se l ects an appropr i ate upgrad e and pays If n e cessary (by som e sch e m e such as via a 
s e cur e w e b site). What i s i mportant to not e h e r e i s that the user choos e s a sp e c i fic upgrade and 
comm e nc e s the upgrad e op e ration. 

25 

12.1.1 Remote system s e nds upgrade request to loca l system 

Th e r e mot e syst e m now instructs th e loca l system to p e rform th e upgrade. Howovor, the local 
system can only accept an upgrad e from th e r e mot e system if th e remot e syst e m i s also 
auth e nt i cated. Th i s i s effectively an authenticat e d wr i t e . Tho use of Ry in tho signature prevents 
30 the upgrade message from be i ng r e p l ayed on another Ch i pU. 

If mult i p le k e ys are us e d, and e ach ch i p has a un i que k e y, th e remote system can us e a s e r i a l 
number obta i n e d from the curr e nt s e tup (authent i cated by a common k e y) to lookup the uniqu e 
k e y for us e i n tho upgrade. A l though tho random number prov i des t i me varying messages, use of 
35 an unknown K that is differ e nt for each ch i p means that col l eotion and e xamination of m e ssages 
and the i r s i gnatures i s made oven mor e d i ff i cult. 

42r2 OEM Upgrades 

OEM upgrades are effectively the same as r e mot e upgrades, except that the user i nteracts with 
40 an OEM s e rver for upgrade se l ect i on. Th e OEM server may send cub requests to th e 
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manufacturer's romoto sorvor to provido authent i cation, upgrade ava i labil i ty l ists, and baso lovol 
pr i cing i nformat i on. 

An addit i ona l le v e l of auth e nt i cation may bo i ncorporat e d i nto th e protocol to ensur e that upgrade 
5 requests are com i ng from the OEM se rv e r, and not from a 3rd party. Th i s can roadi l y bo 
i ncorporated i nto both auth e nt i cat i on steps. 

4^ Choice of Signatur e Funct i on 

Given that al l protocols make use of koyod signatur e funct i ons, th e cho i ce of function is examined 
10 hefer 

Tab l e 232 out li n e s th e attr i butes of th e app l icab l e choic e s (s ee Sect i on 5.2 on page 1 and Section 
5.5 on pag e 1 for more i nformat i on). The attr i butes ar e phrased so that the attr i buto is soon as an 
advantage. 

15 Tab le 232. Attr i butes of Appl i cable Signature Functions 





Tripis 
DES 




PQ5 




Rando 


HMAC 


HMAC 
SHA4 






m 

Seque 

noes 


R\pm 
nifin 


Free of patents 










• 


• 


• 


• 


Random key generation 












• 


• 


• 


Can bo exported from the 










• 




• 


• 








• 










• 












428 




428 


4^ 


460 


Preferred Key Size (bits) 
for use in this application 




Block size (bits) 


84 


84 


64 


§4 






51 2 


&42 


Cryptanolysis Attack Free 




• 










• 


• 


(apart from weak keys) 




Output size — given — input 










428 


428 


4€0 


460 


size N 




Low storage requirements 
















• 


Low silicon complexity 










• 


• 






NSA designed 



















^ On l y g i vos protootion equiva l ent to 1 13 bit DES 
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An exam i nation of Tablo 232 shows that tho oho i co i s e ff e ct i v e ly botwoon th e 3 HMAC constructs 
and tho Random Sequenc e . The problem of koy s i zo and koy g e n e ration e li minates tho Random 
Soquonc e . G i v e n that a number of attacks havo already boon carr i ed out on MD5 and s i nco the 
hash result i s on l y 128 b i ts, HMAC - MD5 i s a l so el im i nat e d. The cho i ce is th e r e fore botwoon 
5 HMAC SHA1 and HMAC RIPEMD160. Of th e s e , SHA 1 i s the proforrod funct i on, sinco: 

CIIA 1 haa boon moro oxtcnaivcly cryptanalygcd without boing 

br okon ; 

. SHA 1 rcquirGO alightly looo intGrmcdiatG otorago than RIPE 

MB 1 6 0; 

10 OIIA 1 io algorithmically leas complox than RIPE MB 160; 

Although SHA 1 is s l ightly fast e r than RIPE - MD - 160, this was not a r e ason for choosing SHA 1 . 

HMAC SHA1 

Th e m e chanism for auth e nt i cation i s th e HMAC SHA1 a l gor i thm. Th i s s e ction e xam i n e s tho 
15 HMAC - SHA1 algorithm in groator detail than cov e red so far, and describes an opt i mization of tho 
algorithm that roquiros f e w e r memory r e sources than th e origina l d e finit i on. 

A^A^ HMAG 

G i von tho fo ll owing d e fin i tions: 

20 H = tho haoh function (eg, MD5 or SIIA 1) 

ft — = number of bit a output from II — (o ■ g. — 160 for SIIA 1, — iS* 

bito for MD5) 

M — ^ the data to which the MAC function io to bo applied 

K — = the oecret key shared by the two parties 

25 ipad ° 0x3 6 repeated 64 times 

opad = 0x5C repeated 64 timco 



Tho HMAC algor i thm i s as fo l lows: 

a. Extend K to 64 byt e s by app e nding 0x00 bytes to th e e nd of K 
30 b. XOR th e 64 byte str i ng created in (1 ) with i pad 

0. append data stream M to the 64 byte string cr e ated in (2) 

d. Apply H to tho stream g e n e rated i n (3) 

o. XOR tho 64 byte str i ng created in (1 ) w i th opad 

f. Append th e H r e su l t from ( 4 ) to th e 64 byte str i ng r e su l t i ng from (5) 
35 g. App l y H to tho output of (6) and output th e resu l t 

Thus: 

HMAC[M1 - H[(K ® opod) | H[(K S ipad) | M]] 

Tho HMAC SHA1 algorithm i s s i mply HMAC with H - SHA 1 . 



PEA23US 



690 



434.2 SHA 1 

Th e SHA1 hash i ng a l gorithm i s dosor i b e d i n th e context of othor hash i ng algorithmo in Soot i on 
5.5.3.3 on pago 1, and oomplotoly dofinod in [28]. Th e algorithm is summar i z e d horo. 
5 Nin e 32 - bit constants ar e d e fin e d i n Tab l e 233. Ther e ar e 5 constants us e d to i nit i al i z e th e 
chaining variab l es, and there aro 4 addit i ve oonstanto. 

Table 233. Constants used in SHA 1 



In i t i a l Cha i n i ng Va l ues 

/?4. 0x67 4 52301 
0XEFCDAD09 
0X98BADCFE 
/?4 0x10325 4 76 
/?6 0xC3DaBlF0 



Additive Constanto 

^4 0X5A 8 27999 
0X6ED9EBA1 
03C 8 F1DBCDC 

y4 0XCA62C1D6 



10 Non - optimiz e d SHA 1 r e qu i r e s a tota l of 2912 bits of data storage: 

* FivG 32 bit chaining variablco arc dofinod ; II4, H^, H^, H4 -and44gr 

* Fivo 32 bit working variabloo arc defined! — D, — and E. 
. — One 32 bit temporary variable io defined; — fer^ 

* Eighty 32 bit temporary regiotera are defined: 

15 

Th e following funct i ons ar e d e f i n e d for SHA 1 : 
Tab l e 234. Funct i ons used i n SHA 1 



Symbolic Nomonc l aturo D e script i on 

Add i tion modulo 2^ 
X « Y Resu l t of rotat i ng X l oft through Y bit posit i ons 

f(X, Y, Z) (X A Y) V ( .X A Z) 

g(X, Y, Z) (XaY) V (X aZ)v(Y a Z) 

h(X, Y, Z) X@ YeZ 



20 The hashing a l gorithm consists of f i rstly padd i ng the input m e ssage to b e a mu l tip le of 512 b i ts 
and init i a li zing the cha i n i ng voriobios H4^ with h 4 ^. Tho paddod message i s thon procossod in 
512 - b i t chunks, with th e output hash valuo being the final 160 b i t va l ue given by the concatonation 
of tho chaining variables: H4 | H^ | H;;^ | Ha +H^t 



25 Tho stops of the SHA 1 a l gorithm aro now exam i ned in greater deta il . 



13.1.2.1 Stop 1. Proprocoeeing 
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Th e f i rst stop of SHA 1 is to pad tho input m e ssag e to bo a multip i o of 512 bits as fol l ows and to 
In i tial i zo tho chaining var i ab le s. 



Table 235. Stops to fo l low to proprocoss th e i nput m e ssage 



Pad the input message 


Append a 1 bit to the message 




Append 0 bits such that tho length of tho 
padded message is 6^ bits short of a multipio 


of 512 bits. 


Append a 64 bit value containing the length in 
bits of the original input message. Storo tho 
length as most significant bit through to least 
significant bit. 


Initialize — the — chaining 




variables 
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13.1.2.2 Stop 2. Proceecing 

Tho paddod Input messago i s proc e ss e d i n 512 b i t b l ooks. Each 512 b i t block is in the form of 16 
^ 32 bit words, r e f e rr e d to as l nputWordo -4^ 



5 Tab l e 236. St e ps to fo ll ow for eacli 512 bit block (lnputWordo -4^ 



Copy tho 512 input b i ts i nto For j-0 to 15 



Expand into X4 6-79 



I nit i aliz e work i ng var i ab l oo 



A < H 4 , B ( Hg, C < H^, D ( H 4 . E ( H 5 



Round 1 



Forj-0to10 



Round 2 



For j-20 to 30 



Round 3 



Round 4 



Update chaining var i ab l es 



- I nputWordj 



Forj-16to 70 



Xj< ((X^ .3^^^^^.X^,^)^ 



t--^ — (<A-^ 6) ■*. f( B . C. D) * E * XI 



t-< — <<A- ^S) * h(B. C, D) * E * )q * y2) 



Forj- 4 0to60 



— * g( B . C. D) * E * Xj * y3) 



Forj-60 to 70 



tr< — ^^•^ S) * h(B. C, D) E * Xj * yi) 
gj< — 0,0*^ — C, C — (B "^^"30), B — 1 



H4-^— H 4 + A, < + B, 
H - f H- + F 



The bo l d text i s to e mphas i z e th e d i ff e r e nces botwoon each round. 



10 13.1.2.3 St e p 3. Complotion 

Aft e r a ll tho 512 - bit blocks of tho padd e d Input m e ssag e havo been proc e ss e d, tho output hash 
value is tho fina l 160 b i t valu e g i v e n by: H^. | | Hj» | H4 4446T 



13.1.2.^ Optimization for hardwar o implomontation 
15 The SHA-1 Step 2 procedur e i s not optim i z e d for hardware. I n part i cu l ar, tho 80 temporary 32 b i t 
r e g i st e rs us e up valuab le s il icon on a hardwar e i mpl e m e ntat i on. Th i s sect i on descr i bes an 
optim i zat i on to th e SHA 1 a l gorithm that on l y us e s 16 t e mporary r e g i sters. Tho reduction in si li con 
Is from 2560 b i ts down to 512 bits, a saving of ov e r 2000 b i ts. It may not bo i mportant i n somo 
applications, but i n tho QA Ch i p storage spac e must be r e duced whore possible. 
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Tho optimigation is basod on tho fact that a l though th e orig i na l 16 word messago b l ock io 
expand e d into an 80 word message b l ock, th e 80 words ar e not updated during tho a l gor i thm. I n 
add i tion, th e words roly on th e previous 16 words on l y, and honoo tho expanded words can bo 
5 ca l culated on - th e- fly dur i ng proc e ss i ng, as long as w e k ee p 16 words for th e backward 

r e f e r e nces. We requ i re rotat i ng counters to keep track of which rog l ctor wo aro up to using, but 
th e effect i s to sav e a l arg e amount of storage. 

Rathor than i ndex X by a s i ng le valuo j, w e us e a 5 bit counter to count through tho i torat i ons. Th i s 
10 can b e achi e v e d by i n i tia li zing a 5 - bit r e gister w i th oithor 16 or 20, and docrom e nt i ng it unti l it 

r e ach e s 0. In ord e r to updat e the 16 temporary var i ab le s as if th e y w e r e 80, wo roqu i ro A indoxoo, 
e ach a 4 bit register. A l l 4 ind e x e s i ncrem e nt (w i th wraparound) dur i ng th e cours e of the 
a l gor i thm. 

15 Tab le 237. Optim i sed St e ps to fol l ow for each 512 bit block ( I nputWordo ^ 





H4, B < H3, C < H37-B— < H4, E < H§ 


Initiolizo working variafaloo 


F^ound 0 

Copy the 512 input bits into 


Do 16 times 




Round 1A 


Do 16 times 


t< ((A(c5) + f(B, C, D) + E + X^-^4) 

E < D. D ( C, C < (B « 30), B ( A. A < t 




Round 1 B 


Do A timos 

^^m-< — ((Xt44 0 X(43 ® Xui ® X|>t4) « 1 ) 
t ( ((A « 5) + f(B. C, D) -1- E * XN4H-y») 


ft^4-f ^N^, ftN4 

E ( D. D < C. C < (B « 30). B < A. A < t 




Round 2 


Do 20 timos 

*^N4-< — (PW ^ Xwa ^ Xm3 ® Xtu) « 1 ) 
t< ((A « 5) * h(B. C. D) * E * X»i4-*T>^ 


ftN^. ftNj, ftN4 


E < D, D < C. C < (B « 30), B < A, A < t 


Round 3 


Do 20 times 

Xn4 < iO^m ® Xtga 9 ® X^^) « 1 ) 


t ( ((A « 5) + g(B, C, D) * E Xm->^ 
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ftM^ ff M . ffN- ftM „ 

E < D, D ( C, C ( (B (( 30), B < A. A ( t 



Round A 



Do 20 t i mos 



t < ((A « 5) ^ h(B, C, D) E + XN 4-*-y4) 



ftN ^. ftN^, ftN^, ftN4 

E < D, D < C, C < (8 « 30), B < A, A < t 



Update chaining var i ables 



H 3< H^ + C, H4< ^4 -*^ 



H fe< H^i^E 



Th e bold text is to e mphas i ze th e diff e r e nces betw ee n e ach round. 



The i ncromont i ng of N4, N^, and during Rounds 0 and 1 A is optiona l . A softwar o 
5 impl e m e ntat i on would not increm e nt th e m, sinco i t tak e s tim e , and at th e e nd of th e 16 times 
through th e loop, all A count e rs w i ll bo th e ir original valu e s. D e s i gn e rs of hardware may w i sh to 
incromont al l A count e rs tog e ther to sav e on control log i c. 
Round 0 can b e comp le t e ly om i tted if tho caller loads tho 512 bits of 

10 4^ Ho l ding Out Against Attacks 

Tho authenticat i on protocols dosor i bod in Section 7 on pago 1 onward should bo r e sistant to 
d e f e at by logical m e ans. This sect i on details e ach type of attack in turn with roforonco to tho Road 
Auth e nt i cat i on protoco l . 

15 447I Brute force attack 

A brut e force attack i s guaranteed to break any protocol. Howovor tho longth of tho koy moans 
that tho time for an attackor to perform a brute force attack Is too l ong to be worth the effort. 

An attacker only needs to broak K to bui l d a clone authonticot l on chip. A brute forc e attack on K 
20 must therefor e br e ak a 160 b i t koy. 

An attack against K requir e s a max i mum of 2"^ attempts, w i th a 50% chanc e of find i ng th e k e y 
after only 2" * ^ att e mpts. Assuming an array of a tri ll ion processors, e ach running on e m i l li on t e sts 
p e r s e cond, 2"^ (7.3 ^ ^&^) tests takos 2.3 »f 10^ yoors, wh i ch i s longer than tho tota l lifot i mo of 
25 tho univorso. Thoro ar e around 100 m ill ion persona l computers i n th e wor l d. Ev e n i f th e s e w e r e al l 
conn e ct e d in an attack (e.g. v i a the I nt e rnet), th i s number is st ill 10,000 times sma l ler than the 
tri lli on proc e ssor attack describod. Furth e r, i f tho manufacture of on e tri l lion processors bocomos 
a poss i bil i ty i n th e age of nanocomputoro, the t i m e tak e n to obta i n th e key i s st i ll longer than th e 
total lif e time of the un i vorso. 
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44t2 Gue s s i ng t h e key attack 

I t i s th e or e tically possiblo that an attacker can s i mp l y "gu e ss th e k e y". I n fact, giv e n enough t i m e , 
and try i ng e vory poss i b l o numbor, an attack e r wi ll obta i n th e k e y. Th i s is id e ntical to the brut e 
5 force attack doscr i bod obovo, where 2^ attompto must bo mado bofore a 50% chanc e of 
succoss i s obta i n e d. 

The chances of someone s i mply guess i ng the key on the first try is 2" ^ . For comparison, the 
chance of someone w i nning the top pr i ze in a U.S. state l ottery and b e ing killed by li ghtning in the 
10 sam e day is on l y 1 i n 2^ [78]. Th e chanc e of som e on e gu e ssing the authont i cat i on chip key on 
th e first go Is 1 in 2"^, which is comparable to two peop l e choos i ng exactly the sam e atoms from 
a choioo of al l tho atoms in tho Earth i .o. oxtromoly un l ike l y. 

44.3 Quantum computer attack 

15 To br e ak K, a quantum computer contain i ng 160 qub l ts e mb e dd e d i n an appropr i ate algorithm 
must b e bu i lt. As d e scr i b e d in S e ction 5.7.1.7 on pag e 1 , an attack against a 160 b i t k e y i s not 
feasib le . An outs i de e st i mat e of th e possibility of quantum computers is that 50 qubits may bo 
ach i evab l e with i n 50 y e ars. Ev e n using a 50 qub i t quantum computer, 2"^ tests are required to 
crack a 160 bit key. Assum i ng an array of 1 b i l l ion 50 qub i t quantum computers, each able to try 

20 2 ^ keys in 1 micros e cond (b e yond th e curr e nt w i ld e st e stimat e s) find i ng tho key would tako an 
averag e of 18 bi l lion years. 

44^4 C i P H ERTEXT ONLY ATTACK 

An attacker can l aunch a c i phortoxt on l y attack on K by monitor i ng ca l ls to Random and Read. 
25 How e ver, g i v e n that a ll th e s e ca ll s a l so r e v e a l th e p l a i nt e xt as wel l as tho hash e d form of the 

plaintext, tho attack wou l d bo transform e d i nto a strong e r form of attack a known p l a i nt e xt attack. 

44tS Known plaintext attack 

I t i s e asy to connect a log i c ana l yzer to tho connection betw ee n th e Syst e m and the authen 
30 t i cation ch i p, and ther e by monitor the flow of data. This flow of data r e sults i n known plaint e xt and 
th e hashed form of th e plaint e xt, which can ther e fore bo us e d to launch a known plaint e xt attack 
aga i nst K. 

To launch an attack aga i nst K, mu l tip le cal l s to Random and T e st must bo mado (w i th tho ca ll to 
Tost being successfu l , and thoroforo requir i ng a call to Road on a val i d chip). This i s 
35 straightforward, r e quir i ng the attacker to hav e both a syst e m authent i cation chip and a 

consumab l e authont i cat i on chip. For each sot of ca ll s, an X, SkM pa i r I s revea l ed. Tho attacker 
must co l lect th e s e pairs for furth e r ana l ys i s. 

The quest i on ar i ses of how many pa i rs must b e co l l e cted for a meaningful attack to b e l aunch e d 
w i th th i s data. An e xamp le of an attack that requires collection of data for stat i st i cal analysis I s 
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d i fforontia l oryptana l ysis (see Soct i on 1 4 .13 on page 1). However, th e re ar e no known attacks 
aga i nst SHA 1 or HMAC - SHA1 [7][7][7], so th e r e i s no us e for th e oo l l e ctod data at this t i me. 



4AS Cmoscn pla i ntext attacks 

5 Tho golden rul e for tho OA Chip is that i t never signs something that i s simp l y g i v e n to i t — bent 
novor l ots tho user ohooso tho message that is signed. 

Although tho attacker can ohooso both R^. and poss i b l y IVI, ChipA advances its random number 1^ 
w i th e ach call to R e ad. Tho resu l tant m e ssage X therefore conta i ns 160 b i ts of changing data 
10 oach call that are not chosen by the attacker. 

To l aunch a chos e n t e xt attack th e attack e r wou l d need to locat e a ch i p whos e R was the desir e d 
R. This mak e s the s e arch e ff e ctive l y imposs i bl e . 

15 447? Adapt i ve c h osen plaintext attack s 

Tho HMAC construct provid e s s e cur i ty against a l l forms of chosen pla i nt e xt attacks [7]. This i s 
pr i mari l y b e cause th e HMAC construct has 2 s e cr e t input variabl e s (th e r e sult of th e or i gina l hash, 
and th e secr e t k e y). Thus f i nding co l lisions in th e hash function its e lf wh e n th e i nput variabl e is 
s e cr e t i s e ven harder than find i ng collis i ons i n the p l ain hash funct i on. This is b e cause th e form e r 

20 r e quires d i rect access to SHA 1 in ord e r to g e n e rate pa i rs of input/output from SHA 1 . 

S i nc e R changes w i th oach ca l l to Road, tho user cannot choose tho comp l oto message. The only 
va l u e that can be collect e d by an attack e r is HMAC[R4. | Ra | Mj. Th e s e ar e not attacks against 
th e SHA - 1 hash funct i on i ts el f, and r e duc e th e attack to a d i fforontia l oryptanalysis attack (s e e 
25 Section 11.13 on pago 1), examin i ng stat i st i cal d i fforoncos between collected data. Givon that 
th e r e i s no diff e r e nt i a l oryptanalys i s attack known against SHA - 1 or HMAC, th e protoco l s ar e 
r e s i stant to th e adapt i v e chos e n p l aintext attacks. 

44^ Purposeful error attack 

30 An attacker can on l y l aunch a purposeful e rror attack on tho T o st funct i on, s i nc e this is tho on l y 
funct i on i n th e R e ad protocol that val i dat e s i nput aga i nst the k e ys. 

With tho Tost function, a 0 va l ue is produced i f an error is found in tho i nput no further 
i nformat i on i s g i von. I n add i t i on, the time takon to produce the 0 resu l t is independent of th e i nput, 
35 g i v i ng th e attacker no i nformat i on about which b i t(s) w e r e wrong. 
A purpos e fu l error attack i s therefore fruit l ess. 

44t9 CHA I NiNG ATTACK 

Any form of cha i n i ng attack assum e s that the m e ssage to b e hash e d i s ov e r several blocks, or th e 
40 i nput variab l es can som e how be set. The HMAC SHA1 algorithm used by Protocol C1 on l y e v e r 
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hashes one or two 512 - b i t b l ocks. Cha i n i ng attacks aro not possible whon only on e block i s usod, 
and ar e e xtromoly l i mited whon two b l ocks oro usod. 



1 4 .10 B i rt h day ATTACK 

5 The strongest attack known against H I S/IAC i s the birthday attack, bas e d on the frequ e ncy of 
collisions for th e hash function [7][7]. IHow e v e r th i s i s totally i mpractica l for m i n i ma ll y r e asonable 
hash functions such as SHA 1 . And th e birthday attack i s on l y possib le wh e n the attacker has 
contro l over the messag e that i s hash e d. 

Since i n tho protoco l s doscr i bod for th e OA Ch i p, the message to b e sign e d i s novor choson by 
10 th e attacker (at l e ast one 160 b i t R valu e i s chos e n by tho ch i p do i ng tho s i gn i ng), th e attackor 
has no control ov e r th e m e ssage that is hashed. An attackor must i nstead search for a coll i s i on 
m e ssag e that hash e s to th e samo va l u e (analogous to finding on e p e rson who shar e s your 
birthday). 

15 Tho c l one chip must th e r e for e attempt to find a n e w value such that th e hash of R | ., and a 
chos e n Ma yi e lds the sam e hash va l u e as H[R4. | Ra|M]. How e v e r Ch i pT does not rovoal tho corroct 
hash valu e (th e T e st funct i on only returns 1 or 0 depend i ng on whether tho hash valu e i s correct). 
Th e r e for e th e only way of find i ng out th e correct hash va l u e (in order to find a col l ision) i s to 
intorrogoto a roal ChipA. But to find tho corroct va l u e m e ans to update M, and sinc e th e 

20 d e cr e ment only parts of M ar e on e way, and tho road on l y parts of M cannot b e chang e d, a clon e 
consumabl e wou l d hav e to updat e a r e a l consumable b e for e attempting to find a col l ision. Tho 
a l t e rnative is a brute force attack s e arch on tho Tost function to find a succoss (requ i r i ng e ach 
c l on e consumabl e to have access to a Syst e m consumab l e). A brute force search, as descr i bed 
above, takos l onger than tho lifot i mo of the un i verse, in th i s cas e , p e r authent i cat i on. 

25 

There is no po i nt for a clon e consumable to launch this kind of attack. 
44^4^1 Su b stitut i on w i th a complete lookup table 

The random numb e r s ee d in e ach Syst e m i s 160 bits. The best cas e situat i on for an attackor i s 
30 that no stato data has b ee n changed. Assuming also that tho clon e consumab l e do e s not 

advance i ts R, th e re i s a constant value r e turn e d as M. A clon e ch i p must th e refor e r e turn S KtR-f 
c] (where c is a constant), wh i ch is a 160 b i t valu e . 

Assuming a 160 bit l ookup of a 160 bit result, th i s r e qu i res 2.9 ^ bytes, or 2.6 ^ 10^ 
35 t e rabytes, c e rtainly mor e space than i s foao i blo for tho noar future. Th i s of course does not ovon 
tak e i nto account tho m e thod of co lle ct i ng tho va l u e s for tho ROM. A comp le t e l ookup tab l e is 
therefore comp l etely i mpossib le . 

1 4 .12 Su b st i tut i on with a sparse lookup table 
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A sparse l ookup tabl e is only foas i bl e if th e m e ssagos sont to th e auth e ntication chip aro 
somehow pr e dictabl e , rather than e ff e ct i v el y random. 

Tho random number R i s s ee d e d w i th an unknown random number, gathorod from a natural l y 
5 System authenticat i on chip's Random funct i on, and i t e rating som e random event. Thoro is no 
poss i bi l ity for a clon e manufacturer to know what tho possiblo range of R is for all Systems, s i nco 
oaoh b i t has an unre l ated chance of boing 1 or 0. 

S i nco tho rongo of R i n all syst e ms i s unknown, i t is not possiblo to build a spars e l ookup tabl e 
that can bo usod in all systems. Tho gen e ral spars e l ookup tab le is th e r e fore not a possib l o 
10 attack. 

Howovor, i t is possib l o for a c l one manufacturer to know what tho range of R i s for a givon 
Syst e m. This can bo accompl i shed by l oad i ng a LFSR with tho curr e nt resu l t from a cal l to a 
specific number of times i nto tho future. If this i s done, a sp e c i a l ROM can bo bui l t which w il l only 
15 conta i n th e r e sponses for that particu l ar rang e of R, i.e. a ROM sp e c i f i ca l ly for tho consumab l es of 
that particu l ar System. But tho attack e r stil l needs to plac e oorroct informat i on i n th e ROM. Tho 
attack e r w i ll thoroforo n ee d to find a va li d authentication chip and call it for each of tho values in 

Rt 

Suppose tho clono auth e nt i cation chip reports a ful l consumablo, and th e n al l ows a s i ng l e uso 
20 boforo simulat i ng l oss of conn e ct i on and insertion of a n e w full consumab le . Th e c l on e 

consumab le wou l d therefore ne e d to conta i n r e spons e s for authentication of a ful l consumab lo 
and authent i cation of a partially us e d consumablo. Th e worst case ROM contains e ntr ie s for full 
and partially us e d consumables for R ovor tho l i fot i mo of System. However, a val i d auth e nticat i on 
ch i p must be usod to g e n e rate th e informat i on, and bo part i al l y us e d in th e process. I f a given 
25 System only produc e s n R - va l u e s, th e sparse lookup ROM required i s 20n bytos (20 -"160/8) 
multipl ie d by tho numb e r of d i ffer e nt valu e s for M. Tho t i m e tak e n to build tho ROM depends on 
tho amount of timo enforced between calls to Road. 

After al l this, tho c l ono manufactur e r must r e ly on tho consumer r e turn i ng for a ref i l l , sinc e th e cost 
30 of bu il d i ng th e ROM i n the first place consumes a s i ng l e consumab le . Th e clono manufactur e r's 
bus i n e ss i n such a s i tuation is consequ e nt l y i n th e ref i l l s. 

Th e tim e and cost then, d e pends on tho s i ze of R and th e number of different values for M that 
must bo incorporated in the lookup. I n addit i on, a custom c l on e consumab l e ROM must b e built to 
match e ach and e v e ry Syst e m, and a differ e nt va li d auth e ntication ch i p must bo usod for each 
35 System (in order to prov i de tho ful l and part i a ll y us e d data). Tho uso of an auth e nt i cat i on ch i p in a 
System must therefore b e exam i ned to determ i ne whether or not this kind of attack i s worthwh il e 
for a clono manufacturer. 

As an example, of a camera system that has about 10,000 pr i nts i n i ts l ifotimo. Assume i t has a 
40 singl e Decr e ment Only value (number of pr i nts rema i n i ng), and a de l ay of 1 second between calls 
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to R e ad. In such a syotom, tho sparso table will tako about 3 hours to build, and consum e s 1QQK. 
Rememb e r that tho construct i on of tho ROM roqu i roo tho consumpt i on of a val i d authenticat i on 
chip, so any money charg e d must b e worth mor e than a singl e consumoblo and th e c l one 
consumab le combinod. Thus i t is not cost offoctivo to perform this funct i on for a s i ng l e 
5 consumabl e (unl es s tho clone consumabl e somehow contain e d tho equ i va le nt of mu l tip l e 
authent i c consumables). 

I f a clon e manufacturer is go i ng to go to the troub l e of bu il ding a custom ROM for e ach own e r of a 
System, an eas i er approach would be to update Syst e m to comp l ete l y ignor e th e auth e ntication 
10 e*^ 

Consequent l y, this attack is possibl e as a per System attack, and a d e cision must b e mad e about 
th e chanc e of this occurring for a giv e n Syst e m/Consumabl e combination. Tho chanc e w il l 
depend on the cost of tho consumabl e and authent i cat i on chips, the l ong e vity of th e consumabl e , 
15 th e profit margin on th e consumab l e, th e t i m e tak e n to g e n e rat e th e ROM, tho s i z e of th e resu l tant 
ROM, and whether customers will come back to tho clono manufactur e r for refil l s that us e the 
sam e clon e chip e tc. 
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1 4 .13 Different i al cryptanalysis 

Ex i sting difforential attacks aro hoavily depondont on th e structur e of S boxes, as us e d in DES 
and othor sim i lar a l gorithms. A l though HMAC SHA1 has no S boxos, on ottaokor can undertake a 
d i ff e r e nt i a l-li ko attack by und e rtak i ng statistical analysis of: 

5 Minimal diffcrciiGO inputo, — and their Gorrcoponding outputo 

Minimal difforonGQ outputo, — and thoir oorroaponding input a 

To launch an attack of this natur e , s e ts of I nput/output pa i rs must be col l ected. Th e collection can 
b e v i a known pla i nt e xt, or from a partially adapt i ve choson plaintext attack. Obvious l y the l attor, 
10 boing chos e n, wil l b e mor e usefu l . 

Hashing algorithms in g e n e ra l ar e d e sign e d to bo r e sistant to d i ffer e ntia l ana l ysis. SHA 1 i n 
particu l ar has boon spec i fical l y str e ngth e ned, e spoola l ly by tho 80 word expansion so that minima l 
differences i n input w il l sti ll produce outputs that vary I n a larger number of b i t pos i tions 

15 (compared to 128 bit hash functions). In addit i on, th e i nformat i on col l ected i s not a d i r e ct SHA 1 
I nput/output s e t, du e to th e natur e of tho HMAC algorithm. Th e HMAC a l gor i thm hashes a known 
va l ue with an unknown va l u e (th e k e y), and tho resu l t of this hash Is th e n r e hash e d w i th a 
s e parat e unknown va l ue. S i nce th e attack e r does not know th e secr e t valu e , nor th e r es ult of th e 
first hash, tho Inputs and outputs from SHA 1 aro not known, making any d i fforont i a l attack 

20 extr e m e ly d i fficult. 

Th e r e ar e no known d i ff e r e ntia l attacks aga i nst SHA - 1 or HMAC SHA 1[56][56]. 

Th e following is a mor e deta i led d i scussion of min i ma l ly diff e r e nt i nputs and outputs from tho QA 

Chipr 

25 

1 4 .13.1 — Min i ma l d i fforonco inputs 

Th i s is where an attack e r tak e s a s e t of X, Sk[X] va l u e s where tho X valu e s ar e m i nima ll y 
diff e r e nt, and examines th e statistica l diff e r e nc e s between th e outputs Sk[X]. Tho attack re l ies on 
X va l ues that on l y d i ffer by a minimal number of bits. Tho quest i on th e n aris e s as to how to obtain 
30 min i mal l y diff e r e nt X va l ues i n order to compar e th e Sk[X] values. 

A l t h ough t h e attack e r can choos e both Rp and possibly M, ChipA advanc e s Its random number Ra 
w i th e ach ca l l to Read. The resu l tant X th e r e for e conta i ns 160 b i ts of chang i ng data each ca l l, and 
I s th e r e for e not m i n i ma l ly different. 

35 
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14.13.2 — Minimal difforenco outputs 

Th i s i s wh e ro an attack e r takes a s e t of X, Sk[X] va l ues whoro tho SkM valuoo aro m i n i ma l ly 
d i ffer e nt, and e xamin e s th e statist i ca l diff e r e nc e s b e tw ee n the X values. Th e attack r el i e s on Sk PQ 
va l u e s that on l y diff e r by a m i nima l numb e r of bits. 

5 

Ther e is no way for an attack e r to g e n e rat e an X va l u e for a given Sk[X]. To do so would violate 
tho fact that S is a on e- way function (HMAC SHA1 ). Cons e quently tho only way for an attack e r to 
mount an attack of this nature is to rooord al l obsorvod X, Sk[X] pairo i n a tabl e . A search must 
th e n bo made through tho obsorvod va l ues for enough m i nima l ly different Sk[X] values to 
10 undortako a stat i stical analysis of tho X values. 

1 4 .1 4 Message s u b st i tut i on attacks 

in order for th i s kind of attack to bo carr i ed out, a clono consumab l o must contain a roa l 
auth e ntication ch i p, but on e that i s e ffectiv e ly r e usab le s i nce it novor g e ts d e cremented. Tho 
15 clon e auth e ntication chip wou l d int e rc e pt messages, and subst i tute i ts own. However th i s attack 
do e s not give success to the attacker. 

A clon e a uth e nticat i on chip may choos e not to pass on a Writ e command to tho roal 
auth o nticat i on chip. How e v e r tho subsequ e nt R e ad command must return the correct rosponso 
20 ( a s if th o Writ e had succ ee d e d). To r e turn the corr o ct respons e , th e hash value must bo known for 
tho spec i fic R and M. An attacker can on l y determine tho hash valuo by actually updat i ng M in a 
real Chip, which tho attack e r does not want to do. Even chang i ng tho R sent by System do e s not 
h e lp since th e Syst e m auth e ntication chip must match the R dur i ng a subsequ e nt Tost. 

25 A message subst i tution attack wou l d ther e for e b e unsucc e ssful. This i s only tru e if System 
updat e s th e amount of consumab le r e maining befor e i t i s us e d. 

1 4 .15 Reverse ENC i Nccn i NC t h e key generator 

I f a psoudo random numb e r g e n e rator is used to gen e rat e k e ys, th o ro is th e pot e ntia l for a c l on e 
30 manufactur e to obtain tho gen e rator program or to d e duc e th e random sood used. This was th e 
way i n wh i ch th e security lay e r of th e N e tscape brows e r was initial l y brok e n [33]. 

1 4 .16 Bypassing t h e aut h ent i cat i on PROCEse 

Th e System shou l d idea l ly updat e th e consumab le state data befor e tho consumablo is used, and 
35 follow e very writ e by a road (to auth e nt i cat e th e wr i te). Thus each uso of tho consumab l o roqu i ros 
an authentication. I f the System adh e res to th e se two simple rul e s, a clone manufacturor will have 
to s i mu l at e auth e nt i cation v i a a method abov e (such as sparse ROM l ookup). 

1 4 .17 Reuse of auti icnticat i on chips 
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Each uso of tho consumabl e requ i res an outhonticat i on. I f a consumab le has boon usod up, th e n 
its authentication ch i p wi l l have had tho appropriat e stat e- data va l ues d e cr e ment e d to 0. Tho chip 
can therefore not b e us e d in another consumabl e . 

5 Noto that this only holds true for auth e ntication chips that hold Decr e m e nt Only data it e ms. If 
there i s no stato data decr e ment e d w i th e ach usage, th e r e i s noth i ng stopp i ng th e r e use of the 
ch i p. This is th e bas i c diff e rence b e tw ee n Prosonco On l y authentication and Consumab l e Lifet i me 
authenticat i on. A l l d e scribed protocols al l ow both. 

10 Th e bottom l ino is that if a consumable has D e cr e m e nt On l y data i tems that ar e us e d by th e 

System, tho authonticat i on ch i p cannot bo roused without be i ng compl e t el y r e programm e d by a 
va li d programm i ng station that has knowl e dg e of th e s e cret key (e.g. an author i zed refil l station). 

1 4 .18 Management decision to omit aut h ent i cation to save costs 

15 A l though not strict l y an externa l attack, a d e c i s i on to om i t auth e nticat i on i n futur e Syst e ms i n 
ord e r to sav e costs wi ll have widely varying effects on different markets. 

I n th e cas e of high volum e consumab le s, i t is ess e nt i al to r e member that i t Is v e ry d i ff i cu l t to 
introduc e authontication aft e r th e mark e t has start e d, as syst e ms requir i ng authonticatod 
20 consumabl e s wil l not work w i th o l d e r consumab le s st ill i n c i rcu l at i on. Lik e wis e , it i s impractica l to 
discont i nu e auth e nticat i on at any stage, as o l der Systems w i ll not work with the new, 
unauthonticat e d, consumablos. I n the second cas e , old e r Systems can bo i nd i v i dua l ly alter e d by 
r e plac i ng tho System program cod e . 

25 W i thout any form of prot e ct i on, ill e ga l cloning of h i gh volume consumablos i s almost certa i n. 

Hewever. with th e pat e nt and copyright prot e ct i on, the probabi li ty of il le ga l clon i ng may b e , say 
50%. However, this is not th e only loss possibl e . I f a clon e manufacturer were to introduce clon e 
consumabl e s wh i ch caused damage to tho System ( e .g. c l ogg e d nozzl e s in a pr i nt e r du e to poor 
qual i ty i nk), then the loss i n market acc e ptanc e , and tho expense of warranty repairs, may b e 

30 significant 

I n th e cas e of a spocia l izod pa i r i ng, such as a car/car keys, or door/door key, or somo other 
s i milar situat i on, tho omission of authontication in futur e syst e ms is tr i v i al and w i thout 
r e p e rcuss i ons. This is because th e consumer is so l d tho ent i re set of System and Consumable 
35 auth e nt i cation ch i ps at tho on e t i me. 
1^.19 Garrote/ b r ib e attack 

If humans do not know th e k e y, ther e i s no amount offeree or br i bery that can revea l them. Tho 
us e of ChipF and tho RoplacoKoy protoco l is spocif i ca l ly d e sign e d to avoid th e requir e ment of th e 
programming station having to know th e new k e y. However Ch i pF must bo told tho new key at 
40 some stage, and therefore it is tho person(s) who e nter th e n e w key i nto ChipF that are at r i sk. 
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Tho le v e l of oocur i ty aga i nst this kind of attack is u l t i mat el y o docision for th e Syst e m/Consumab le 
owner, to be made accord i ng to the des i red l e ve l of serv l co. 

5 For examp l e, a car company may w i sh to k ee p a r e cord of al l keys manufactured, so that a 
p e rson can request a now key to b e mad e for th e ir car. How e v e r th i s a ll ows th e pot e ntial 
comprom i so of tho ont i r e k e y databas e , al l owing an attackor to make keys for any of tho 
manufactur e r's existing cars. I t does not al l ow an attack e r to mak e k e ys for any n e w cars. Of 
cours e , th e k e y databas e I ts e lf may also b e e ncrypt e d with a furth e r k e y that r e qu i r e s a certain 
10 numb e r of p e op le to comb i n e th e ir k e y portions togothor for acc e ss. I f no record i s k e pt of wh i ch 
key is used i n a part i cu l ar car, there is no way to mako additional keys shou l d one become lost. 
Thus an own e r wi ll have to rop l aoo h i s car's authenticat i on ch i p and a l l his car koys. Th i s i s not 
n e c e ssar i ly a bad s i tuation. 

15 By contrast, i n a consumabl e such as a pr i nt e r i nk cartr i dge, th e on e k e y comb i nation i s usod for 
a l l Syst e ms and a ll consumab l os. Certa i nly i f no backup of tho koys is kopt, there i s no human 
with knowlodgo of th e key, and th e r e fore no attack i s poss i bl e . How e v e r, a no backup situation i s 
not dos i rob l o for a consumable such as ink cartr i dg e s, since if the key is l ost no mor e 
consumab le s can b e mado. Tho manufactur e r should th e r e fore keep a backup of tho key 

20 i nformation i n s e vera l parts, where a certa i n numb e r of peop l e must together combin e their 
port i ons to r e v e a l th e ful l k e y i nformat i on. This may be r e quir e d if cas e th e ch i p programm i ng 
station needs to bo ro l oadod. 

I n any case, none of these attacks are against the authent i cated read protoco l , s i nce no humans 
25 ar e i nvo l v e d i n th e authent i cat i on proc e ss. 

Logical Interface 
45 I ntroduction 

Th e QA Chip has a phys i cal and a l ogica l e xt e rnal int e rfac e . Th e physical i nt e rfac e d e fin e s how 
30 tho QA Chip can b e conn e ct e d to a phys i ca l Syst e m, wh ile th e log i ca l interfac e d e term i nes how 
that System can commun i cat e with th e QA Chip. This s e ction deals with th e l og i ca l i nt e rfac e . 

4#7l Operat i ng Modes 

Tho QA Chip has four operating modes — /d/ e Mode, Program Mode, Trim Mod e and Activo Modo, 

35 -* /d/e Mod e is used to a l low th e chip to wa i t for th e n e xt instruct i on from th e System. 

Trim Mod e is usod to dotorm i no the clock speed of tho ch i p and to tr i m tho frequency 

dur i ng the i nitia l programm i ng stage of the ch i p (when F l ash memory i s garbag e ). The c l ock 
frequency muet b e trimmed via Trim Modo before Program Mod e is usod to store the 
program code. 
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Program Modo io uood to load up tho oporating program codo, and is roqulred bocause th e 

oporating program oodo i s stored in F l ash m e mory i nstead of ROM (for soourity reasons). 

^ Activ e Mode is us e d to e xocut e th e sp e o i flG authenticat i on command spoc i fiod by tho 

System. Program codo i s oxooutod in Activo Mod e . When tho resu l ts of tho command havo 
5 b ee n r e turn e d to th e System, th e chip enters /d/o Mod e to wait for tho n e xt instruction. 

+&^M I dio Modo 

The QA Chip starts up I n Idio Modo, When the Chip is in Idi e Mod e , i t waits for a command from 
the master by watch i ng the pr i mary id on tho seria l lino. 
10 If the primary id matchco the global id — (0x00 , — common to all 

QA Chips) , — and tho following byte from the maator io tho Trim 

Mode id byte, — the QA Chip ontoro Trim Modo and starts count i ng tho 

numb e r of I nt e rnal c l ock cyclos until tho next byto i s rece i ved. 

^ If the primary id matchco the global id — (0x00, — common to all 

15 QA Chipo) , — and the — following byte — from the master is tho 

Program Mode id byte, — the QA Chip ontoro Program Modo. 
-* If the primary id matchco the global id — (0x00 , — common to all 

QA Chipo) , — and the following byte from the maotor io tho 

Active Mode id byte, — the QA Chip cntcro Activo Mod e and e x e cutes 
20 startup cod e , a l low i ng the chip to sot i tself into a state to r e c e ive authent i cat i on commands 

( i nc l udes sotting a loca l id). 
-* If the primary id matchco the ohip^ o local id^ — and the 

following byto io a valid command codC/ — tho QA Chip ontoro 

Active Modo, al l owing th e command to b e e xecut e d. 

25 

Th e val i d 8 bit s e ria l mod e va l ues sent after a g l oba l I d are as shown in Table 238. Thoy oro 
sp e c i f ie d to m i n i m i ze th e chanc e s of them occurr i ng by e rror after a g l oba l id ( e .g. OxFF and Oxoo 
are not used): 

Table 238. I d byto values to p l oco chip i n spec i fic modo 

30 

V al u e Interpretat i on 
10100101 (O xA§) Trim M ode 
10001110 ((^ ^ Program Mode 
01 1 1 1 000 (0x 78)" Activo M ede 
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15.1.2 Tr i m Mod e 

Trim Mod e i s e nabl e d by send i ng a g l obal i d byto (0x00) fo ll owod by tho Trim Modo command 

Tho purposo of Trim Modo is to s e t th e tr i m vo l uo (an i nt e rnal r e gister s e tt i ng) of tho i ntorna l ring 
5 osc ill ator so that F l ash e rasur e s and wr i tes aro of th e corr e ct durat i on. Th i s i s n e c e ssary du e to 
th e variat i on of the c l ock spood due to process variations. If writ e s an e rasur e s aro too l ong, tho 
Flash m e mory wi l l wear out fast e r than desired, and in som e cas e s can even bo damag e d. 
Trim Mod e works by measuring tho number of system c l ock cyc l es that occur Ins i d e th e ch i p from 
tho roco i pt of the Trim Modo command byte until th e r e c ei pt of a data byte. When tho data byte is 
10 rec e iv e d, tho data byt e is copi e d to tho trim register and tho current value of th e count is 
transm i tted to tho outs i d e wor l d. 

Once tho count has b ee n transmitted, tho OA Chip returns to fdio Modo, 

15 At reset, th e i nt e rna l tr i m r e gister sott i ng is s e t to a known va l ue r. Tho externa l us e r can now 
perform the following operations: 

oond the global id * write followed by the Trim Modo command 

byte 

oond tho 8 bit valuo y over a sp e c i fi e d tim e ^ 

20 acnd a otop bit to oignify no more data 

oond the global id t rcad followed by the Trim Mode command 

byte 

rGccivc the count c 

acnd a otop bit to oignify no more data 

25 

At the end of this proc e dur e , the trim regist e r w il l b e v, and tho external us e r wi ll know the 
r e lat i onsh i p between ext e rna l t i me t and interna l tim e c. Th e r e fore a now valu e for v can b e 
ca l culat e d. 

30 Th e Trim Mode procedure can b e r e p e at e d a numb e r of times, vary i ng both t and v in known 

ways, m e asuring th e resu l tant c. At th e e nd of th e proc e ss, tho fina l valuo for v i s estab l ished (and 
s tor e d in th e tr i m r e gister for subs e qu e nt us e i n Program Mod e ). This va l u e v must also bo written 
to th e flash for l at e r us e ( e very time tho ch i p i s placed i n Act i ve Modo for tho f i rst t i mo after power 

35 

15.1.3 Program Modo 

Program Modo is enab l ed by send i ng a global id byto (0x00) fo l low e d by tho Program Modo 
command byto. 
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Tho QA Chip d e t e rmin e s wh e ther or not the i nt o rnal fuse has be e n blown (by read i ng 32 bit word 
0 of the informat i on b l ock of flash momory). 

I f th e fus e has boon b l own tho Program Modo command i s ignor e d, and tho QA Chip returns to 
tdio Modo, 

5 

I f the fuso i s st il l i ntact, th e ch i p e nt e rs Program Mode and eras e s th e e ntire cont e nts of Flash 
momory. Th e QA Chip th e n validotos tho orasuro. I f tho erasur e was suocoosfu l , the QA Ch i p 
r e c e ives up to 4096 byt e s of data oorrospond i ng to tho now program code and variable data. The 
byt e s are transf e rred i n ord e r byt e g to byte4 0Qgr 

10 

Once a l l byt e s of data hav e b ee n load e d into Flash, tho QA Chip r e turns to /dio Modo. 

Not e that Trim Mode functional i ty must b e p e rform e d b e foro a chip ontors Program Modo for tho 
first tim e . 

15 

Onco tho dosirod number of bytes have be e n down l oaded in Program Mod e , th e LSS Master 
must wait for 80^s (th o tim e tak e n to write two bytos to flash at nybb l o rates) before send i ng the 
n e w transaction ( e g Active Mod e ). Oth e rwis e th e last nybblos may not b e writt e n to flash. 

20 4^^M Activo Modo 

Active Modo is ontorod either by rocoiving a global i d byte (0x00) follow e d by tho Activo Mod e 
command byto, or by s e nding a loca l i d byte foliowod by a command opcode byto and an 
appropriat e number of data byt e s repr e s e nt i ng tho required input paramet e rs for that opcode. 

25 I n both cas e s, Active Modo causes e x e cut i on of program code prev i ous l y stored in tho flash 

momory v i a Program Mode. As a result, w e n e v e r e nt e r Activ e Mode aft e r Tr i m Mod e , without a 
Program Mod e in between. How e ver onc e programmed v i a Program Mod e , a chip i s a ll ow e d to 
enter Activo Modo after power up, since va li d data wi l l be i n flash. 

30 I f Act i v o Mod e i s e nt e r e d by the global i d mechanism, tho QA Ch i p e x e cut e s sp e cific reset startup 
cod e , typica l ly s e tting up tho l oca l i d and other lO spec i fic data. 

I f Activ e Mod e i s e nt e red by tho loca l id m e chan i sm, th e QA Chip e x e cut e s spec i fic code 
d e p e nd i ng on th e following byt e , which funct i ons as an opcode. Tho opcodo command byto 
35 format i s shown i n Table 230: 

Tab le 230. Command byto 



bits 


Dosoription 


2-0 


Opcode 
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§-3 


lOpccxje 


7-6 




count of number of bits set in opcode (0 to 3) 



The i nterprotation of tho 3 bit opcodo i s shown i n Tab l o 2^0: 
Tabl e 2 4 0. QA Chip opcod e s 



D e scription 



QQQ 



P3T 



QQ^ 



R(4& Random 



04-0 



Road M 



044 



4-00 



WRM Wr i te M with no auth e nt i cat i on 



4^ 



WRA Writ e with Auth e ntication (to M, P, or K) 



chip spocific — res e rv e d for Ch l pF, Ch i pS etc 



444- chip spocific — r e serv e d for ChipF, Ch i pS e tc 



10 



The command byte is des i gn e d to e nsure that e rrors i n transm i ss i on ar e d e tected. 
R e gular QA Ch i p commands ar e th e r e for e comprisod of an opcod e plus any associat e d 
param e t e rs. Th e commands ar e l i st e d in Table 241 : 
Tabl e 2 4 1 . QA Ch i p commands 



Command 



Random 



Read 



Test 



Wr i t e Auth 



R e placeK e y 



II 

opcod e 



P3J 



Add i t i onal parms 



[1,1.20] 



TST 



[1,20,6 ^1 ,20] 



WRM 



WRA 



SotPormiss i ons WRA 80 89 [1,1,20, 4, 20] [4} 



Output 
Return value 



[20] 



[1,6^, 20] 



76 [20, 64,20] 



20, 61,20] 



80 ^ i f succossfu l , 76 i f 



89 i f succ e ssful, 76 i f not 



89 i f succ e ssful, 76 i f not 



89 76 [1,20, 20, 20] 89 if succossful, 76 i f not 



Opoodo 



Mnomonio 



[n, m] - Met of paramotoro wher e n bytos for first paramotor. and m bytoo for tho Gooond oto. 

n - actua l byto pattern required ( i n hox). Tho bytoG 0x76 and 0x8 9 woro ohooon as th e bool oan va l u e s 0 and 1 as 
th e y are inv e rs e s of oach other, and shou l d not bo gonorat e d aoo i don ta ll y. 
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Chips only 


[1. 20. 20. 61. 20. 6A] 


[20. 61, 20] 




Chips only 


[1.20. 20. 1,20. 1] 


[20, 61, 20] 






n 901 


[20, 20, 20] 


GotProgKoy 




SetPartlalKey 


'^^1 llli^l -Wl MM J 




89 if euocoooful, 76 if not 



Apart from th e R e s e t command, the next four commands are the commands most l i k el y to b e 
used dur i ng regular operat i on. Th e n e xt throo commands ar e used to provid e auth e nticat e d wr i t e s 
(which ar e e xp e cted to b e uncommon). Th e fina l s e t of commands ( i nclud i ng SignM), ar e 
5 exp e ct e d to b e sp e c i ally implem e nt e d on ChipS and Ch i pF QA Ch i ps only. 

Th e input parameters oro sont in th e sp e c i fiod order, w i th e ach paramet e r being s e nt le ast 
s i gnificant byt e first and most significant byt e last. 

Return (output) v ai uoo ar c read in tho oamo way — l east s i gn i f i cant byto first and most significant 

byte l ast. The cliont must know how many bytes to rotriovo. Tho QA Ch i p wi ll t i me out and r e turn 
10 to /of/o Modo if an i ncorr e ct number of bytes is prov i d e d or read. 

In most cas e s, th e output byt e s from one chip's command (the r e turn valu e s) can be f e d d i r e ctly 

as th e input byt e s to anoth e r ch i p's command. An examp le of this i s th e RND and RD commands. 

Th e output data from a ca ll to RND on a trust e d QA Ch i p do e s not hav e to b e k e pt by th e Syst e m. 

I nste a d, the Syst e m can transfer th e output bytes dir e ctly to the i nput of the non - trust e d QA Chip's 
15 RD command. Th e description of e ach command points out whore this is so. 

Each of th e commands is examined in deta il in th e subsequent sect i ons. Note that som e 

a l gor i thms are spec i fical l y designed because flash memory is assumed for tho i mplementat i on of 

non - volat i l e var i ables. 

15.1.5 Non volati le var i abl e s 

20 Th e m e mory w i thin th e QA Chip contains som e non vofatiio (Flash) memory to storo the variab l es 

required by tho auth e nt i cat i on protocol. Tabl e 2 4 2 summar i zes tho variables. 

Table 2 4 2. Non volat ile variab le s r e qu i r e d by th e auth e nt i cat i on protocol 



Name 



D e scr i ption 



N 



Numb e r of k e ys known to tho chip 



Rk 



3 



Numb e r of v e ctors M i s broken into 



160 p e r k e y, Array of N s e cr e t k e ys us e d for ca l culating Fk rP^ 



160 for Rk 



wh e r e is th e nth e l e m e nt of the array. Each K^ ^ 



must not b e stored dir e ctly in tho QA Ch i p. I nstead, 



I t i o oxp e ctod that most Q/\ Chips wi ll imp l oment SignM as a function that rotumo 0x00. Only a l im i ted number of 
ch i ps wil l b e progrommod to a l low S i gnM functional i ty. It i s inoludod horo as an examp l e of how s i gnatures can b e 
gonoratod for authonticatod writes. 



It is oxpectod that most QA Ch i ps w i l l I mplomont SignP as a function that rotums 0x00. Only a l imit e d number of 
ohfps wi ll be programmed to a l low SignP functional i ty. I t i s includ e d h e r e as an examp l e of how signatures can be 
gen e rat e d for authonticatod writes. 
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each chip noods to stor e a single random number 
R k (different for each ch i p), KhSRk, and . K^ ^Rk^ 
Th e stor e d K^ ^R k can b e XORed with Rk to obta i n 
th e r e a l K^. A l though .Ka^Rk must b e stor e d to 
protect against d i ff e r e ntial attacks, it is not usod. 

R 4€0 Curr e nt random number usod to e nsur e t i mo 

vary i ng messages. Each ch i p instanc e must bo 
seeded w i th a d i ff e r e nt i n i t i a l va l u e . Chang e s for 
each s i gnature generat i on. 

Mr 51 2 p e r M Array of T m e mory v e ctors. Only can b e written 

to with an author i zed wr i t e , wh il e al l Ms can b e 
writt e n to I n an unauthoriz e d wr i te. Writes to M^ -afe 
optimiz e d for Flash usage, whi l o updat e s to any 
oth e r hAf^ ar e e xp e ns i ve w i th regards to F l ash 
utilizat i on, and are exp e ct e d to b e on l y p e rformed 
onco por soot i on of M^ ^^ . conta i ns T and N in 
R e adonly form so users of th e chip can know 
those two values. 

Pt**4 32 p e r P T+N e l e m e nt array of access p e rmissions for e ach 

part of M. Entri e s n-{0... T 1) ho l d access 
permiss i ons for non authonticated writes to Mn -^ne 
key roqu i rod). Entries n-{T to T+N 1}hold access 
p e rm i ssions for auth e nticated writes to Mq for K^ t 
P e rmission choices for e ach part of M ar e Road 
On l y, Read/Writ e , and Docromont On l y 

MinT i cks 32 Tho min i mum number of clock t i cks botwoon ca ll s 

to k e y bas e d functions. 

Note that sinco thoso variab l es are i n F l ash memory, wr i tes should b e m i n i m i z e d. Th e it i s not a 
simp le matt e r to wr i te a n e w va l u e to rep l ac e th e o l d. Care must b e tak e n with flash e nduranc e , 
and speed of accoss. Th i s has an e ffect on tho algorithms usod to change F l ash m e mory bas e d 
registers. For example, F l ash m e mory shou l d not be used as a sh i ft r e gister. 
5 A r e s e t of the OA Ch i p has no effect on th e non vo l at i lo variables. 

15.1.5.1 MandP 

M ft conta i ns appl i cation specif i c stat e data, such as s e ria l numb e rs, batch numb e rs, and amount of 
consumable remaining. M h can b e r e ad using th e R e ad command and writt e n to via th e Write and 
10 Wr i toA commands. 

Mo is exp e cted to bo updated frequent l y, whilo each part of shou l d only bo written to onco. 
Only Mq can bo wr i tten to v i a tho Wr i toA command. 
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M 4 contains th e op e rat i ng parameters of tho ch i p ao shown i n Table 2^3, and M^^ ar e app li cat i on 
specific. 

Tablo 213. I ntorprotat i on of 

5 



Length 


Bits 


intorprotation 


8 


7-0 


Number of available koys 






Number of available M vectors 








Revision of chip 


96 


127 32 


Manufacture id information 








255 128 


Serial number 


8 


263 256 


Local id of chip 


248 


51 1 264 


reserved 



Eaeh-M ft is 512 b i ts i n le ngth, and is intorpr e ted as a set of 16 x 32 b i t words. Although MB -may 
contain a number of difforont olomonto, oach 32 bit word diff e rs on l y i n writ e permiss i ons. Each 
32 b i t word can always b e read. Onc e i n client memory, tho 512 b i ts can be int e rpreted i n any 
10 way chosen by tho c lie nt. Tho d i fforont wr i te perm i ssions for oach P are outlined in Tab l o 2AA: 
Table 211. Writo perm i ss i ons 



Data type 


permission description 


Road Only 


Can novor be written to 


RoadWrito 


Can always be written to 


Decrement Only 


Can only be written to if the new value is less than tho old 
valuo. Decrement Only values can be any multiple of 32 bits. 





To accompl i sh th e protect i on r e quired for writ i ng, a 2 bit p e rmission va l u e P is d e fined for e ach of 
15 th e 32 bit words. Tabl e 2 4 5 dofinos th o int e rpr e tation of tho 2 bit permission bit pattern: 
Table 245. Permiss i on b i t i nterpretation 



Bite 


Op 


Interpretation 


Action taken during Write command 






00 


rm 


RoadWrito 


The new 32-bit value is always written to 

MfWL 


04- 


MSR 


Decrement Only 
(MesI Significant 


The new 32 bit value is only written to 


Region) 


M[n] if it Is loss than tho valuo currently 
in M[n]. This is used for access to tho 




Most Significant 16 bits of a Decrement 


Only number 


m 


NMSR 


Decrement Only 


The new 32 bit value is only written to 
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(Net Most 


M[n] if M[n 1] could olco bo written > Tho 


Significant Region) 


NMSR access modo allows multiple 




precision values of 32 bits and more 


(multiples of 32 bits) to docromont. 




44 


RO 


Road Only 


Tho now 32 bit value is ignored. 
M[n] is loft unchanged. 



Tho 16 sots of pormiQo i on b i ts for each 512 b i ts of M ar e gather e d together in a singl e 32 bit 
variab le p, wh e r e bits 2n and 2n*1 of P correspond to word n of m as fo l lows: 

5 Each 2 - b i t va l u e i s stored as a pair with the msb i n bit 1 , and th e Isb in bit 0. Cons e qu e ntly, I f 

words 0 to 5 of M had perm i ss i on MSR, with words 6 15 of M permission RO, th e 32 - bit p var i ab l e 

would be 0XFFFFF555: 

11 11 11 11 11 11 11 11 11 11 01 01 01 01 01 01 

10 

Dur i ng e x e cution of a Writ e and WritoA command, tho appropr i ate Pcrmissionotn] is e xamin e d for 
e ach M[ni start i ng from n-1 5 (msw of M) to n -0 (Isw of m), and a d e cis i on made as to wh e ther the 
n e w M[n] value wi l l replace tho old. Not e that i t i s important to proc e ss the M[n] from msw to Isvy to 
corr e ctly interpr e t th e acc e ss perm i ssions. 

15 

Porm i Gs i onQ oro sot and road using tho OA Chip's SotPermiss i ons command. The default for P i s a l l 
Os (RW) w i th tho exception of c e rta i n parts of m ^t 

Not e that th e Decrem e nt On l y comparison i s unaigned, so any Decrement On l y values that 
20 r e quir e negat i ve rang e s must be shifted i nto a pos i tive range. For e xamp le , a consumab l e with a 
Docromont On l y data item range of - 50 to 50 must hove the range shifted to b e 0 to 100. Th e 
. Syst e m must th e n i nt e rpret tho range 0 to 100 as b ei ng 50 to 50. Not e that most instanc e s of 
D e crem e nt On l y rang e s ar e N to 0, so there is no range sh i ft requ i red. 

25 For Decr e m e nt Only data i t e ms, arrange th e data i n ord e r from most significant to leoGt significant 
32 b i t quant i ti e s from M[n] onward. Th e acc e ss modo for tho most s i gnificant 32 b i ts (stored in M[n]) 
shou l d be set to MSR. Th e remaining 32 b i t e ntries for the data should hav e th ei r p e rm i ssions s e t 
to NMSR. 

30 If e rroneously set to NMSR, w i th no assoc i ated MSR r e gion, e ach NMSR r e g i on w i ll b e 
cons i dered i nd e p e ndent l y i nstead of be i ng a mu l t i prec i sion comparison. 

Examples of a l locating M and Porm i osion bits can b e found i n [86]. 
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15.1.5.2 KandRK 

K io tho 160 b i t ooorot koy uood to protoct M and to onsuro that tho cont e nts of M ar e val i d (wh e n m 
i s read from a non ta i sted chip), k i s i nitia ll y programmed oftor manufaoturo, and from that point 
on, K can only bo updated to a now valuo if tho o l d k i s known. S i nc e k must b e kept s e cr e t th e ro 
5 is no command to d i r e ct l y r e ad it. 

K is used in tho koyod one way haoh funct i on HIVIAC SHA1 . As such it should bo programmed 
w i th a phyGica/ly goner a tod random number, gath e r e d from a physica ll y random phonomonon. K 
muGt NOT b e g e n e ratod with a comput e r - run random number gonorator. Th e s e curity of tho QA 
10 Chips depends on K b e ing gonoratod i n a way that I s not d e t e rmin i stic. 

€aeh-K n must not b e stored directly in tho QA Ch i p. Inst e ad, each chip n ee ds to store a s i ng l e 
random number Rk (diff e r e nt for each ch i p), K^ ^RKi-afid — rKft SR^. The stored Kn SRiccan-be 

XORod w i th Rk to obtain tho rea l K^. A l though — rK^^R K must bo stor e d to prot e ct against 
15 d i fferential attacks, it i s not used. 

15.1.5.3 R 

R is a 160 b i t random number seed that Is sot up after manufactur e (wh e n tho ch i p is pro 
gramm e d) and from that point on, cannot b e changed. R i s used to ensure that e ach signed item 
20 contains tim e varying i nformation (not chosen by an attack e r), and each ch i p's R is unrelated from 
on e chip to th e next. 

R is us e d during the Tost command to onsuro that th e R from th e pr e vious cal l to Random was 
us e d as th e sess i on koy i n g e nerat i ng th e s i gnatur e dur i ng Road. L i kewis e , R i s used dur i ng tho 
25 Wr i t e Auth command to e nsur e that tho R from th e pr e v i ous call to Road was used as tho session 
koy during generat i on of the s i gnatur e i n tho remote Authenticat e d ch i p. 

Th e only invalid valuo for R i s 0. This is becaus e R is changed via a 160 b i t max i mal p e r i od LFSR 
(L i near Foodback Sh i ft R e g i st e r) with taps on bits 0, 2, 3, and 5, and is changed only by a 
30 successful cal l to a signature generat i ng function (e.g. Tost, Writ e Auth). 

Th e l ogica l s e curity of th e QA Chip r elie s not only upon tho randomness of k and tho strength of 
th e HMAC SHA1 a l gorithm. To pr e v e nt an attack e r from bui l d i ng a spars e lookup table, tho 
secur i ty of tho QA Chip also d e p e nds on th e range of r over tho l i f e t i m e of a// Systems. What th i s 
35 m e ans is that an attack e r must not b e ab le to deduc e what va l ues of R thero ore in produced and 
future Systems. I dea l ly, R shou l d bo programm e d w i th a phyeiGQlly generat e d random number, 
gath e r e d from a physica l ly random phenom e non (must not bo determ i n i st i c). R muetNOTbo 
gonoratod with a computer run random numb e r g e nerator. 

40 15.1.5.^ MinTickG 
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10 



15 



20 



25 



30 



35 



Thoro are two m e chanisms for pr e v e nt i ng an attacker from gonorat i ng mu l tiple calls to koy basod 
functions i n a short p e riod of tim e . Th e first i s an i nt e rna l r i ng OGcl ll ator that Is tomperaturo fi l t e red. 
Tho second mochanism is tho 32 bit M i nTioko variablo, wh i ch i s used to specify the m i nimum 
numb e r of QA Chip c l ock ticks that must e lapse between calls to k e y based functions. 

Th e MinTioko variab le is s e t to a f i x e d va l u e when tho QA Chip is programm e d. I t could poss i b l y be 
stor e d in M4 T 

Th e e ff e ctive va l uo of MinT i oko d e p e nds on th e op e rating c l ock speed and th e notion of what 
const i tut e s a reasonab l e timo botwoon koy basod function ca l ls (application sp e cific). Tho 
duration of a s i ng l e tick depends on tho operating clock spood. This i s tho fastest spood of tho 
ring osc i llator g e n e rat e d clock (i.o. at tho lowest val i d operating tomperaturo). 

Onc e th e duration of a tick i s known, tho MinT i o i to valuo con to bo sot. The valuo for M i nTio i co w ill bo 
th e minimum numb e r of ticks r e qu i red to pass b e tw ee n ca l ls to the key basod funct i ons (th e re is 
no need to prot e ct Random as this producos tho same output oach timo it i s oa l lod mu l tiple times 
in a row). Th e valu e i s a real tim e numb e r, and div i ded by th e le ngth of an operating t i ck. 

I t should be noted that the M i nTicks v a riab le only slows down an attack e r and causes the attack to 
cost moro s i nce it do e s not stop an attack e r using mult i p le Syst e m chips in para l lel. 

15.1.6 GotProgramKoy 

Ifipufe n, Rfe - [1 byte, 20 byt e s] 



Changes: Rfc 

Noto: Tho GotProgramK e y command ie only implom e nt e d in ChipF, and not in all QA Chipe, 
Th e GotProgramKoy comrr i nnd is usod to produc e the bytestream r e quir e d for updat i ng a 
sp e cifi e d k e y In ChlpP. On l y an QA Chip programmed w i th th e corr e ct va l u e s of th e o l d Kh can 
respond corr e ctly to th e GotProgramK e y requ e st. Th e output bytostream from the Random 
command can bo fod as the input byt e str e am to th e Rep l aceKey command on tho QA Ch i p b e ing 
programm e d (ChipP). 

Th e i nput byt e stream cons i sts of tho appropr i ate opcode fol l owed by th e d e sired koy to gonorate 
the s i gnature, followed by 20 bytes of R&(repr e s e nt i ng the random numb e r r e ad i n from Ch i pP). 

Th e loca l random numb e r Rt. i s advanced, and sign e d i n combination w i th Rg and C^ by the 
chos e n k e y to gonorato a timo vary i ng secr e t number known to both ChipF and ChipP. This 
signature i s then XOR o d w i th th e n e w koy (this oncrypts tho now koy). Tho first two output 
param e t e rs ar e sign e d w i th tho o l d koy to ensure that ChipP knows it docodod correctly. 
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This who le proc e dure shou l d only bo aHowed a g i v e n number of tim e s. Th e actual number can 
conveni e nt l y b e stor e d i n tho loca l Mo[0] (og word 0 of Mo) w i th R e adonly perm i ss i on. Of cours e 
another ch i p could perform an Author i sed wr i t e to update tho number (via a ChipS) should it be 
dosired. 

5 

Th e G e tProgramK e y command i s imp l emontod by the fol l ow i ng steps: 

Loop — through — aii — — Flaoh, — reading — oach — word — (will — trigger 

chcclco) 
AcGopt n 
1 0 Roatrict n to N 

Aooopt Rfc . 
If (M»[0] m 0) 

Output 6 0 bytoo of 0x00 # no more kcyo allowed to be gQncratcd 

from thio ohipF 

15 Done 

Endlf 

SIG < — I Ra I — # calculation muat take conotant time 
20 Tmp < SIG 0 Kk 

Output Tmp 

Decrement M o+O-j # reduce the number of allowable key genera tiono 

by 1 

25 SIG < — &fa k [Rb I Tmp I Ca -j # calculation muot take conotant time 

Output SIG 

15.1.7 Random 

Input: '■ Non e 

Output: — R fc - [20 byt e s] 
30 Chang e s:None 

Th e Random command i s us e d by a cl ie nt to obtain an i nput for us e i n a subs e qu e nt 
auth e nt i cat i on procoduro. Since tho Random command roqu i ros no input parameters, i t i s 
thoroforo s i mply 1 byto containing tho RND opcode. 

35 Tho output of tho Random command from a trust e d OA Ch i p can be fed stra i ght into the non 

trusted ch i p's Road command as port of tho input paramotors. Thoro i s no nood for tho c li ent to 
stor e th e m at al l , since th e y are not r e qu i r e d again. Howover tho Tost command w i l l on l y succ ee d 
if the data pass e d to th e R e ad command was obta i nod first from tho Random command. 
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I f a ca l lor only calls tho Random function mu l tiple t i mes, th e sam e output w ill bo roturnod oaoh 
t i mo. R wil l on l y advance to tho next random numb e r in the soquenoe oftor a succoGsfu l ca ll to a 
funct i on that returns or tests a signature (o.g. T e st, s e e Soction 15.1.13 on pogo 1 for moro 
i nformat i on). 

5 

Tho Random command is i mpl e mented by th e follow i ng stops: 

Loop — through — aii — &§ — Flaoh, — reading — each — word — (will trigger 

chccka ) 
Output Rfc 

10 

4St4t€ Read 

*Bpufe n, t, Rs - [1 byte, 1 byt e , 20 bytes] 

Output: R|,rA4yr^KBtRgW=tG^|My i = [20 byt e s, 6^ bytes, 20 bytes] 

Chang e s: Rt 

15 Th e R e ad command i s used to road tho entire state data (Mt) from an OA Ch i p. Only an OA Ch i p 
programm e d with tho corr e ct value of Kh can r e spond correctly to th e R e ad r e qu e st. The output 
bytestr e am from tho Read command can b e fed as tho input bytCGtroam to th e Test command on 
a trust e d QA Ch i p for v e rificat i on, with m stor e d for lat e r us e i f Tost returns success. 

20 The input bytestream cons i sts of the RD opcode fo l lowod by tho k o y numb e r to uso for tho 
s i gnatur e , which M to read, and th e bytes 0 - 19 of R &. 23 byt e s are transf e rr e d in tota l . Re ~Is 
obta i ned by call i ng tho trust e d QA Chip's Random command. Tho 20 byt e s output by th e trust e d 
chip's Random command can therefore bo fed d i rectly i nto tho non trusted chip's Read command, 
w i th no need for those bits to be stor e d by System. 

25 

Calls to Read must wait for M i nT i oksRoma i ning to reach 0 to ensure that a m i n i mum t i me w i ll e lapse 
between ca ll s to R e ad. 

Th e output va l u e s are calculated, M i nTioksRomaining is updated, and th e s i gnatur e i s r e turn e d. Th e 
30 contents of My are transferred least significant byt e to most s i gn i ficant byte. The s i gnature 
SKfttR£<RkjG^iM y] must bo calculated i n constant time. 

Th e next random number i s g e nerat e d from r using a 160 bit maximal p e r i od LFSR (tap 
s ele ctions on b i ts 5, 3, 2, and 0). The in i tial 160 - b i t va l ue for r is set up when tho ch i p is 
35 programmed, and can be any random number exc e pt 0 (an LFSR fillod with Os w i l l produce a 

never end i ng stream of Os). R i s transformed by XOR i ng bits 0, 2, 3, and 5 togothor, and shifting 
all 160 bits r i ght 1 b i t using the XOR result as the i nput bit to b4^. Tho process i s shown in F i gure 
347 below. 
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Care should bo takon when updating n s i nco i t l i voo in Flash. Program oodo must assum e pow e r 
cou l d b e removed at any t i me. 



The Road command i s i mp le m e nted with tho fo l low i ng st e ps: 
5 Wait for MinTickoRctnaining to become 0 

Loop — through — aii — &€ — Flaah, reading — each — word — (will — trigger 

chccko) 

Accept n 

Accept t 
1 0 Reotrict n to N 

Rcotrict t to T 

Accept Rfi 

Advance R^ , 

Output Rfc 
15 Output Mfe fe 

Sig < — Bi te [Rfi I Rfe -fgjr-f^ ^] # calculation muat take conotant time 

MinTickoRcmaining < — MinTicko 

Output Gig 

Wait for MinTickoRcmaining to become 0 

20 

15.1.9 Sot PormissionQ 

l«pufe n. p, Rfe, Pfe, SIGb ~ [1 byte, 1 byto. 20 bytes, A bytes. 20 byt o s] 

Output: Pp 

Chang e s: p^t^ 

25 

Th e SetPormieGione command is used to s e cure l y update th e cont e nts of Pp (containing OA Ch i p 
p e rm i ss i ons). Tho WritoAuth command on l y attempts to replace Py if tho now va l uo is signed 
comb i n e d w i th our l oca l R. 

30 It is on l y possib l o to sign m e ssag e s by knowing Kh. This can b e ach ie v e d by a ca ll to tho SignP 
command (b e cause on l y a Ch i pS can know K h). It m e ans that without a chip that can be used to 
produc e th e r e quir e d s i gnatur e , a writ e of any va l ue to p - p i s not possib l o. 

Th e proc e ss i s very s i m il ar to Test, e xcept that i f th e va li dation succeeds, tho Pb i nput param e t e r 
35 is add i t i onally ORod with the current va l uo for n^. Note that this is an OR, and not a replac e . Sinc e 
th e SetParms command only s e ts b i ts in Py, th e e ff e ct is to a ll ow tho perm is sion bits 
corresponding to M[n] to progress from RW to ei ther MSR, NMSR, or RO. 

Th e S e tP e rmiss i ons command i s impiomontod with tho follow i ng stops: 
40 Wait for MinTickoRcmaining to become 0 
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Loop — through — aii — ei — Flaoh^ — reading — each — word — (will — trigger 
checko ) 



Accept n 
5 Reatrict n to N 

Accept p 

Reatrict p to TiN 
Accept Rfc . 
Accept Pb 

1 0 SiGt— < — &ite4Rb-HR s I I Cj^] # calculation muot take conatant time 
Accept SIGjj 
If (SIGk - SIGj, 4- 
Update Rfa 

Pp— < — P p V Pj^ 

15 Endlf 

Output Dp # ouGGCoo or failure will be determined by receiver 
MinTickoRemaining < — MinTicko 
15.1.10 — R e plac e K e y 

i^ttfc n. Re, V, S I G& - [1 byto, 20 bytes, 20 bytes, 20 bytes] 

20 Output: — Boo le an (0x76-failuro, 0x89 ~ sucooss) 
Chang e s: Kft T-Mfe:r^ 

The R e plac e K e y command is used to r e p l ac e th e sp e c i fi e d key i n the OA Chip flash memory. 
How e v e r Kh can only bo roplacod i f th e prev i ous value is known. A r e turn byto of 0x89 is produc e d 
i f th e k e y was successful l y updated, whil e 0x76 is r e turned for fa il ur e . 

25 

A R e p l ac e K e y command consists of th e WRA command opcodo fol l owed by 0x80, 0x76, and 
th e n th e appropriate param e t e rs. Note that the n e w key is not s e nt in th e c le ar, it is s ent 
encrypted with tho signatur e of Rk, R & and C^ (s i gned w i th tho o l d koy). The first two input 
paramet e rs must bo vor i fiod by gen e rat i ng a signatur e us i ng the o l d k e y. 

30 

Tho Replac e Koy command is i mp le m e nt e d with th e fo l low i ng st e ps: 

Loop — through — aii — e€ — Flaoh, reading — oach — word (will — trigger 

checko ) 
Accept n 
35 Rcotrict n to N, 

Accept Ra # oeooion key from ChipF 
Accept V # encrypted key 

SiGfe— < — gjS R [Rj4 1 V I C^ ^ — # calculation muot take conotant time 
40 Accept CICk 
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i# — (SIGfc « GXCs s) — # comparioon muat take conotant time 

SlOfc — < — I Rfe I C9.] # Galculation muot take conotant time 

Advance Rb 

Kb-< — ^ V 

5 Kr— < — # involvGo otoring — (Kb ® R ^) — ck&d — ( <Kb ^ Rf cf- 

Output 0x 8 9 # ouGccoo 

Eloo 

Output 0x7 6 # failure 

Endlf 

10 15.1.11 — S i gnM 

i^ete FhR ^,R£,M&,S I G£ 7Mde6tfe d - [1 byte, 20 bytOG, 20 bytOG, 64 bytos,32 

byt e s] 

Output: — i=^Hviflewr^Kf^+^4^H ^ " [20 bytes, 64 bytos, 20 bytos] 
Chang e s :Rw 

15 Noto: Th e SignM command /g only Implem e nt e d in ChipS, and not in all QA Chips. 

Tho SignM command is used to produce a va li d signod M for uso i n an authontioatod wr i te 
transaction. On l y an QA Ch i p programm e d with corr e ct va l u e of Kh can r e spond corr e ctly to th e 
SignM requ e st. The output byt e stroam from the SignM command can bo fod as the i nput 
bytostream to th e Wr i teA command on a d i fferent QA Chip. 

20 Tho i nput bytestroam consists of tho smr opcode fol l owed by 1 byte contain i ng tho key numb e r to 
us e for gonorating tho signature, 20 byt e s of Rx (representing tho number paosod i n as R to 
ChipU's READ command, i. e . typ i cally 0), th e output from the READ command (n a m e ly Rs, M& y 
and siCfe). and final l y th e d e sir e d M to wr i te to Ch i pU. 

Tho S i gnM command only succoods whon sice ~ SK fR x | R& j c^j Me], indicating that th e r e qu e st was 
25 genoratod from a chip that knows K. This generat i on and compar i son must take the camo amount 
of time regardloGG of whether tho input parametore arc concoct or not. I f th e times ar e not tho 
same, an attacker can gain informat i on about which bits of tho supp li ed s i gnature aro i ncorroct. If 
th e signatur e s match, th e n R t , i s updat e d to bo tho next random number in th e s e qu e nc e . 

30 Since the SignM function generates signatur e s, tho funct i on must wait for th e MinT i oitoRoma i ning 
r e g i st e r to r e ach 0 b e for e proc e ss i ng tak e s p l ac e . 

Onc e all the i nputs have been ver i f i ed, a new memory v e ctor i s produced by app l y i ng a spec i a ll y 
stor e d P value (eg word 1 of Mo) and Md esi w u aga i nst Me. Effectiv el y, it i s performing a regu l ar Write, 
35 but with s e parat e P aga i nst someon e e ls e 's m. Th e Mb w is s i gn e d with an updat e d Rfc (and the 
passed i n Re), and a l l throe values aro output (tho random number r u, Mw ew , and tho signaturo). 
Th e tim e tak e n to g e nerate this s i gnature must bo th e same regard l ess of tho i nputs. 

Typica ll y, th e S i gnM command wil l be acting as a form of consumab le command, so that a giv e n 
40 Chips can on l y g e nerate a given number of signatur e s. Tho actua l number can convoniont l y bo 
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stor e d i n M o (eg word 0 of Mq) w i th RoadOnly p e rmissions. Of course another chip cou l d porform 
an Authoris e d wr i t e to updat e the number (us i ng anoth e r Ch i pS) shou l d i t b e d e s i red. 



Th e SignM command is implemented w i th tho fo ll ow i ng stops: 
Wait for MinTiGlcoRGmaining to booomc 0 

Loop — through — etii — e€ — Flaoh, — reading — caoh — word — (will — trigger 
Ghecka) 

Accept n 
Reotrict n to N 

Aooept Rjt tt don^ t care what thio number io 

Aocept Ra 
Accept Ma 

SIGfc < — Sj6 B [Rx [ I 1 Ma] # calculation muot talco conotant time 
Accept SICa 

Accept M dee^geet 

If ((SIGfi ^ SIGfc) OR (M i .[0] ° 0)) # fail if bad aignature or if 

allowed oiga = 0 

Output appropriate number of 0 # report failure 

Done 

Endlf 



# Create the new voroion of M in ram from W and rermio3iono 

# Thio ia the came ao the core proceoa of Write function 
tt cxGcpt that WG don^t write the reoulto bade to M 
DecBncountcred < & 

EqEncountcrcd < 0- 

Permiooiono = M fe-Rr] [ — # aoouming containo 

appropriate permiooions 

For n < — maw to law # (word 15 to 0 ) 

AM < Pormiaaiono [n] 

LT < fMdcoircd-^ — <-^4 s [n] ) # comparison io unoigned 

B^deoircd4ftj ^^-tftH- 

WB < ^AM — = RW^ V (-fAM — = — MGR^ A — v HAM — = — NMSR) A 

(DecEncountered v LT) ) 

DecEncountered < ( (AM « MCR) a LT) 

V — ( {!\M = NMSR) — A DecEncountered) 
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V — ( (AM = NM6R) — A EqEncountcrGd a LT) 

EqEncountcrGd < ( (AM = MSft^ 7^ BQ^ v ( (AM = NMSR) a 

BqEncountcrcd a EQ) 

If ( . WE) a {l^[n] ^ M ^ee^^^eerfttH- 

5 Output appropriate number of 0 # report failure 

Endlf 

EndFor 

# At thio pointy — Mdopigod io eorreot 
10 Output Rfc 

Output Mdcoircd #— Mdcairo d iO HOW Cffcctivcly N^ ^ew 

Sig < — [Rid 1 I Cj .'fM dooircd j # calculation muot taJce eonotant time 

MinTickDRcmaining — < — MinTicka 

Decrement IV^ -f^ # reduce the number of allowable oignatureo by 1 

1 5 Output Sig 

15.1.12 S i gnP 

Input: n,RE,Py B6tfe y ~ [1 byt e , 20 bytos, 1 byt e s] 

Output: — R fc. Sk»[R& I Rk fPdesire ^ " [20 bytos, 20 byt e s] 
Changes: Rfc 

20 Note: The SignP Gommand ie only impl e m e nt e d in ChipS, and not in oil QA Chipc. 

Th e S/gnP command i s u se d to produc e a valid sign e d P for use in a SotPormissions transact i on. 
Only an QA Ch i p programm e d w i th corr e ct valu e of Kk can r e spond corr e ctly to th e SignP requ e st. 
Th e output byt e str e am from th e S i gnP command can b e f e d as the input bytostroam to tho 
25 SotPormissions command on a different QA Ch i p. 

Tho input byt e str e am consists of th e smp opcod e fol l owed by 1 byto conta i ning th e key numb e r to 
us e for g e n e rat i ng tho signature, 20 byt e s of Re (r e pr e s e nt i ng th e numb e r obtain e d from ChipU's 
RND command, and f i na l ly tho dosirod P to write to ChipU. 

30 

Sinc e th e S i gnP funct i on g e nerat e s signatur e s, th e function must wa i t for th e M i nTickoRomaining 
r e g i st e r to r e ach 0 b e for e processing takes placo. 

Onc e a l l th e i nputs have bo o n verified, the p^esro u i s sign e d w i th an updat e d Rl (and tho poosod in 
35 R &), and both va l u e s arc output (th e random number and th e signaturo). Tho time takon to 
gonorate this s i gnatur e must bo tho same r e gardl e ss of the i nputs. 

Typically, th e SignP command will be acting as a form of consumabl e command, so that a g i von 
Ch i ps can on l y g e n e rat e a giv e n number of signatures. Tho actua l number can convoniont l y bo 
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stored in m (og word 0 of Mq) w i th R e adonly porm i ssions. Of courso another ch i p could porform 
on Author i ood writ e to updat e th e numb e r (using another ChipS) shou l d I t be des i red. 

Th e SIgnM command i s I mp le m e nt e d w i th th e follow i ng st e p s : 
5 Wait for MinTiclcoRcmaining to bocomo 0 

Loop — through — etii — &€ — Flaoh, — reading — each — word — (will — trigger 
Ghcclco) 

ACGGpt n 

10 Rootrict n to N 

Accept Rb 

ACGCpt P^ eej^ 

If (Mfa[0] ° 0) # fail if allowed oigo » 0 

Output appropriate number of 0 # report failure 

1 5 Bono 

Endlf 

Update Rfe 
Output Rfc 

20 Sig < — Sfe t [Rb I Rfe 'f-P^eej^e^|^a--3 # calculation muot take conotant time 

MinTickoRctnaining < — MinTicko 

Decrement M^ -f^j # reduce the number of allowable aignaturca by 1 

Output Sig 

25 15.1.13 Toot 

feput; n, Rg, Mg, S I Gs - [1 byt e > 20 byt e s, 64 bytes, 20 byt e s] 

Output: — Boolean (ox76-fallur e , 0x89 ~ succ e ss) 
Chang e s: R k 

30 The Tost command is us e d to auth e nticat e a r e ad of an m from a non trust e d QA Chip. 

The T e st command consists of th e TST command opcod e follow e d by I nput paramet e rs: n, Re, Mg y 
and sice. Th e byte ord e r i s le ast s i gn i ficant byt e to most signif i cant byt e for each command 
component. A l l but the first I nput parameter bytes are obtained as the output bytes from a Road 
35 command to a non trust e d QA Chip. Th e entire data does not have to be stor e d by th e c li ent. 
Instead, tho bytes can bo passed direct l y to the trusted QA Ch i p's Tost command, and on l y M 
should be kept from th e R e ad. 

Calls to T e st must wa i t for th e MinTiokoRomo i ning register to reach 0. 
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SKfl{Ri=tREiG:^jM £} -i G th e n oaiou l atod, and comparod aga i nst th e input signaturo siCe. If thoy are 
d i ff e r e nt, i s not changod, and 03c7C i o roturnod to I ndicato failuro. I f thoy aro tho samo, than Rt . 
i s updated to bo tho noxt random number in tho soquonco and OxOD is roturnod to i ndicat e 
succ e ss. Updat i ng Rk only aft e r succ e ss forces th e caller to us e a n e w random number (via th e 
5 Random command) oach tim e a succ e ssful authonticat i on is p e rform e d. 

Tho calculation of S K fttRb|R6|G 4 | M&] and the compar i son against siCe must take ident i cal t i m e so that 
the timo to ovaluato tho compariGon in th e TST function ic aiwaye tho eamo. Thus no attacker can 
compare execution t i mes or numb e r of bits processed before an output i s g i ven. 

10 

Th e T e st command is imp l emented with tho fo l low i ng st e ps: 
Wait for MinTickoRcmaining to become 0 

Loop — through — ail — e€ — Flaah^ reading — oach — word (will — trigger 

Ghcclco) 

15 

AcGopt n 
Reotrict n to N 

ACGGpt Rg 
AGGGpt Ms 

20 CIGfc — < ^KR-fe . I Rb I Cj, I Mfc^] # GalGulation muot talcG Gonotant timG 




Update Rfc 

Output 0x 8 9 # oucccoo 

25 EioG 

Output 0x76 # report failure 

Endlf 

MinTielcaRemaining < — MinTieko 
15.1.1^ Wr i te 

30 Input: trMw w, S I G& - [1 byt e , 6^ byt e s, 20 byt e s] 

Output: — Boo l ean (Ox7 ( 5~fa i luro, OxOQ ~ suoooss) 



Th e Writ e command is us e d to update M t accord i ng to th e p e rm i se i ons in P{. Tho WR command by 
itGolfiG not Gocuro, cinc e a clon e QA Chip may eimply return guccogg e v e ry tim e . Th e refor e a 
35 Writ e command shou l d b e fo l low e d by an auth e nt i cated road of m ( e .g. v i a a R e ad command) to 
e nsur e that th e chang e was actua ll y made. 

Th e Wr i t e command i s ca ll ed by passing the WR command opcode fo ll ow e d by which M to be 
updated, th e n e w data to bo written to m, and a d i gita l s i gnatur e of M. Th e data i s sent le ast 
sign i ficant byt e to most sign i f i cant byte. 
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Tho abil i ty to wr i te to a Gpoo i f i o 32 b i t word w i th i n Mt is govornod by tho corrosponding 
Porm i ssiono b i ts a s storod in P{. P\ can be sot using th e S e tPermlssions command. 
Tho fact that is Flash memory must be takon into account whon wr i t i ng tho now va l ue to M. I t is 
poss i ble for an attack e r to r e move pow e r at any tim e . I n addition, only the chang e s to m shou l d b e 
5 stor e d for max i mum ut ili zation. I n addit i on, tho longevity of M w i l l nood to bo takon into account. 
This may resu l t in th e l ocation of M b ei ng updat e d. 

Tho signature i s not koyod, since it must b e g e noratod by tho consumab l o user. 
The Wr i te command i s implomontod w i th tho fol l owing stops: 

Loop — through — aii — — Flaoh, reading — each — word (will — trigger 

10 Ghecko) 

Accept t 

Rcotrict t to T 

Acocpt Mb # new M 

Accept SIGb 

15 

= Generate CtlAl [Mg] 

If (CIGfc = SIGk ^ 

output 0x76 # — failure due to invalid oignature 

exit 

20 Endlf 

DccEneoiintcrcd < — 0- 
BqEncountorod < — 0^ 

For i < — mow to low # (word 15 to 0) 
^ — Pt-tif 

25 LT < (Mfe}[i] — <— M fe[i]) # comparioon io unaigned 

EQ-^ (MaCi] = M fe-H^ 

WE < tP o RWi V MSR^ A 1^ V Ki> « NMSR) ^ 

(DecEncountercd v LT) ) 

DcGEnGOuntcrcd < ( (P = MSR) a LT) 

30 V — ( (P NMSR) — A DccEnooTxntered) 

V — ( (P = NMSR) — A EqEneountcrcd a LT) 

BqEncountercd < ( (P « MSR) a EQ) v ( (P « NMSR) — a BqEncountcred 

A EQ) 

35 If ( .WE) A (M^Ci] ^ M fe-Hrj4- 

output 0x7 6 # — failure — d«e — fee — wanting — a change — fettfe — aefe 

allowed it 

Endlf 

BndFor 
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# — Afe — thia — pointy — ^ — (dcoircd) — is — corrcot — fee — fee — written — fee — fefee 
flaoh 

Mfe— < — Ms # update flaoh 

output 0x 8 9 # ouGceoo 

15.1.15 Wr i toAuth 

Input: n. Re, Mg, S I Gs - [1 byt e , 20 byt e s, 61 bytes, 20 byt e s] 

Output: — Boo le an (oxTg-^a i lur e , 0x 8 9 ~ suoo e ss) 



10 The Writ e Auth command is us e d to s e cur e ly replace the ontiro contonto of m (containing OA Ch i p 
appl i cation spocif i c data) according to th e P: ^ ^. Tho WritoAuth command on l y attempts to roplaco 
m i f th e n e w valu e i s signed combined w i th our l oca l R. 

I t i s only poss i b le to sign m e ssages by knowing K h. This can b e ach ie v e d by a ca l l to the S i gnM 
command (b e caus e on l y a ChlpS can know Kw). I t m e ans that without a ch i p that can b e us e d to 
15 produc e tho requ i red signatur e , a wr i te of any va l u e to m Is not poss i b le . 

Th e proc e ss i s v e ry sim i lar to Wr i t e , e xc e pt that if th e va li dation succeeds, th e M & Input param e t e r 
i s proc e ss e d aga i nst Mo using p e rm i ss i ons R pwt 
Th e Wr i toAuth command is i mplem e nt e d with tho fol l ow i ng st e ps: 
Wait — for MinTiclcaRcmQining to bcGomc — 0- 

20 Loop — through — aii — &€ — Flaoh, reading — each — word (will — trigger 

chccko) 

Accept n 
Reatriot n to N 
25 Accept Rfe } 

Accept Mb 

SIGjb — < — S|tR-fR b I I Cj, I N^] # calculation muot take conatant time 

AcGcpt BJCa 

If (GIGg = SIGfe -)- 

30 Update R fc 

DccEncountorGd < 9- 

EqEncountGrGd < 0- 

For i — ( — mow to low # (word 15 to 0) 

P-^^ — 

35 LT < ( ^ ' IB [ i ] — [i] ) # comparioon io unoigned 

EQ~< - M ^-Hb9^ 

WB < (-P = V (4^* = — MSR) A — in^ V H-P — = — NMCR) A 

(DGGEncountGrGd v LT) ) 

DecBncountcrcd < ( (r = MCR) — a LT) 
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V — ( (P = NMSR) — A DccEnGOuntcrcd) 

V — ( (P = NMSR) — A EqBncountcrcd a LT) 

BqBncountcrGd < = MSft^ a — EQi v (-4^^ = IJMSR) a 

EqEncountcrGd a EQ) 

If ( ( . WE) A (Mfc . [i] ^ M e Ci] ) ) 

output 0x76 — # — failure — d«e — fee — wanting — a — change — feufe^ — aefe 

allowed it 

Endlf 

BndFor 



10 # At thio pointy — Mb — (dcoired) — is — correct — to be written to the 

flaoh 

Me— < — Ms # update flaoh 

output 0x 8 9 # OUGGOOO 

Endlf 

1 5 MinTickaRGmaining < — MinTicka 
4€ Manufacture 

This chapt e r mak e s somo gonoral comments about th e manufactur e and Impl e mentat i on of 
authent i cation ch i ps. While the comments prosontod hero arc general, s ee [8 4 ] for a d e ta i l e d 
description of an i mp l ementation of an authent i cation ch i p. 
20 Th e auth e nticat i on chip algorithms do not constitute a strong oncryptlon dovice. Tho not effect is 
that th e y can b e saf e ly manufactured i n any country ( i nc l uding th e USA) and e xport e d to 
anywhere i n tho wor l d. 

Tho circuitry of th e auth e ntication ch i p must b e r e sistant to physica l attack. A summary of 
manufacturing imp l em e ntation gu i d eli nes i s pr e s e nt e d, fol l ow e d by sp e cif i cation of th e ch i p's 
25 phys i ca l d e f e ns e s (ord e r e d by attack). 

Note that manufactur i ng comments are in addition to any legal protection undertak e n, such as 
pat e nts, copyright, and l icens e agr ee ments (for examp l e, penalti e s i f caught r e vers e e ngin e ering 
tho authont i cat i on ch i p). 

Guidel i nes for Manufacturing 

30 Th e following are g e nera l guido ll nos for impl e m e ntation of an authont i cat i on chip i n terms of 

manufaoturo (seo [8 4 ] for a d e ta i l e d d e scr i pt i on of an auth e nticat i on ch i p). No spocial eocurity is 
required during tho m a nufacturing proc e ss. 

Standard proccas 

Minimum aisse — (if poooiblQ) 

35 Clock Filter 

Noioo GGncrator 

Tamper rrevention and Dotection circuitry 

rrotcGted memory with tamper dotoction 

-* Boot circuitry for loading program code 
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-■ Special — implementation of FETo for Iccy data pathG 

Data connoctiona in polyoilicon laycro where poooiblc 

OvcrUndcrPowcr Detection Unit 

No teat circuitry 

5 Tranoparent epoxy paclcaging 

Fina l ly, as a g e n e ral not e to manufacturers of Syst e ms, th e data li n e to the Syst e m auth e nticat i on 

chip and th e data l i no to tho Consumable authentication chip must not be the same l ino. Soo 

S e ct i on 16.2.3 on pago 1. 

16.1.1 Standard Process 

10 Tho authentication chip shou l d be i mp le m e nt e d with a standard manufacturing process (such as 
Flash). Th i s is n e c e ssary to: 

allow a groat range of manufacturing location optiono 

take advantage of well defined and well behaved technology 

reduce coat 

15 Noto that the standard proc e ss st il l a l lows physica l prot e ct i on mochan i sms. 

16.1.2 M i nimum s i z e 

The authentication ch i p must havo a low manufacturing cost i n order to bo i ncludod as tho 
auth e ntication m e chan i sm for l ow cost consumabl e s, i t i s th e roforo desirab l e to ke e p th e ch i p s i ze 
as low as r e asonably possibl e . 

20 Each auth e nt i cat i on chip r e quires 962 bits of non - vo l at ile memory. I n add i tion, the storag e 
roqu i rod for optimized HMAC SHA1 i s 102^ bits. Tho rema i nder of tho ch i p (state mach i ne, 
proc e ssor, CPU or what e v e r i s chos e n to imp le m e nt Protocol CI ) must bo kept to a min i mum i n 
ord e r that th e numb e r of trans i stors is minimized and thus the cost por chip is minim i z e d. Th e 
c i rcu i t ar e as that proc e ss th e s e cr e t k e y informat i on or cou l d rev e a l i nformat i on about the k e y 

25 should a l so bo min i m i z o d (soo Section 16.1 .8 on pago 1 for specia l data paths). 
4€^k3 Clock Fi l ter 

Tho authenticat i on ch i p c i rcu i try is des i gn e d to op e rat e w i thin a sp e c i fic clock spood rango. Since 
tho user d i rectly oupp li oo th e c l ock signal, it is poss i b le for an attacker to attempt to i ntroduce 
race cond i tions i n th e circuitry at sp e cific tim e s during proc e ss i ng. An e xampl e of th i s i s whore a 

30 h i gh c l ock spood (higher than tho c i rcuitry i s des i gned for) may prev e nt an XOR from working 
prop e rly, and of th e two i nputs, th e first may a l ways bo returned. Th e se styles of trans i ent fault 
attack s can bo very eff i c i ent at r e cov e r i ng secr e t key i nformat i on, and havo boon document e d i n 
[5] and [1], Tho lesson to b e le arn e d from th i s is that th e input c l ock signa l cannot bo trusted. 
Sinc e th e i nput dock s i gnal cannot b e trust e d, i t must be li mited to operate up to a maximum 

35 frequency. Th i s can bo ach ie v e d a number of ways. 

One way to filt e r the clock s i gnal i s to use an edge detect un i t passing tho edge on to a d el ay, 
wh i ch i n turn e nabl e s tho input c l ock signa l to pass through. 
F i gur e 3 4 8 shows clock signal flow w i thin th e C l ock F il t e r. 
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Tho do l oy should be s e t so that th e maximum c l ock speod i s a particu l ar froquoncy (o.g. about 4 

MHz). Noto that this d e lay is not programmab l e i t i s f i xed. 

The filtered clock signal wou l d b e furth e r d i v i ded interna l ly as r e quir e d. 

16.1. 4 Noiso G e nerator 

5 Each authenticat i on ch i p should conta i n a noiso generator that generates continuouo c i rcuit no i se. 
The noise wi ll i nterf e re w i th oth e r el ectromagnet i c e miss i ons from the ch i p's r e gular act i v i ties and 
add nois e to th e 1 ^ ^ signa l . P l ac e ment of th e no i se g e n e rator is not an i ssu e on an authent i cation 
ch i p du e to tho l ength of th e e mission wav e l e ngths, 

Tho noiso g e nerator i s used to generate electron i c nois e , multipl e state chang e s each c l ock oyo l o, 
10 and as a source of pseudo random b i ts for th e Tamper Prev e ntion and D e t e ct i on circuitry (s ee 
S e ction 16.1.5 on pag e 1). 

A simp le i mpl e m e ntat i on of a nois e gen e rator i s a 6 4 bit maximal p e r i od LFSR seeded with a non 
zero number. Tho clock used for the noise g e nerator shou l d be runn i ng at th e maximum clock 
rat e for th e ch i p in ord e r to g e n e rat e as much noise as possible. 

15 16.1.5 Tamper Prevention and Det e ct i on circuitry 

A set of circuits is r e quir e d to t e st for and pr e v e nt physical attacks on the auth e ntication chip. 
However what is actual l y d e t e cted as an attack may not bo an intentional phys i cal attack. I t i s 
therefor e important to d i stinguish between these two types of attacks in an authenticat i on ch i p: 
-* where you can b e c e rt a in th a t a physical a ttack has occurred. 

20 where you cannof be certa i n that a physica l attack has occurr e d. 

Tho two typos of detect i on d i ffer i n what i s performed as a result of the detect i on. I n the first cas e , 
wh e r e th e circuitry can b e c e rtain that a tru e phys i cal attack has occurr e d, e rasur e of F l ash 
m e mory k e y information is a sensib le action. I n th e s e cond cas e , wh e r e th e c i rcuitry cannot b e 
sur e if an attack has occurr e d, th e r e i s st ill c e rtain l y som e thing wrong. Act i on must b e tak e n, but 

25 th e action shou l d not b e th e e rasur e of s e cret k e y i nformat i on. A su i table act i on to take i n the 

second case is a chip RESET. I f what was detected was an attack that has perman e ntly damaged 
tho ch i p, tho same conditiono will occur next time and tho ch i p w i ll RESET again. I f, on tho other 
hand, what was d e t e ct e d was part of th e norma l operating e nvironment of th e chip, a RESET wi ll 
not harm the key. 

30 A good e xamp le of an e vent that circu i try cannot hav e knowl e dg e about, is a pow e r glitch. Th e 
gl i tch may b e an i nt e nt i ona l attack, att e mpting to rev e a l i nformat i on about th e k e y. It may, 
how e v e r, b e th e r e sult of a fau l ty conn e ct i on, or simp l y the start of a pow e r-down sequence. I t is 
therefore best to only RESET tho chip, and not erase tho key. If the ch i p was powering down, 
nothing i s l ost. I f th e Syst e m i s faulty, rep e at e d RESETS wi l l cause tho consumer to g e t th e 

35 System repa i red. I n both cases tho consumab l e i s st i l l intact. 

A good e xampl e of an ev e nt that c i rcuitry can have know l edg e about, is th e cutting of a data li n e 
w i th i n the ch i p. I f th i s attack i s somehow det e ct e d, it cou l d only be a resu l t of a faulty chip 
(manufactur i ng defect) or an attack. I n either cose, the erasure of tho secret i nformation is a 
sens i b l e stop to take. 
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Consequont l y oaoh authonticat i on ch i p shou l d hav e 2 Tamper Dotootion Linos ono for dof i n i to 
attacks, and on e for possible attacks. Conn e ct e d to th e s e Tampor Dotoot i on Linos wou l d bo a 
number of Tamper Dotoot i on tost units, e ach testing for d i fforont forms of tampering. In a ddition, 
wo want to ensur e that tfie Tamp e r D e tootion Linos and Circuits thomeoivoG cannot qIgo bo 
5 tamper e d witli. 

At on e end of the Tamp e r D e tection L i ne is a source of ps e udo random b i ts (c l ock i ng at high 
speed compared to the general operat i ng circuitry). Th e No i se G e nerator circuit doscribod above 
i s an adequate source. The g e nerated bits pass through two difforont paths — on e carri e s th e 
original data, and the other carr ie s the Inv e rs e of th e data. The w i res carrying these bits are in the 

10 layer above the genera l chip circuitry (for e xample, the memory, th e k e y manipu l at i on circuitry 
e tc.). Th e wires must a l so cover the random b i t g e nerator. Th e bits ar e r e comb i ned at a number 
of plac e s via an XOR gat e . I f the bits ar e diff e r e nt (they shou l d bo), a 1 is output, and used by the 
particular unit (for exampl e , e ach output bit from a m e mory read should b e ANDed w i th this bit 
va l u e ). Th e lines fina l ly com e together at th e F l ash memory Eras e circu i t, whoro a complete 

15 erasure i s triggered by a 0 from the XOR. Attach e d to the l ino is a numb e r of tr i gg e rs, e ach 

d e t e ct i ng a phys i ca l attack on the chip. Each trigger has an overs i ze nMOS transistor attached to 
GND. The Tamp e r D e t e ction Lino phys i cal l y go e s through th i s nMOS transistor, if th e test fails, 
th e trigg e r causes th e Tamp o r Det e ct L i n e to become 0. The XOR tost w ill therefore fa i l on e i ther 
this c l ock cyc l e or th e next ono (on av e rag e ), thus RESET i ng or eras i ng th e chip. 

20 Figure 349 i llustrat e s the bas i c pr i nc i pl e of a Tamper Detect i on Lino in terms of tests and the XOR 
connected to ei th e r the Eras e or RESET c i rcu i try. 

The Tampor D e t e ction L i no must go through the dra i n of an output transistor for each tost, as 
il lustrated by F i gure 360: 

I t i s not poss i ble to break the Tamp e r D e t e ct Lin e since th i s wou l d stop th e flow of 1s and Os from 
25 th e random source. The XOR tests wou l d therefor e fail. As th e Tamper Detect Lin e physically 
pass e s through each tost, i t i s not poss i bl e to e lim i nat e any part i cular t e st without br e ak i ng th e 
Tamp e r D e t e ct Lino. 

I t I s I mportant that th e XORs tak e va l ues from a var i ety of places a l ong the Tamper Detect Linos 
in order to reduce the chances of an attack. Figure 351 i llustrates the taking of mult i p l e XORs 

30 from th e Tamper Det e ct L i ne to be used in th e d i ff e r e nt part s of the chip. Each of these XORs can 
b e cons i d e r e d to bo g e n e rating a ChipOK bit that can b e used with i n each un i t or sub unit. 
A sampl e usage wou l d b e to have an OK bit in each un i t that i s AND e d with a given ChipOK b i t 
each cycle. Th e OK bit Is l oadod with 1 on a RESET. I f OK is 0, that un i t w il l fa il until the next 
RESET. I f the Tampor Detect Line is funct i on i ng correctly, th e ch i p wi ll e ither RESET or eras e al l 

35 k e y informat i on. If the RESET or erase circuitry has boon d e stroyed, th e n this un i t w i ll not 
funct i on, thus thwart i ng an attacker. 

Th e d e st i nat i on of the RESET and Erase l i ne and associated c i rcu i try is v e ry cont e xt sensit i ve. I t 
n ee ds to be protected in much the same way as the Ind i vidua l tampor tests. There is no point 
g e n e rating a RESET pu l se if the attacker can s i mp l y cut the w i re l ead i ng to th e RESET circuitry. 
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Tho actual implomontat i on will dopond very much on what io to bo cioarod at RESET, and how 
those itoms ar e cl e ar e d. 

F i nal l y, Figure 352 ohows how tho Tompor Linos covor tho no i so gonorator c i rcuitry of th e chip. 
Th e g e nerator and NOT gato ar e on on e le v el , wh i le tho Tamper Dotoot Linos run on a l ovol 
5 abov e th e generator. 

16.1.6 Prot e ct e d memory w i th tamp e r d e tection 

I t is not e nough to s i mply stor e s e cret information or program code in Flash memory. Tho F l ash 
m e mory and RAM must be prot e ct e d from an attack e r who wou l d attempt to mod i fy (or sot) a 
particu l ar bit of program cod o or k e y information. Tho mechanism used must conform to being 

10 us e d i n the Tampor Det e ct i on C i rcuitry (doscribed abovo). 

Th e first part of the solut i on is to e nsur e that th e Tamper Det e ction L i n e passes d i rect l y above 
each F l ash or RAM b i t. This e nsur e s that an attacker cannot probe tho contents of Flash or RAM. 
A breach of th e cov e ring wire is a br e ak in tho Tampor Dotoction L i no. Tho broach causes the 
Erase signal to bo sot, thus deleting any cont e nts of tho memory. Tho h i gh fr e quency no i so on tho 

15 Tampor D e t e ct i on Lin e a l so obscur e s passive obs e rvat i on. 

Th e s e cond part of tho so l ut i on for Flash is to use multi - level data storage, but on l y to use a 
subs e t of those multip le l e v el s for valid bit r e pr e s e ntations. Normally, wh e n multi -le v e l F l ash 
storage is usod, a sing l e float i ng gato holds moro than one bit. For example, a ^ - vo l tage stato 
trans i stor can ropros e nt two b i ts. Assuming a min i mum and max i mum voltage roprosonting 00 

20 and 1 1 rospect i voly, th e two midd l e voltages r e pres e nt 01 and 10. In th e authentication chip, wo 
can use tho two m i dd le voltages to ropros e nt a sing l e bit, and consider tho two extremes to bo 
i nva l id stat e s. If an attack e r attempts to forc e the stat e of a bit ono way or tho other by closing or 
cutting tho gate's circu i t, an I nvalid voltage (and hence invalid stato) results. 
The second part of the solut i on for RAM i s to us e a parity b i t. Th e data part of tho rogictor can bo 

25 ch e cked against tho parity bit (wh i ch w i l l not match after an attack). 

Th e bits coming from F l ash and RAM can th e refor e be va l idatod by a numb e r of test un i ts (ono 
por bit) conn e ct e d to tho common Tampor D e tection L i ne. The Tamper Dotoction circu i try wou l d 
be th e first circu i try tho data pass e s through (thus stopp i ng an attack e r from cutting the data 
li nos). 

30 Wh i lo tho mult i le v e l F l ash protection is enough for non socr o t i nformation, such as program codo, 
R, and MinT i cks, i t i s not suffici e nt for protecting K4 .-an4-K a. If an attacker adds e lectrons to a gat e 
(see Section 5.7.2.15 on page 1 ) representing a single b i t of and the ch i p boots up y e t do e sn't 
activat e th e Tamp e r D e t e ction Lino, the key b i t must hav e been a 0. If it does act i vate tho Tamper 
Detect i on Lino, i t must havo boon a 1 . For th i s r e ason, a ll other non - volati l e memory can act i vat e 

35 th e Tamper D e t e ct i on Lino, but K | . and must not Cons e quent l y Checksum is usod to chock for 
tamp e ring of and K^. A signature of tho expanded form of and Ka ( i .e. 320 bits i nstead of 
160 bits for each of K4 and K^) is produced, and th e result compared aga i nst tho Chocksum. Any 
non - match caus e s a clear of a l l koy i nformat i on. 

16.1.7 Boot circu i try for loading program cod e 

PEA23US 730 



Program cod e shou l d b e k e pt in mult i-le v e l Flash i nst e ad of ROM, since ROM is subj e ct to b e ing 
altorod In a non testable way. A boot m e chanism i s thorofore r e qu i red to l oad th e program cod e 
I nto F l ash memory (Flash memory is in an ind e t e rminat e state after manufacturo). 
Tho boot circu i try must not b e in ROM — a small stato machin e would suffico. Oth e rwis e th e boot 
5 code cou l d bo mod i fied in an undetectable way. 

The boot circuitry must e ras e a ll Flash m e mory, ch e ck to ensur e the erasure work e d, and th e n 
load the program cod e . F l ash m e mory must b e e ras e d b e for e loading tho program codo. 
Oth e rwise an attack e r cou l d put th e chip i nto th e boot stat e , and then l oad program code that 
s i mply extracted th e e xisting k e ys. Th e stat e mach i n e must also ch e c k t o e n s ur e that all Flash 
10 memory has b ee n cl e ar e d (to ensure that an attack e r has not cut th e Eras e li n e ) b e for e loading 
the new program cod e . 

Tho loading of program cod e must be undertaken by the secure Programm i ng Station b e for e 
secr e t i nformat i on (such as k e ys) can b e l oaded. This stop must bo undertaken as tho f i rst part of 
th e programm i ng process. 

15 16.1.8 Spec i a l imp le m e ntation of FETs for k e y data paths 

Tho normal s i tuation for FET i mplementat i on for the cas e of a CMOS Inv e rter (wh i ch i nvolvos a 
pMOS transistor combined w i th an nMOS transistor) as shown In F i guro 353: 
Dur i ng th e trans i tion, th e r e is a smal l p e r i od of time wh e r e both the nMOS transistor and th e 
pMOS transistor hav e an i nterm e diat e r e sistanc e . Th e r e sultant power ground short c i rcu i t causes 

20 a temporary incr e as e in the curr e nt, and i n fact accounts for th e major i ty of current consum e d by 
a CMOS device. A sma l l amount of i nfrared l ight is em i tted during th e short c i rcuit, and can be 
v ie w e d through th e silicon substrate (sil i con is transpar e nt to infrared light). A sma ll amount of 
light is a l so e m i tt e d during tho charging and d i scharg i ng of th e trans i stor gat e capacitanc e and 
transm i ssion li ne capacitance. 

25 For circuitry that man i pulates s e cr e t k e y information, such i nformat i on must b e k e pt h i dd e n. An 
alternative non flash i ng CMOS i mplomontation shou l d th e r e for e b e us e d for a ll data paths that 
manipu l ate tho koy or a part i a l ly ca l cu l ated va l ue that is bas e d on th e k e y. 

Th e us e of two non over l apping c l ocks ^ 1 and ^ 2 can prov i de a non f l ashing moohaniom. <|)1 I s 
connected to a s econd gat e of a ll nMOS transistors, and ^ 2 is conn e ct e d to a s e cond gate of a ll 
30 pMOS trans i stors. Th e trans i t i on can only take place i n combinat i on with th e clock. Sinc e ^ 1 and 
^ 2 are non overlapping, tho pMOS and nMOS transistors will not hav e a simu l tan e ous 
i ntermediate resistanc e . Th e s e tup i s shown i n F i guro 35 4 : 

F i na l ly, regu l ar CMOS i nverters can b e pos i tion e d near cr i t i ca l non - Flashing CMOS compon e nts. 
These i nv e rters should take the i r input signal from the Tamper Dotoction L i n e above. S i nce th e 
35 Tamper Dotoction Lino operates mult i ple tim e s fast e r than th e r e gular op e rat i ng circu i try, the net 
e ff e ct w ill b e a high rato of light bursts next to each non F l ashing CMOS compon e nt. S i nc e a 
br i ght l ight overwhelms observat i on of a nearby faint li ght, an observer wil l not bo ab l e to d e t e ct 
what switching op e rat i ons are occurr i ng in the chip proper. Thoso regu l ar CMOS inverters wi l l 
also e ffect i vely i ncreas e th e amount of c i rcuit nois e , reducing tho SNR and obscuring useful EM I . 
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Thoro aro a numbor of sido offocts due to tho uoo of non - F l ashing CMOS: 

The effective opcod of the chip io roducod by twice the rioc 

time of tho cloclc per clock cycle. Thio io not a problem for 
an authentication chip. 

5 -* The amount of current drawn by the non Flashing CMOS ±3 

reduced — (aince the short circuit o do not occur) . — However , 
thio io of foot by the uoe of regular CMOS invertero . 

Routing of the olocko increases chip area, — eopecially oince 

multiple vcraiono of <|)1 and ^ 2 ar e r e qu i red to cater for difforont le vels of 
10 propagat i on. Tho ostimat i on of chip aroo is doub l e that of a regu l ar implemontatlon. 

Doaign of the non Flaohing arcao of the authentication chip 

are olightly more complex than to do the oame with a with a 
reofular CMOS deoign. — In particular, — standard cell componenta 
cannot be used, — making these areao full custom. — Thio io not a 
15 problem for something as small as an authentication chip, 

particularly when the entire chip does not have to be 
protected in thio manner. 

16.1.9 — Conn e ctions i n po l ys il ioon l ayers where poss i b l e 

Wherever possib l e, tho oonnoot i ons a l ong wh i ch tho key or soorot data flows, should b e mad e i n 
20 th e polys i licon lay e rs. Whoro nocossary, thoy can b e i n m e ta l 1, but must n e v e r b e i n th e top 
meta l layor (conta i ning th e Tamp e r D e t e ct i on L i nes). 

16.1.10 — OvorUnderPow e r D e t e ction Unit 

Each Quthontication ch i p roquiros an QvorUhdorPowor Dotoct i on Unit to pr e v e nt Pow e r Supp l y 
Attacks. An OverUnd e rPow e r D e t e ct i on Un i t d e t e cts pow e r g l itches and tests th e pow e r le v el 

25 aga i nst a Vo l tago Ref e rence to e nsur e i t i s with i n a c e rta i n to l oranoo. Th e Un i t conta i ns a s i ng l e 
Vo l tago Roforonco and two comparators. Th e OverUnd e rPower Det e ction Un i t wou l d b e 
conn e ct e d into tho RESET Tamp e r D e t e ct i on L i n e , thus causing a RESET when tr i gg e r e d. 
A s i do offoct of tho OverUnd e rPower Detect i on Un i t i s that as the vo l tago drops dur i ng a pow e r - 
down, a RESET is tr i gg e r e d, thus e rasing any work r e g i sters. 

30 16,1.11 — No tost circuitry 

Tost hardware on an authontication chip cou l d very easily i ntroduc e vu l n e rab i l i t ie s. As a r e su l t, 
tho authentication ch i p should not conta i n any BIST or scan paths. 

Th e auth e nt i cat i on chip muGt thorofor e be t e stabl e with e xtornai tost voctore. This should be 
possiblo since tho authent i cation ch i p is not compl e x. 
35 16.1.12 — Transparent e poxy packag i ng 

Th e auth e nt i cation ch i p needs to be packag e d in transpar e nt e poxy so it can b e photo i maged by 
tho programming stat i on to prev e nt Trojan hors e attacks. Tho transparent packag i ng does not 
comprom i se the secur i ty of th e auth e nticat i on chip since an attackor can fa i rly e asi l y remove a 
chip from its packag i ng. For mor e i nformation see Section 16.2.20 on page 1 and [86]. 
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4^:2 Rcs i sTANCE To P h y s ical Attacks 

Whil e this chapt e r on l y d e scr i b e s manufacturo i n gonora l tormc (s i noo th i s documont doos not 
cov e r a sp e c i f i c i mpl e m e ntation of a Protoco l C1 auth e ntication chip), wo can stil l make some 
obs e rvations about such a chip's res i stanc e to physical attack. A description of the gonoral form 
5 of e ach physical attack can bo found i n Section 5.7.2 on pago 1 . 
16.2.1 R e ading ROM 

This attack doponds on th e koy b e ing stor e d i n on addr e ssable ROM. Sinc e e ach authont i cation 
ch i p stores i ts auth e nt i cation keys in internal F l ash memory and not i n on addrossab l o ROM, th i s 
attack Is irrelevant. 

10 16.2.2 R e verse onginooring th e chip 

R e v e rs e e ng i n e ering a chip i s only us e fu l whon th e s e cur i ty of auth e ntication lies i n the a l gorithm 
alono. Howev e r our authont i cat i on chips roiy on a s e cr e t koy, and not in th e s e crecy of tho 
a l gorithm. Our auth e nticat i on algor i thm i s, by contrast, pub l ic, and i n any case, on attacker of a 
high volume consumab l e i s assumed to hove b ee n ab le to obta i n deta i led p l ans of th e int e rna l s of 

15 th e chip. 

I n l ight of these factors, r e v e rs e enginoor i ng th e ch i p i tso l f, as opposed to th e stored data, poses 
no thr e at. 

16.2.3 Usurp i ng th e auth e ntication process 

Th e r e ar e severa l forms this attack can take, each with varying degrees of success. In al l cas e s, it 
20 is assumed that a clon e manufactur e r wi ll hav e acc e ss to both the Syst e m and tho consumablo 
d e s i gns. 

An attack e r may attempt to build a chip that tricks tho System i nto returning a va li d codo instead 
of generating an authentication code. This attack is not poss i b l e for two r e asons. Tho first reason 
i s that Syst e m authonticat i on ch i ps and Consumab le authenticat i on chips, a l though physica ll y 

25 i d e nt i ca l , ar e programm e d different l y. I n particu l ar, tho RD opcode and tho RND opcode are tho 
same, as are tho WR and TST opoodos. A Syst e m authent i cation Chip cannot p e rform a RD 
command sinc e e very call is intorprotod as a ca l l to RND instead. Tho second r e ason this attack 
would fail i s that separate seria l data lines are provided from tho System to the Syst e m and 
Consumabl e auth e nticat i on chips. Cons e qu e nt l y n ei ther chip can soo what i s being transmitted to 

30 or rece i ved from the oth e r. 

I f tho attacker bu i lds a clon e chip that i gnores WR commands (which d e crem e nt the consumabl e 
remain i ng). Protocol CI ensur e s that tho subsoquont RD wi ll detect that th e WR d i d not occur. 
Th e System w il l therefor e not go ah e ad w i th th e use of th e consumab le , thus thwarting th e 
attack e r. Th e samo is true i f an attack e r s i mu l ates loss of contact before authont i cation s i nce the 

35 authontication doos not take p l ace, tho us e of tho consumab le do e sn't occur. 

An attacker is therefore l i m i ted to modify i ng e ach Syst e m i n ord e r for clone consumab le s to be 
accepted (soo Section 16.2.4 on pago 1 for deta il s of rosistanco this attack). 

16.2.4 Modif i cat i on of system 

Th e s i mp le st m e thod of mod i f i cat i on is to replace the System's authent i cation chip w i th on e that 
40 simply reports success for each ca ll to TST. This can b e thwarted by System cal l ing TST severa l 
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t i mos for each auth e nticat i on, with tho f i rst fow timos prov i ding fals e va l ues, and expooting a fai l 
from TST. Tho f i nal ca ll to TST wou l d bo oxpoot o d to sucoood. The numb e r of falso ca l ls to TST 
could b e detorminod by somo part of tho r e turned result from RD or from th e system c l ock. 
Unfortunat el y an attack e r cou l d s i mp l y r e wir e Syst e m so that tho now Syst e m c l ono 
5 authent i cation chip can mon i tor the returnod resu l t from tho consumable ch i p or clock. Th e c l on e 
System authentication chip wou l d on l y r e turn succ e ss wh e n that mon i tor e d va l u e i s presented to 
i ts TST function. Clon e consumabl e s could then r e turn any va l ue as th e hash r e sult for RD, as the 
clone System ch i p would d e c l ar e that va l u e va li d. Th e re i s therefore no po i nt for tho System to 
call the System aut henticati on ch i p mu l tip le times, since a rewiring attack wil l on l y work for tho 

10 Syst e m that has b ee n r e wir e d, and not for a l l Systems. 

A s i m i lar form of attack on a System i s a r e p l acem e nt of th e System ROM. The ROM program 
codo can b e alt e red so that th e Auth e nt i cat i on never occurs. Th e r e Is nothing that can b e don e 
about this, since tho Sy s tem r e mains in th e hands of a consumer. Of course th i s would void any 
warranty, but th e consum e r may cons i d e r the o l toration worthwh i l e i f th e c l on e consumabl e w e r e 

15 extrem e ly ch e ap and more read i ly availab le than th e orig i nal i tem. 

Tho System/consumable manufacturer must ther e fore d e termine how liko l y an attack of this 
natur e is. Such a study must include givon the pricing structure of Systems and Consumabl e s, 
fr e qu e ncy of System s e rvic e , advantage to th e consum e r of hav i ng a phys i cal modification 
p e rform e d, and wh e r e consum e rs would go to g e t th e modification performed. 

20 Tho likolihood of phys i ca l alt e ration i ncr e as e s w i th th e p e rc ei v e d art i ficia li ty of th o consumabl e 

mark e t i ng sch e m e . I t i s on e thing for a consumab l e to bo protected against clono manufactur e rs. 
It i s qu i t e anoth e r for a consumabl e 's market to b e prot e ct e d by a form of oxclus i vo li censing 
arrang e m e nt that cr e at e s what i s vi e wed by consumers as art i fic i al markets, in tho form e r cas e , 
owners aro not so l i k e ly to go to th e troubl e of mod i fying the i r syst e m to a ll ow a clono 

25 manufacturer's goods. I n the l atter case, consum e rs ar e far mor e l ik e ly to modify the i r Syst e m. A 
case i n point i s DVD. Each DVD Is mark e d with a reg i on codo, and wi l l only play i n a DVD playor 
from that region. Thus a DVD from th e USA will not play in an Austra l ian play e r, and a DVD from 
Japan, Europe or Austral i a w ill not p l ay i n a USA DVD p l ay e r. Givon that certa i n DVD t i t l es ar e 
not avai l ab le in a ll r e g i ons, or b e caus e of quality diffor c ncos, pric i ng diff e r e nc e s or t i m i ng of 

30 r e l e ases, many oonsumors have had th ei r DVD p l ayers modified to accept DVDs from any reg i on. 
The mod i f i cation i s usual l y simp le (it oft e n invo l ves soldering a s i ng le wir e ), voids the own e r's 
warranty, and often costs th e own e r som e money. But th e i nteresting thing to not e i s that th e 
chang e I s not mad e so th e consum e r can us e c l on e consumables the consumer wi ll stil l only buy 
rea l consumab l es, but from d i fferent reg i ons. Th e mod i f i cation I s performed to romov e what i s 

35 v i ewed as an artificia l barrior placed on th e consum e r by th e movi e companies. I n th e sam e way. 
a System/Consumab l e sohomo that is view e d as unfair w i l l r e sult i n peop l e making modif i cat i ons 
to their Syst e ms. 

Th e li m i t cas e of mod i fy i ng a syst e m is for a clone manufacturer to prov i de a comp le te l y clon e 
System which takes c l ono consumab l es. This may be simple comp e tition or v i olat i on of pat e nts. 
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E i ther way, it i s b e yond tho scope of tho auth e ntication ch i p and doponds on th e techno l ogy or 
servic e b ei ng c l on e d. 

16.2.5 Dir e ct v ie wing of ch i p op e rat i on by conv e ntiona l prob i ng 

in order to viow tho chip operation, th e ch i p must b e operating. However, the Tamp e r Pr e v e nt i on 
5 and Detect i on circuitry covers thos e sections of th e chip that process or ho l d tho koy. it i s not 
poss i bl e to vi e w thos e sect i ons through th e Tamp e r Prevention l ines. 

An attackor cannot simply s li c o tho chip past the Tamper Prev e ntion l ayer, for this will break th e 
Tamper Det e ct i on L i n e s and cause an erasure of o i l keys at power up. S i mp l y destroying th e 
e rasure circuitry is not suffic i ent, sinc e the mu l tipio ChipOK bits (now a ll 0) feeding i nto mu l t i p le 
10 un i ts with i n th e authent i cation chip wi l l cause th e chip's r e gular operating circuitry to stop 
funct i on i ng. 

To sot up tho chip for on attack, then, requ i res th e attack e r to d e l e te the Tamp e r D e t e ction l ines, 
stop th e Erasur e of F l ash momory, and somehow r e wir e th e components that ro li od on tho 
ChipOK l in e s. Even i f al l th i s cou l d be done, th e act of s li c i ng th e chip to this le v el w ill most l ike l y 
15 d e stroy th e charg e patterns In th e non vo l at i le momory that ho l ds tho keys, mak i ng the process 
fru i tl e ss. 

16.2.6 D i rect viewing of the non volati le m e mory 

if the authenticat i on ch i p were sliced so that th e f l oating gates of the F l ash memory were 
e xposed, w i thout discharging them, then the keys could probably be v i ewed directly us i ng an STM 
20 or SKM. 

How e ver, sl i c i ng the ch i p to th i s le v e l without discharg i ng th e gates i s probably imposs i ble. Using 
wet etching, plasma etch i ng, ion mi l ling, or ch e m i ca l m e chanical pol i shing w i ll a l most c e rtainly 
discharge the small charg e s present on th e float i ng gat e s. This is truo of regular F l ash momory, 
but e v e n more so of mu l t i - l e v e l F l ash memory. 

25 16.2.7 — View i ng th e l i ght bursts causod by state changes 

A ll s e ct i ons of circu i try that man i pulate socr e t k e y information ar e imp l emented in th e non 
Flashing CMOS describ e d abov e . This prevents the e mission of the majority of light bursts- 
Regular CMOS i nv e rt e rs p l aced i n close prox i m i ty to the non - F l ashing CMOS wil l h i de any faint 
e m i ssions caused by capac i tor charge and discharg e . Th e Inv e rters ar e conn e ct e d to th e Tamp e r 

30 Detection c i rcu i try, so they change stat e many tim e s (at the high clock rate) for e ach non - Flashing 
CMOS stat e chang e . 

16.2.8 V i ew i ng the keys us i ng an SEPM 

An SEPM attack can b e simp l y thwart e d by add i ng a metal l ayer to cover tho circu i try. However 
an attack e r could etch a hol e i n the lay e r, so this i s not an appropriat e d e f e ns e . 

35 Th e Tamper D e tect i on c i rcu i try doscr i bod above wi l l shie l d the signa l as w ell as cause c i rcu i t 

nois e . Th e no i s e wi l l actua ll y be a greater signal than the one that th e attack e r i s look i ng for. I f th e 
attack e r att e mpts to e tch a hol e i n th e no i s e circuitry cov e r i ng the prot e cted ar e as, th e chip wil l 
not funct i on, and the SEPM will net be able to r e ad any data. 
An SEPM attack i s th e r e fore fruit l ess. 

40 16.2.9 Monitoring EMI 
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The NoisQ Gonorator doscr i bod abovo wil l oauoo circuit no i so. Tho nois e w ill int e rf e re with oth e r 
olootromagnotic omissions from tho chip's regu l ar aot i v i t i os and thus obscur e any moQn I ngfu l 
read i ng of I nt e rna l data tran s f e rs. 

16.2.10 — Viewing 1 ^^ fluctuations 

5 Th e so l ution aga i nst th i s k i nd of attack is to d e creas e th e SNR i n tho 1^ s i gna l . Th i s is 

accomp l ishod by increas i ng tho amount of circu i t nois e and d e cr e as i ng th e amount of s i gna l . 
Th e No i so Gen e rator circuit (which a l so acts as a d e fonso against EM I attacks) wi ll also cause 
e nough state chang e s e ach cyc l e to obscur e any m e aningful informat i on in tho 1^ ^ s i gnal. 
I n addit i on, th e sp e cial Non Flashing CMOS imp l em e ntat i on of tho key - carrying data paths of tho 
10 ch i p prevents current from flowing wh e n stat e changes occur. Th i s has tho benef i t of reducing tho 
amount of s i gnal. 

16.2.11 — D i fferential fau l t analys i s 

Diff e r e nt i al fault bit e rrors ar e introduced i n a non targ e t e d fash i on by ion i zat i on, m i crowave 
rad i at i on, and env i ronmenta l stress. The most li ke l y effect of an attack of th i s nature I s a chang e 

15 in F l ash m e mory (causing an inva l id state) or RAM (bad par i ty). I nvalid stat e s and bad par i ty are 
detected by the Tamper Detection Circuitry, and caus e an erasure of th e key. 
S i nc e tho Tamp e r D e tection Lines cov e r th e k e y manipu l ation c i rcuitry, any error i ntroduc e d i n th e 
k e y man i pulat i on c i rcu i try w i l l be mirror e d by an error in a Tamp e r D e t e ct i on L i n e . If th e Tamp e r 
D e t e ction Lin e is affect e d, tho chip wil l e i ther cont i nua l ly RESET or simply e rase the k e y upon a 

20 power up, r e nd e ring th e a ttack fru i tless. 

Rather than re l y i ng on a non - targeted attack and hop i ng that "just tho right part of the ch i p is 
affected in just tho right way", an attacker is better off try i ng to I ntroduce a targeted fault (such as 
overwr i t e attacks, gate destruct i on e tc.). For informat i on on th ese targ e t e d fau l t attacks, s ee th e 
relevant sect i ons below. 

25 1 6.2. 1 2 Clock glitch attacks 

The Clock F i lt e r (d e scr i b e d above) eliminates the poss i bility of c l ock g li tch attacks. 
16.2.13 — Pow e r supply attacks 

The QvorUnd e rPow e r D e t e ction Un i t (described abov e ) e li m i nat e s tho poss i bility of power supply 

attacks. 

30 16.2.1 ' 1 — Ov e rwrit i ng ROM 

Auth e nticat i on ch i ps stor e program code, keys and s e cret information in Flash memory, and not i n 
ROM. Th i s attack is th e r e fore not poss i b l e. 
16.2.15 Mod i fy i ng EEPROM/F l ash 

Auth e ntication ch i ps store program cod e , k e ys and secret i nformation in mu l t i level F l ash 
35 m e mory. Howev e r the Flash m e mory i s cover e d by two Tamp e r Prev e nt i on and Detection L i n e s. 
If e ith e r of these l inos is broken (in the process of destroy i ng a gate via a laser cutter) the attack 
wil l b e d e t e ct e d on pow e r up, and tho chip will either RESET (cont i nua ll y) or eras e th e keys from 
F l ash memory. This proc e ss is described i n Section 16.1.6 on page 1. 

Even if an attacker is ab le to som e how acc e ss th e bits of F l ash and destroy or short out the gat e 
40 ho l ding a particular bit, th i s w i ll forc e the b i t to hav e no charge or a ful l charge. These are both 

PEA23US 736 



inva l id otatos for th e authont i cat i on chip's usago of th e mu l t i l ovol F l ash momory (only th e two 
middio Gtatos aro va l id). Wh e n that data valuo i s transf e rr e d from F l ash, dotoction o i rouitry w i l l 
causo the Erasure Tampor D e t e ction L i n e to bo triggered thereby eras i ng tho roma i ndor of Flash 
momory and RESET i ng tho chip. Th i s I s tru e for program codo, and non - socrot informat i on. As 
5 koy data i s road from mu l t i-le vo l flash momory, it i s not i mediatoly check e d for va l idity (oth e rwise 
informat i on about th e koy is given away). I nstead, a specific key va l idat i on mechanism is us e d to 
protect tho socrot key information. 

An attacker could thoorotico ll y etch off the upp e r l e v el s of the chip, and depos i t enough o l octrons 
to chang e tho state of tho mu l ti l ovo l F l ash memory by 1/3. I f the beam is h i gh enough e n e rgy i t 

10 m i ght b e poss i b le to focus tho o l ootron b e am through tho Tamper Provontion and Dotoction Linos. 
As a r e su l t, tho authentication ch i p must perform a val i dation of tho keys b e fore rep l y i ng to th e 
Random, T e st or Random commands. Th e SHA 1 algorithm must b e run on tho koys, and th e 
resu l ts compared against an i nterna l ch e cksum va l uo. Th i s givoo an attackor a 1 i n chanc e of 
tricking th e chip, which is th e same chanc e as guess i ng ei th e r of th e k e ys. 

15 A Modify EEPROM/F l ash attack is th e r e fore fruitless. 

16.2.16 — Goto dostruotion attacks 

Gate D e struction Attacks roly on tho abi l ity of an attack e r to modify a singl e gat e to causo tho chip 
to rovoal informat i on dur i ng operat i on. Howovor any circuitry that manipulat e s s e cr e t i nformation 
i s cover e d by on e of tho two Tamp e r Provont i on and Det e ction lines. I f eith e r of thos e l in e s is 
20 broken ( I n th e process of destroy i ng a gat e ) th e attack wi l l b e d e t e cted on power up, and tho ch i p 
wi ll e ith e r RESET (cont i nually) or e ras e th e koys from F l ash momory. 

To launch this kind of attack, an attackor must f i rst rovorso onginoor tho chip to determine which 
gato(s) should bo targeted. Onoo tho l ocation of th e target gates has be e n determ i n e d, the 
attack e r must break the cov e r i ng Tamp e r D e t e ction l i ne, stop tho Erasur e of F l ash momory, and 
25 somehow row i ro tho components that roly on th e Ch i pOK lin e s. Rowir i ng tho c i rcu i try cannot b e 
done without slicing the ch i p, and even if It cou l d bo done, tho act of s l icing tho ch i p to this l ev e l 
w i l l most l i kely destroy th e charge patterns i n tho non volati l e momory that holds th e koys, mak i ng 
th e proc e ss fru i tless. 

16.2.17 — Ovorwrito attack 

30 An ov e rwr i t e attack re l ies on be i ng abl e to s e t i ndividua l b i ts of tho koy without know i ng th e 

previous va l uo. I t rel i es on probing the chip, as i n tho conv e nt i ona l probing attack and destroy i ng 
gates as in tho gate destruction attack. Both of thoso attacks (as expla i ned i n the i r rospoct i v e 
sect i ons), w ill not succood due to th e use of the Tampor Pr e vent i on and Dotoct i on C i rcu i try and 
Ch i pOK l i n e s. 

35 However, oven if the attack e r is abl e to somehow access the bits of F l ash and d e stroy or short out 
the gat e ho l d i ng a part i cu l ar b i t, this w il l force tho bit to have no ohargo or a full charge. Thoso are 
both Invalid states for the authentication chip's usago of the multi l ovol F l ash momory (only th e 
two middl e states ar e va l id). Wh e n that data valuo is transf e rr e d from F l ash dotoction circu i try wi l l 
causo th e Erasur e Tampor D e t e ction L i ne to b e trigg e red — thereby eras i ng th e remainder of Flash 
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momory and RESET i ng tho ch i p. I n the same way, a par i ty chock on tamp e r e d va l ues read from 
RAM w ill cause the Erasur e Tamp e r D e tection L i ne to bo tr i ggorod. 
An ov e rwr i t e attack is th e r e for e fru i tl e ss. 



5 16.2.18 — M e mory remanenco attack 

Any working r e g i st e rs or RAM with i n the authent i cation chip may be ho l d i ng part of tho 
authontication koys wh e n power is r e mov e d. Tho working r e g i st e rs and RAM wou l d continu e to 
hold th e information for som e time after tho removal of pow e r. If th e chip w e re sl i cod so that th o 
gat e s of the r e g i st e rs/RAM wer e e xpos e d, without d i scharg i ng th e m, th e n the data cou l d probably 
10 bo viewed directly using an STM. 

Th e first defens e can bo found abov e , i n th e d e scr i pt i on of def e nse aga i nst power glitch attacks. 
Wh e n pow e r i s r e mov e d, a ll r e gisters and RAM ar e cl e ar e d, just as th e RESET cond i t i on causes 
a c l earing of memory. 

15 

Tho chancoG th e n, ar e l e ss for this attack to sucoeod than for a r e ad i ng of th e F l ash m e mory. 
RAM charg e s (by nature) aro mor e e asily lost than Flash momory. Tho sl i cing of th e chip to r e v e a l 
th e RAM w i l l c e rta i nly caus e th e charg e s to b e l ost ( i f th e y hav e n't b ee n lost simp l y duo to the 
m e mory not b e ing r e fresh e d and th e time tak e n to perform th e sl i c i ng). 

20 

This attack is th e refore fru i tless. 



PEA23US 



738 



16.2.10 Chip thoft attack 

Thoro ar e distinct phases in tho lifet i m e of an auth e nt i cat i on ch i p. Ch i ps can b e stol e n when at 
any of th e oo otagos: 

After manuf acturc ^ but boforc programming of key 

5 After programming of koy^ — but before programming of state 

data 

After programming of atate data, but before inoertion into 

the conaumable or oyotem 
After inoertion into the system or conoumabl -e 

10 A th e ft i n botwoen th e chip manufactur e r and programm i ng station would on l y prov i d e th e clone 
manufactur e r w i th b l ank chips. This m e r el y compromises the sa l o of auth e ntication chips, not 
anything authont i catod by th e authenticat i on ch i ps. Sinc e th e programming station is the only 
mechanism with consumabio and system product keys, a c l one manufaoturor would not bo ablo 
to program th e ch i ps w i th th e corr e ct k e y. C l on e manufactur e rs wou l d b e ab le to program the 

15 b l ank chips for the i r own Syst e ms and Consumab le s, but it wou l d b e difficu l t to plac e th e s e 
it e ms on the mark e t without detection. 

The second form of th e ft can only happen in a situation wh e r e on authent i cation ch i p pass e s 
through two or mor e d i stinct programm i ng phas e s. Th i s i s possibl e , but un l ike l y. In any case, the 
worst s i tuation i s where no state data has boon programmed, so a l l of M is read/writo. If this 
20 w e r e th e cas e , an attack e r could att e mpt to launch an adapt i ve chos e n t e xt attack on tho chip. 
Tho HMAC SHA1 a l gorithm i s resistant to such attacks. For moro information see Sect i on 1^.7 
on pag e 1 . 

The th i rd form of theft would have to take place in between tho programm i ng stat i on and tho 
i nstallation factory. Th e auth e nticat i on ch i ps would alr e ady bo programmed for use in a particular 

25 system or for us e i n a particu l ar consumabl e . Th e on l y us e thes e ch i ps hav e to a th ie f i s to p l ac e 
th e m i nto a clone Syst e m or clone Consumab l e. Clone syst e ms ar e i rr e levant a c l on e d Syst e m 
would not ev e n requ i re an authentication chip. For clon e Consumab le s, such a th e ft wou l d li mit 
th e numb e r of c l oned products to tho numb e r of chips sto l on. A s i ng l e thoft should not croato a 
supp l y constant e nough to prov i de clone manufacturers with a cost offootivo business. 

30 The fina l form of thoft i s where th e System or Consumabl e its el f i s stol e n. Wh e n th e th e ft occurs 
at the manufactur e r, physical security protoco l s must be enhanced. I f tho thoft occurs anywhere 
else, i t i s a matter of concern on l y for tho owner of tho i tem and tho po l ice or i nsuranco company. 
Tho secur i ty mechanisms that th e auth e nticat i on chip uses assum e that th e consum a b le s and 
syst e ms ar e in tho hands of th e public. Consequently, having them sto l on makes no d i fference to 

35 the security of tho keys. 

1 6.2.20 Trojan horse attack 

A Trojan horso attack invo l ves an attacker ins e rt i ng a fako authent i cation ch i p into tho 
programm i ng station and r e tri e v i ng th e same chip aft e r i t has b e en programm e d with th e s e cr e t 
40 k e y i nformat i on. Tho d i fficu l ty of thoso two tasks doponds on both l og i ca l and phys i cal s e curity, 
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but i s an expens i v e attack tho attackor has to manufaoturo a false authont i cat i on chip, and i t wil l 
on l y be usefu l whoro the effort i s worth th e ga i n. For e xample, obtain i ng the secrot koy for a 
spec i f i c car's auth e nt i cat i on ch i p is most l ikely not worth an attack e r's e fforts, wh i l e th e k e y for a 
pr i nt e r's i nk cartridg e may b e v e ry valuabl e . 
5 Tho prob l em ar i ses if tho programming station I s unab l e to te l l a Trojan horso auth e nt i cat i on ch i p 
from a r e a l on e - which is th e prob le m of auth e nt i cating tho auth e nticat i on ch i p. 
Ono solution to th e auth e ntication problem is for tho manufactur e r to have a programming station 
attached to th e e nd of th e product i on li n e . Ch i ps passing th e manufactur e QA tests arc 
programm e d w i th th e manufactur e r's secrot koy informat i on. Th e chip can thoroforo bo vorlfi e d by 

10 th e C1 auth e nt i cation protocol, and g i ve i nformat i on such as the exp e ct e d batch numb e r, serial 
number etc. Tho i nformat i on can bo vorlfied and recorded, and th e valid chip can th e n b e 
roprogrammod w i th tho System or Consumoblo koy and state data. An attackor wou l d hav e to 
substitute an authont i cation ch i p w i th a Trojan hors e programm e d with the manufactur e r's s e cr e t 
k e y i nformat i on and copi e d batch number data from th e r e moved auth e nt i cat i on ch i p. This Is only 

15 possib l e if tho manufacturer's secret key Is compromis e d (th e k e y i s chang e d r e gularly and not 
known by a human) or i f tho phys i ca l security at th e manufacturing plant is comprom i sed at the 
e nd of th e manufactur i ng cha i n. 

Ev e n i f th e so l ution d e scr i bed wer e to b e und e rtaken, the possib ili ty of a Trojan horso attack does 
not go away — I t m e r e ly I s removed to the manufacturer's physical location. A b e tter solution 

20 r e qu i r e s no physica l s e cur i ty at th e manufacturing l ocation. 

Tho proforrod solution th e n, is to us e transpar e nt e poxy on th e chip's packag i ng and to image tho 
chip boforo programming i t. Once the ch i p has been mounted for programming it is I n a known 
f i x e d ori e ntat i on. I t can th e refor e be h i gh r e so l ut i on photo I maged and X - ray e d from mu l t i pl e 
d i r e ctions, and th e i mag e s compar e d against "s i gnatur e " images. Any ch i p not matching the 

25 image s i gnature is tr e at e d as a Trojan hors e and r e j e ct e d. 

A REFILL OF I NK I N PRINTERS Pr i nter based rof ill device 

— Functional Purpose 
Tho functional purpose of th e pr i nter based r e fi ll d e vic e is as fo l lows: 

30 ^ To rofill inlc into printers by physically connocting the refill dovicc to the printer. 

To e naur e that th e correct ink is us e d for the correct op e ration of tho printer (i.e. will not 

damag e th e printhead). 

To e nsure acourato measure of ink is transf e rred from the refilling device to tho printer 

during r e fills. 

35 Th e r e fill device is controlled by tho printer. Apart from the QA Chip^ tho refi ll dev i ce has no 

oth e r proc e ss i ng power. 



Gonora l Not e : Througout th i s document, If socuro refi ll ing i s required then a physica l QA Chip or any other 
virtua l dov i cc performing tho QA Ch i p protooc i can bo used. Refer to [1]. 
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AS Bas i c Components of t h e ref i ll dcv i ce 

Figur e 355 shows th e compon e nts of th e pr i nt e r based ref il l dovioo. 
Th e pr i nt e r based refi ll d e v i c e w ill consist of fol l ow i ng oompononts: 

An ink r e s e rvoir - which stores the ink. Each r e fill d@\dc e will allow inlc reGervoirs of 

5 various capaciti e s. Wh e n the ink r e servoir empti e s out, it is replac e d by another reservoir 

containing mor e inlc of th e sam e type or diff e r e nt typ e or r e fill e d (for exampl e through a 
refill station as doocribod in Section 2 and Section 3). 

An ink output d e vic e which disp e ns e s ink to th e print e r b e ing refilled when physically 

connected to the printer. 

10 A QA Chip and associated circuitry - which stor e s th e amount of ink in the reservoir along 

with th e attribut e s of the ink in a digital format. 
The electrical conn e ctions to th e QA Chip. 

NB — No additional microproc e ssors ar e r e quir e d to b e present in the refill d e vic e . H e nc e 

the refill device uses the processing pow e r of th e print e r to ov e rs e e the refilling proc e ss. 

15 An ink transf e r m e chanism (optional) which controls the flow ink from th e r e fill d e vice to 

th e print e r and is controll e d by the printer. Therefor e th e control conn e ctions for the ink 
transf e r m e chanism will b e conn e ct e d to th e print e r. 

-* Alternatively, the ink transf e r m e chanism could b e in th e printer. Refer to S e ction 1 .3. 

4t3 Pr i nter descript i on and functions 

20 Printers which wi ll bo rof ill od by thoso refil l ing dovioos must havo the fo ll ow i ng compon e nts: 

Microprocessor assembly which will control the refill procedure as described Section 1. 4 . 

Th e microproc e ssor assembly will acc e ss the QA Chip and ink transf e r m e chanism of the 
refill device. 

A Q A Chip storing th e ink amount r e maining in the print e r. 

25 -* An optional ink transfer m e chanism to control th e flow of inlc from the refill d e vice to the 

print e r. This inlc transf e r mechanism must bo present in th e print e r if th e r e fill d e vic e 
doesn't have one of its own. 

4t4 Operat i onal procedure 

The operat i ona l procedur e can b e d i vid e d into two parts: 

30 R e filling printers using the r e fill devic e . 

R e filling of th e inlc reservoir in th e r e fill d e vic e . Se e S e ction 2 and Section 3. 

A-AA R e fi ll ing of pr i nters 

F i gur e 356 shows a pr i nt e r be i ng r e fi lle d by a pr i nt e r bas e d r e fi ll dovioo. Th e ink transf e r 
m e chan i sm is l ocated in the print e r in th i s case. The i nk transfer mechanism could bo also located 
35 in th e r e fill d e vic e as d e soribod i n S e ction 1 .2. 

Th e fol l owing i s a doscr i ptlon for rof illi ng of pr i nt e rs us i ng th e pr i nt e r bas e d refill dov i oo: 
Inlc output device from the rofilling device is connected to th e print e r. 
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Th e QA Chip eloctrical conn e ction io connected to tho printer. 

-• Tho refill option is s e l e ct e d on th e us e r intorfacc of th e printer. The microproc e ssor 

assembly in the printer will th e n do th e following: 

ah Road ink attributoo (for example ink type, ink ohaniotcrisrios, ink colour, ink monufaoturer cto) stored in the QA 

5 Chip of tfao ink rosorvoir unit. Ref e r to[ 1]. 

b: — Compare th e ink attribut es as required by tho printer for oorr e ot operation. Thig may r e quire reading of data from th e QA Chip in 
th e print e r. 

Bi — Only if St e p b is suco e ssfiil, then do tho following: 

i . D e t e rm i n e the amount of i nk to b e transfGrrod by any or o il of tho fo ll owing means, ensuring 
10 that th e reservo i r has e nough i nk for th e transfer: 

-* Fixed amount (e.g. based on a pre programmed valu e or printer model). 

-■ Us e r - s e l e ctabl e amount. 

i i. D e cr e m e nt tho amount of ink transforrod from tho QA Chip in the r e fil l station and i ncr e ment 
th e QA Ch i p i n tho pr i nter (which stores tho amount of i nk i n tho printer) with corresponding ink 

15 amount. 

ill. Command tho ink transfer mechanism to r e l e as e tho i nk to tho printer through tho output 
dovioo. 

2 Home use refil l station 

2r1 Funct i onal Purpo s e 

20 Th e funct i onal purpos e of th e commercial r e fil l station is as fo l lows: 

To refill ink into ink cartridg e s at hom e or in a small office. 

Single ink cartridgo io filled at a timo r 

To ensure that th e correct ink pr e s e nt in the refill station is transf e rr e d to the correct ink 

cartridgo. 

25 To e nsur e accumte m e asur e of ink is transferr e d fi-om th e r e filling station to the ink 

cartridge during refills. 

Th e r e filling station provid e s th e processing power required to perform refills of ink 

cartridg e s. 

2t2 Ba si c Component s 

30 F i gure 357 shows th e components of a hom e r e fi l l stat i on. 

A hom e r e fi l l station w ill cons i st of one of th e fo ll ow i ng i nk r e fi ll un i ts: 

A singl e r e s e rvoir ink r e fill unit suitable for black ink (or any other single colour). 

-■ A multi reservoir ink refill imit suitable for coloured ink for example CMY (Cyan, 

Mag e nta, Yellow). 

35 StStI I nk reservo i r unit 

Figur e 358 shows tho compononts of a throe i nk rosorvoir unit. 
Tho ink rosorvo i r unit will cons i st of tho fo l low i ng: 

Multiple ink roserv^oiro or a single ink res e rvoir which stores inlc. Each refill station will 

allow ink rcson f ^oirs of various capacities. When th e ink rosorvoir e mpti e s out, it is replaced 
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by anoth e r r e s e rvoir containing more ink of th e sam e or diff e ront typ e or r e filled (for 
e xampl e through a r e fill station as d e scrib e d in S e ction 3). 

A QA Chip and associat e d circuitry in e ach of th e inlc reservoirs — which stor e s th e amount 

ef4 nk in th e r e s e rvoir along with th e attributes of th e inlc - 

5 Th e e l e ctrical coimections to e ach of the QA Chips. 

2t2t2 I nk transf e r unit 

Th e i nk r e s e rvoir unit w i ll consist of th e following: 
Ink output d e vic e from e ach ink roserv^oir. 

The output ink transfer mechanism controls the flow ink from the inlc refill unit to the ink 

10 cartridg e and is controlled by the microprocessor assembly, 

Final ink output d e vic e s to the cartridg e int e rface assembly 

2^2^ Cartr i dgo int e rfaco unit 

Th i s unit will provide th e phys i cal intorfaoo to tho ink cartridges. Each ink cartridge intorfaoo unit 
w ill hold a s i ng l e or multipl e cartridges of part i cu l ar phys i cal dim e ns i on. 
15 Th e cartridg e i nt e rfaco un i t can r e mov e d from tho ink r e fill un i t and roplacod with another I nterfaco 
un i t to cator for other phys i cally d i ff e r e nt cartr i dges. 
2^274 Microproc e ssor ass e mb l y 

The controls connoctions for th e I nk transfer mechan i sm and tho o l ectr i ca l connections of th e QA 
Chip ar e conn e ct e d to tho microprocessor ass e mbly. Th e m i croproc e ssor assembly ov e rsoos and 
20 controls tho rof ill procoss. 

Th e microproc e ssor ass e mbly wi l l communlcat o with a us e r interfac e to accept commands and 
provid e responses for various r e fi ll op e rations. 
3t3 I nk cartridge DEScn i PTiON 

ink cartr i dges wh i ch w ill b e refi ll ed I n a hom e r e fil l station must have a QA Chip storing the 
25 fo ll ow i ng components: 
Inlc amount romain iag? 

Ink attributes (for example — ink typo, ink charact e ristics, ink colour, ink manufacturer). 

2zA Operat i onal procedure 

Tho oporat i onal procedure can be div i ded into two parts: 

30 R e filling of inlc cortridgoa using tho homo rofill station. 

R e filling the ink res e rvoirs used in the refill station is discussod in S e otion 3. 

2t€ Ref i lling of i nk cartridges us i ng the h ome ncr i LL stat i on 

Figur e 359 shows tho rofi l l of ink cartr i dges in a homo rof ill stat i on. 

Th e fol l ow i ng i s a doscr i pt i on for refil li ng of i nk cartridg e s I n the homo r e fi ll stat i on: 

35 -* Load the inlc cartridge into the cartridge interface unit of the ink r e fill unit» This will 

conn e ct tho QA Chip of tho inlc cartridge to th e microproc e ssor aosombly. It will also 
conn e ct the ink output do\ico of tho ink refill unit to the ink oartri dger 
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The mod e l numb e r of th e irJc cartridge is read from tho QA Chip by the microprocoQSor 

assembly controlling th e inlc refill imita, 
Th e microprocessor assembly will d e t e rmine wh e ther tho ink r e fill unit is suitabl e for th e 

inlc cartridg e mod e l. 

5 -* Th e r e fill option is seloctcd on tho microprocessor ass e mbly through th e user int e rface. The 

microprocessor assembly will th e n do th e following: 

Sfc Read inlc attributOG (for oxamplo inlc typo, ink charactcristios, ink colour, ink manufacturer oto) storod in tho QA Chip of tho 

ink ctutridgo. Roforto[l]. 

b: — Compare tho read inlc attributes to tho ink attribut e list in th e r e fill station.This may also r e quire r e ading of th e ink attributes storod 
1 0 in the QA Chip of the inlc rcsorvoirs in tho refill unit. 

G: — Only if St e p b is suooessfuU then do tho following: 

i . Determ i n e th e amount of i nk to b e transf e rr e d by any or al l of th e fol l ow i ng m e ans, ensuring 
that th e r e s e rvoir has e nough i nk for th e transf e r: 

Fixed amount (e.g. based on a pre programmod value ,cartridgo model or reservoir typo). 

15 Us e r s e l e ctabl e amoimt. 

i i. Chock tho Ink rosorvoir in tho i nk refi l l unit has adoquato amount of i nk to rofil l tho i nk 
cartridg e 

i ll. D e crom o nt tho amount of ink transferr e d from th e QA Chip in th e i nk r e f i l l un i t and 
increment the QA Chip i n th e ink c a rtridg e with corr e spond i ng ink amount. 
20 iv. I f I ncr e ment i ng of th e QA Ch i p with ink amount is succ e ssful th e n a command Is sont to th e 

ink transfer mochanism to r ele ase th e i nk to the i nk cartridge through th e output d e v i c e . 

3 Comm e rcial r e fil l stat i on 

3r1 Funct i onal Purpo s e 

The functiona l purpose of tho comm e rc i a l r e fi ll station is as fo l lows: 

25 To refill ink into ink cartridges that ore token to th e r e fill station for refilling. 

Multiple ink cartridges of diff e r e nt mod e ls can b e r e filled. 

To ensure that tho correct ink pr e s e nt in th e refill station is tmnsforred to the ink cartridge. 

To ensxu-e accurate m e asur e of ink is transferred from the refilling station to the ink 

cartridge during r e fills. 

30 Tho refilling station provid e s all proc e ssing pow e r r e quir e d to perform r e fills of ink 

cartridges. 

Ba si c Component s of the ref i ll s tat i on 

Figure 360 shows tho components of a comm e rcial rofil l station. 
A comm e rcia l ref ill stat i on w i l l cons i st of mu l tipl e i nk rof ill units contro l l e d by a sing le 
35 microprocossor assemb l y. Each i nk rofi ll unit can rofi l l a o i ng l o ink oartr i dgo at a time. 
Each ink r e fi l l un i t w ill cons i st of th e fol l ow i ng sub units: 

Ink reservoir unit 

Switch unit 

Inlc transfer uiiit 
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I nk rosorvo i r unit 

Figure 361 shows th e compon e nts of a ink roservoir unit. 
5 Tho i nk rosorvoir unit w i l l oonoist of tho fo ll owing: 

Multipl e ink r e s e rv eifs — which stores ink. Each refill d e vic e will allow ink res e rvoirs of 

various capaciti e s. When tho ink rosorvoir empties out, it is roplaood by another res e rvoir 
containing mor e ink of tho some or different type or refilled. Refer to Section 3.5. 

A QA Chip and associated circuitry in e ach of th e ink r e servoirs — which stor e s th e amount 

10 of inlc in tho rosorvoir along with the attributes of th e ink in digital format. 

Th e e lectrical conn e ctions of e ach of th e QA Chips are connoctod to the microprocessor 

assembly. 
372r2 Switch unit 

Th i s unit wil l s w i tch tho inks selected from d i ff e r e nt i nk r e s e rvo i rs to the i nk transfer unit to b e 
15 disp e ns e d into i nk cartridges. 

Th o switch unit will pr e v e nt mixing of any res i dual i nk l e ft i n disp e ns i ng d e v i c e s after each ink 
cartridge Is r e fi lle d. 
3.2.3 I nk transfer un i t 

Tho ink rosorvo i r un i t w i l l cons i st of th e following: 

20 Inlc output d e vic e from e ach ink r e s e rv^oir. 

An output inlc transfer mechanism which controls the flow inlc from the ink r e fill unit to th e 

inlc cartridg e and is controlled by the microprocessor ass e mbly. 

Final inlc output d e vices to th e multiple cartridg e interfac e ass e mbly 

^T2r4 Multip l e cartridge i nt e rfac e un i t 

25 This unit wi l l provide tho phys i cal i nt e rface to tho ink cartr i dges. Each i nk cartr i dge i ntorfaco w i l l 
ho l d cartridges of d i ff e r e nt physical d i mens i ons. 

Each cartr i dg e int e rface unit can provid e an int e rfac e for about 20 phys i cal l y d i ff e rent cartridges. 
Th e cartridge i nt e rface un i t can r e mov e d from th e i nk ref il l un i t and replaced w i th anoth e r i nt e rfac e 
un i t to cator for othor physica l ly d i fferent cartr i dges. 

30 di^rS M i croproc e ssor ass e mbly w i th a us e r int e rfac e 

Th e contro l s connections for th e i nk transfer mechan i sm and tho e l ectrica l connections of tho QA 
Chip are connected to th e microprocessor ass e mb l y. Th e m i croprocessor ass e mb l y wi ll overs ee 
and control tho r e f il l proc e ss. 

Th e microproc e ssor ass e mbly w i l l communicat e w i th a usor i ntorfaco to accept commands and 
35 provide respons e s for var i ous refill operat i ons. 

I nk cartr i dge description 

I nk cartr i dg e s wh i ch w i ll b e r e f ille d i n a oommoro i a l r e fi ll stat i on must hav e a QA Chip storing th e 
fo l lowing components: 
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Ink amount r e maining, 

Inlc attributco (for e xample — inlc typ e , iolc choractoristies, ink colour, ink manufacturer). 

St4 Operat i onal procedure 

Th e op e rat i onal proc e dur e can bo d i vided into two parts: 

5 R e filling of ink cartridgea uaing the oomm e roial refill station. 

R e filling the ink res e rv^oirs us e d in th e r e fill station ia covered in S e ction 3.5. 

dr4r1 R e fi l l i ng i nk cartr i dges using th e commerc i al ref l H stat i on 

Figure 362 show s th e rof ill of i nk cartridges i n a comm e rc i a l r e fi ll stat i on. 

Th e fo l low i ng i s a d e scr i ption for r e fi l ling of i nk cartridg e s in th e comm e rc i a l r e fill station: 

10 Load th e inlc cartridg e into the multipl e cartridge interfac e unit of the ink refill unit. This 

will connect th e QA Chip of the ink cartridg e to th e microprocessor ass e mbly. It will also 
connect the inlc output device of the inlc rofill unit to the ink cartridge. 

The model number of th e ink cartridg e automatically is r e ad fi-om th e QA Chip by th e 

microprocessor aoaombly controlling the inlc rofill units. 

15 Th e microproc e ssor assembly will det e rmin e wh e th e r th e ink r e fill unit is suitabl e for th e 

inlc cartridge model. 

Th e r e fill option ia aoloctod on the microproceasor assembly through the user interfac e . The 

microprocessor assembly will then do the following: 

3t-. Read ink attributes (for e xample ink type, ink choract e ristics, ink colour, ink manufacturer etc) stored in the QA Chip of th e 

20 ink cartridge. Refer to[ 1 ]. 

b-. — Compare the read ink attributes to the ink attribute list in the refill 5tation.This may also require reading of the ink attribut es stor e d 

in the QA Chip of the ink reservoirs in the rofill unit. 
6; — Only if St e p b is successful, then do the following: 

i. Det e rmino tho amount of ink to be transf e rr e d by any or a ll of tho fol l owing moans, onsur i ng 
25 that tho rosorvoir has onough i nk for th e transf e r: 

Fixed amount (e.g. based on a pre - programmed valu e , cartridge model or rescrv^oir typo). 

Us e r s e l e ctabl e amount. 

ii . Th e m i croproc e ssor ass e mbly w ill calcu l at e th e cost of i nk amount and int e rrogato tho us e r 
for a payment method cr e dit card or cash. If cred i t card opt i on i s se le cted i t will request a 

30 cred i t card number to b e se le ct e d and int e rfac e to a payment system to comp l oto tho 
transaction b e for e proc ee d i ng further. 

ii i. Decrement th e amount of ink transforrod from th e QA Chip in the i nk refi ll un i t and 
i ncr e m e nt th e QA Ch i p In tho i nk cartridgo with corr e sponding ink amount. 

i v. I f I ncr e ment i ng of the QA Ch i p w i th I nk amount is succ e ssfu l thon a command i s sont to th e 
35 i nk transf e r mechan i sm to releas e tho i nk to tho ink cartr i dg e through th e output d e v i c e . 

^ Refill i ng THE i nk reservo i rs 

Tho i nk reservo i rs of any i nk rofil l d e vice can b e r e fi l led recurs i vely by the proc e duro descr i b e d i n 
S e ction tho on l y e xception b ei ng th e i nk cartridg e r e plac e d by tho ink rosorvo i r. 
3z6 Commerc i al refill stat i on for a product i on environment 
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Th i s rofi i l Gtat i on r e s e mb le s a commercial r e f i l l station but fi ll s mu l tipl e i nk cartr i dges of tho samo 
typ e at tho same t i me. This w ill serve as a fill i ng stat i on for n e w cartr i dges i n a product i on 
env i ronm e nt. 



5 LOG I CAL INTERFACE SPEC I F I CATION FOR PREFERRED FORM OF QA CH I P 
A I ntroduction 

This docum e nt d e fin e s th e QA Chip Logical Intorfac e , which provides auth e nt i cated manipulation 
of sp e cific print e r and consum a b le p a ram e t e rs. Th e i nt e rfac e i s d e scr i bed in torms of data 
structur e s and th e functions that manipu l at e th e m, tog e th e r w i th e xomplos of us e . Wh i le th e 
10 descriptions and examp le s ar e targett e d towards th e pr i nter app l ication, thoy aro equally 
app li cab l e i n othor domains. 

2 Scope 

Tho document doscrib e s the QA Ch i p Logica l Interface as follows: 

15 data structur e s and th e ir us e s (Section 5 to Section 0). 

funct i ons, inc l ud i ng i nputs, outputs, signature formats, and a logica l imp l omontat i on 

se qu e nce (S e ction 10 to S e ction 30). 

typica l functional s e qu e nc e s of printers and consumables, using tho funct i ons and data 

structures of th e i nt e rfac e (S e ct i on 31 to Sect i on 32). 
20 Th e QA Ch i p Logical I ntorfaco is a logical i nt e rfac e , and is therefor e i mp le m e ntation ind e p e ndent. 
Although this document doos not covor i mpl e m e ntat i on d e tails on particu l ar platforms, e xpect e d 
i mplementations i nclud e : 
^ Software only 

^ Off tho shelf cryptographic hardware. 

25 ASICs, such as SBR 4 320 [2] and SOPEC [3] for physical i ns e rt i on into pr i nt e rs and i nk 

cartridges 
^ Smart cards. 



3 Nom e nclatur e 

30 Symbols 

Th e following symbolic nomenc la ture i s us e d throughout th i s document: 

Tab l e 2 4 6. Summary of symbolic nomenc l aturo 



Symbol 



Description 



nrvi 



Funct i on F, taking a s i ngle parameter X 



Funct i on F, tak i ng two param e t e rs, X and Y 



Xf¥ 



X concatonatod w i th Y 



B i twise X AND Y 



B i tw i se X OR Y ( i nc l us i v e OR) 
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0 Y 


Bitwise X-XQR Y texclusive-OR) 


-iX 


Bitwise NOT X (complornQntl 




X is assignod tho valuo Y 








The domain of asaianmont Inputs to X is Y and Z 




X is equal to Y 


V V 

A ^ Y 


<^ to 1 lUl fJv|Uut IV/ r 


Ux 




Decremont X by 1 (floor 0) 




Inorf^mpnt X hv 1 ^mnHiiln rf*ni*^tf*r If nnth^ 


Erase X 


Erase Flash memory rogistor X 






SotBits[X, Y] 


Sot tho bits of tho Flash memory register X based on Y 




Shift register X right ono bit position, taking input bit 


Z ( ShiftRight[X. 
¥} 


from Y and placing the output bit in Z 






Data fiold or member function 'b' in object a. 



Pseudocode 

^rSrl Asynchronous 

Th e following psoudocodo: 
5 var - oxprcooion 

moans tho var s i gna l or output i s oqua l to tho eva l uation of th e e xpr e ssion. 

3.2.2 Synchronous 

Th e following psoudocodo: 
var < — Gxprcooion 

10 m e ans the var r e gist e r is ass i gnod tho resu l t of e valuat i ng th e e xpression dur i ng this cycle. 

3.2.3 Expr e ss i on 

Expr e ss i ons are def i n e d us i ng th e nom e nc l atur e in Tab l e 2^6 above. Thoroforo: 

var = — (a ° b) 
i s int e rprotod as th e var s i gnal i s 1 if a i s equal to b, and 0 otherwise. 

15 A Terms 

AtA QA Dev i c e and Syst e m 

An instanc e of a QA Chip Logica l I nterfac e (on any platform) is a QA D e vic e . 
QA D e vices cannot ta l k d i r e ctly to each other. A Syctem i s a l og i cal e ntity wh i ch has ono or mor e 
QA Dev i ces conn e cted l og i cal l y (or physically) to i t, and ca l ls th e functions on th e QA Dev i c e s. 
20 The system is consid e r e d s e cure and th e program runn i ng on the syst e m is cons i der e d to be 
trust e d. 

Types of QA D e vices 

472A Trusted QA Dovico 

Th e Truetod QA Devic e forms an integra l part of th e syst e m i tself and res i des w i thin tho trust e d 
25 e nvironment of th e system. I t enab l es the syst e m to e xt e nd trust to externa l QA Dev i ce s. The 
Trusted QA Device is on l y trusted b e cause the syst e m i ts el f is trusted. 
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4 .2.2 External untruet o d QA Devic e 

Tho External untrueted QA Devic e i s a OA D e v i c e that resid e s externa l to the trustod env i ronm e nt 
of th e system and i s therefore untrusted. Tho purpose of tho QA Ch i p Log i cal I nterface is to a ll ow 
the e xterna l untrust e d QA D e vices to b e com e e ffect i v e ly trust e d. Th i s i s accomp l ish e d when a 
5 Trust e d QA Devic e shares a s e cret k e y w i th th e e xterna l untrust e d QA D e v i ce, or w i th a 
Translat i on QA Dov i co (soo bolow). 

I n a printing application oxtorna l untrust e d QA Dovicos wou l d typ i cal l y b e instanc e s of SBR 4 320 
imp l ementations l ocat e d i n a consumab l e or tho pr i nter. 

4.2.3 Translation QA Devic e 

10 A TranGlation QA D e vic e is us e d to translat e s i gnatur e s b e tw ee n QA D e v i c e s and e xt e nd e ffectiv e 
trust when s o crot koys are not direct l y shar e d b e tw ee n QA Devic e s. 

Th e Translat i on QA D e vic e must shar e a s e cr e t k e y with th e Trust e d QA D e vic e that allows th e 
Translation QA Dov i co to offoct i vo l y become trustod by tho Trustod QA Dovico and honco trustod 
by tho system. Tho Trans l at i on QA D e v i c e shar e s a d i ff e r e nt s e cret k e y w i th anoth e r e xt e rnal 
15 untrusted QA Dovico (wh i ch may in fact bo a Trans l at i on QA Dovico etc). A l though tho Trustod 
QA D e vic e do e sn't shar e (know) th e k e y of the ext e rnal untrusted QA Devic e , signatur e s 
gonoratod by that untrusted dovico can b e translated by th e Translation QA D e vice into 
s i gnatures bas o d on tho koy that tho Trust e d QA D e vic e do e s know, and thus e xt e nd trust to th e 
otherw i se untrusted oxtorna l QA Dovico. 

20 

I n a SoPEC basod pr i nt i ng appl i cation, tho Printer QA Dov i co acts as a Trans l ation QA Dovico 
s i nce it shares a socrot koy w i th tho SoPEC, and a d i fferent socrot koy with tho ink corrldgos. 

4.2.4 Consumable QA Device 

25 A Consumabl e QA D e vic e is an e xt e rna l untrusted QA Dev i c e l ocat e d in a consumable. I t typica l ly 
contains d e tai l s about the consumab le , includ i ng how much of th e consumab le r e mains. 
In a pr i nting application the consumabl e QA Devic e is typical l y found i n an i nk cartridg e and is 
r e f e rr e d to as an Ink QA D e vico, or s i mply /n/c QA s i nco ink is tho most common consumable for 
pr i nting appl i cat i ons. How e ver, oth e r consumabl e s in pr i nting app l ications i nclud e m e dia and 

30 impress i o n c ounts, so consumabl e QA D e vic e is more gen e ric. 

A^iS Print e r QA D e vic e 

A Print e r QA Device i s an externa l untrusted device l ocat e d in th e pr i nter. It contains deta i ls about 
tho operat i ng paramet e rs for the pr i nt e r, and i s often r e f e rred to as a Print e r QA. 

35 
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4.2.6 Valuo Upgrador QA Dovioo 

A VqIuo Upgrador QA Dovico conta i ns tho nooosoary funotiono to al l ow a systom to writo an init i a l 
valuo (o.g. an i ni< amount) i nto another QA Dov i oo, typ i ca ll y a consumab l o QA Dovico . I t also 
a ll ows a system to r e f i il/roplon i sh a valuo i n a consumab l o QA D e vic e aft e r us e . 
5 Whonovor a value upgrader QA D e v i c e i ncr e as e s tho amount of va l u e In anoth e r QA D e v i c e , the 
va l u e i n th e valu e upgrador QA Device i s corrosponding l y deoroaood. This moans th e va l u e 
upgrador QA Dovico cannot cr ea te valu o — it can only pass on whatev e r valuo it itsoif has boon 
issu e d w i th. Thus a value upgrador QA Dovico can itself bo rop l on i shod or topped up by another 
valu e upgrad e r QA Devic e . 

0 

An oxampio of a valuo upgrad e r is an Ink Rofili QA Dovio e , wh i ch is usod to f ill /rofii l i nk amount in 
an I nk QA D e v i c e . 



^.2.7 Parameter Upgrader QA Device 

15 A Parameter Upgrader QA D e vic e contains th e n e cessary functions to al l ow a system to wr i t e an 
i n i tial parameter va l uo (o.g. a print spood) i nto another QA Dovico, typica l ly a printer QA Dov i oo. It 
a l so allows a syst e m to change that param e t e r valu e at som e lat e r dat e . 

A param e ter upgrader QA Dov i co Is able to perform a fixed number of upgrades, and this numb e r 
20 i s offoct i voly a consumablo value. Thus th e number of ava il abl e upgrades d e creases by 1 with 
each upgrade, and can be replen i shed by a valuo upgrader QA Dev i ce. 



^.2.8 K e y programm e r QA D e vice 

Secret batch keys ore inserted into QA Devices during instantiation (o.g. manufacturo). Those 
25 k e ys must b e r e plac e d by th e f i na l s e cr e t k e ys wh e n th e purpos e of the QA D e v i c e is known. Th e 
K e y Programmer QA Dovico imp l ements al l necessary funct i ons for rep l acing k e ys i n oth e r QA 
D e vic e s. 



S i gnatur e 

30 Dig i ta l signatur e s ar e us e d throughout th e auth e ntication protoco l s of tho QA Ch i p Log i ca l 
I nterfac e . A s i gnatur e i s produc e d by pass i ng data plus a secr e t k e y through a keyed hash 
funct i on. Th e s i gnature proves that tho data was signed by someone who knew th e s e cret key. 
The signatur e funct i on used throughout tho QA Ch i p Logica l interfac e i s HMAC - SHA1 [1]. 

35 Auth e nticat e d R e ad 

Th i s i s a read of data from a non trusted QA Dev i ce that also i nc l udes a chock of tho s i gnature 
(s ee S e ction ^.3.3). When tho Systom determ i nes that th e signature i s correct for the returned 
data (o.g. by ask i ng a trusted QA D e v i c e to tost tho signature) thon th e Systom is ab l e to trust that 
th e data has not been tampered e n route from tho read, and was actua ll y stored on tho non 

40 trusted QA Dovico. 
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Authontioatod Writo 

An auth e nticated writo i s a writo to th e data storage oroa i n a QA Devico whero tho wr i to roquost 
i nc l ud e s both the n e w data and a signature. Tho signature i s based on a k e y that has wr i to 
5 acc e ss p e rm i ssions to th e r e g i on of data i n the QA D e v i c e , and proves to tho r e c e iv i ng C3A Dev i ce 
that the writer has tho author i ty to p e rform th e write. For example, a Value Upgrador Refil li ng 
D e vic e is ab l e to author i ze a system to p e rform an authontioatod wr i to to upgrad e a Consumab l e 
QA D e vic e ( e .g. to i ncroaso tho amount of i nk i n an I nk QA Dovico). 

Tho QA D o v i c o that r e c e iv e s th e writ e requ e st checks that tho s i gnatur e matches tho data (so that 
10 it hasn't b ee n tamp e r e d w i th en rout e ) and also that th e signatur e is basod on tho corr e ct 
author i zation koy. 

An auth e nt i cat e d writo can bo fol l owed by an authent i cated r e ad to ensur e (from th e syst e m's 

po i nt of vi e w) that tho wr i to was succ e ssful. 

473i6 Non authenticat e d Wr i to 

15 A non authontioatod write i s a wr i to to tho data storage area i n a QA D e vic e whore tho wr i to 

r e qu e st includ e s only the now data (and no signature). This kind of writ e i s used when tho system 

wants to updat e ar e as of tho QA D e vic e that have no acc e ss protection. 

Tho QA D e v i c e verifi e s that tho d e st i nat i on of tho wr i te r e quest has acc e ss p e rm i ssions that 

p e rm i t anyone to writo to it. If acc e ss is p e rm i tted, tho QA Devic e s i mply performs th e wr i to as 
20 r e quested. 

A non authenticat e d wr i t e can b e fo l low e d by an auth e nticated road to ensur e (from the system's 
point of v i ow) that th e wr i te was succ e ssful. 
^.3.7 Author i zed Mod i fication of Data 

Author i z e d modificat i on of data refers to modif i cation of data v i a authenticated wr i tes (see Section 
25 4.3^^ 
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€ instano e /dov i GO idont i f i or 

Each QA Dovice r e qu i r e s an id e ntifier that a l lows unique i dont i ficat i on of that QA D e vic e by 
external systems, e nsur e s that m e ssages ar e rece i ved by tho corroct QA Dov i co, and e nsur e s 
that tho samo dov i ce can bo us e d across multip l e transact i ons. 

5 

Str i ct l y sp e aking, th e i dentif i er on l y n ee ds to bo uniqu e with i n th e cont e xt of a key, s i nc e QA 
D e vic e s only occopt messages that ar e appropriat el y s i gned. Howovor it is more conv e ni e nt to 
have the instance i dent i fi e r comp l et el y unique, as is th e case w i th this design. 

10 Tho i dentifi e r functiona li ty is prov i d e d by Chipld. 

Ch i p I d 

Ch i p l d i s th e unique 6 4- bit QA D e v i ce identifi e r. Th e Chipld is s e t wh e n th e QA Device i s 
i nstantiated, and cannot b e chang e d during th e l ifetime of tho QA Dovico. 
15 A 6 4 bit Chip l d gives a maximum of 184467 4 tr i l li on unique QA D e vic e s. 

7 K e y and key related data 

7rA NuMKEYs. K, Key I p, and Keylock 

Each QA Dovico contoinG a number of secr e t keys that ar e us e d for s i gnatur e g e neration and 
20 v e r i fication. Th e s e k e ys serv e two bas i c funct i ons: 

For read i ng, whoro thoy aro usod to ver i fy that the read data came from th e part i cular QA 

Dev i c e and was not a l t e r e d e n routo. 

For writing, where thoy aro usod to e nsure on l y authoris e d modificat i on of data. 

Both of th e se funct i ons ar e achieved by signature generat i on; a key is used to g e n e rat e a 
25 s i gnatur e for subsequ e nt transmiss i on from th e d e vic e , and to g e n e rat e a s i gnatur e to compar e 
against a rec ei ved signature. 

Th e number of secret k e ys i n a QA Dov i c e is given by NumK e ys. For th i s v e rs i on of tho QA Chip 
Logica l I nt e rface, NumK e ys has a maximum valu e of 8. 

Each koy i s r e f e rr e d to as K, and th e subscr i pted form /< » rofors to tho nth key whoro n has tho 
30 rang e 0 to NumK e ys 1 (i.o. 0 to 7). For conveni e nc e we also refer to tho nth koy as boing tho koy 
i n th e nth koyGlot. 

The l ength of e ach k e y is 1 60 bits. 1 60 bits was chos e n because the output signature length from 
th e s i gnature gonorat i on function (HMAC SHA1) i s 160 bits, and a key longer than 160 b i ts does 
not add to tho security of the funct i on. 

35 Th e security of the digital s i gnatur e s rel i es upon keys boing kept secret. To oafoguard tho o e ourity of 
each koy, keys shou l d b e generat e d in a way that is not d e t e rm i n i stic. I d e a ll y e ach k e y shou l d b e 
programm e d w i th a phys i ca ll y g e nerated random number, gathered from a phys i ca l ly random 
ph e nom e non. Each koy is in i tially programm e d during QA Device instantiation. 
S i nc e all k e ys must bo kept secr e t and must nevor le av e th e QA D e v i c e , e ach k e y has a 

40 corresponding 31 b i t K e yid which can bo r e ad to determin e th e i d e ntity or label of th e k e y w i thout 
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rovoaling tho va l ue of th e k e y i tse l f. Sinco th e r e lat i onsh i p botwoon koyQ and K e ylds is 1:1, a 
system can r e ad al l tho Koy l ds from a QA D e v i c e and know wh i ch koys aro stored i n oach of tho 
koys l ots. 

F i nal l y, oach k e yslot has a correspond i ng 1 bit K e yLock status indicat i ng whether tho key i n that 
5 slot/posit i on is allowed to be replac e d (s e curoly replac e d, and only if th e old k e y is known). Onco 
a key has be e n locked i nto a slot, i t cannot b e unlock e d i . e . it is tho final key for that s l ot. A key 
can only bo us e d to p e rform authonticatod wr i tes of data when it has boon l ocked i nto i ts koys l ot 
( i . e . i ts KoyLock status ~ 1 ). R e fer to Soction 8.1 .1 .5 for further deta il s. 

Thus oach of th e NumK e ys k e ys l ots contains a 160 b i t k e y, a 31 b i t Keyld, and a 1 bit K e yLock. 

10 7t2 Common and Variant Signature Generat i on 

To create a digital s i gnature, wo pass th e data to bo signed tog e th e r with a s e cr e t key through a 
k e y dopondont one way hash function. Th e koy dependent one way hash funct i on used 
throughout tho QA Ch i p Logica l Intorfaco is HMAC SHA1[1]. 

Signatures aro only of us e if they can b e validated i .e. QA Dev i c e A produces a s i gnature for data 
15 and QA Dev i c e B can chock if the s i gnature was valid for that particu l ar data. Th i s implies that A 
and B must share some secret informat i on so that thoy can g e nerate equiva le nt signatures. 
Common koy signature gon o r a t/on is whon QA Devic e A and QA Device B share tho exact same 
k e y i. e . koy Ka ~ koy Ku. Thus th e s i gnature for a messag e produced by A us i ng K/ v,eaf>-be 
e quiva le nt l y produced by B using K^. In oth e r words S I GKA(m e ssage) ~ S I GKB(m e ssago) because 
20 keH< A ~ koy Kb . 

Variant koy signaturo gonoration i s when QA D e vic e B holds a base koy, and QA D e vice A ho l ds 
a var i ant of that koy such that Ka ~ owf(KB TU A) where owf i s a one way function based upon tho 
base key (Kb) and a unique number i n A (Ua). Thus A can produc e S I GKA(ni e ssag e ), but for B to 
produce an equivalent s i gnaturo it must produce Ka by reading Ua from A and us i ng i ts base koy 

25 Kb^4 ^ is referred to as a variant koy and Kb is r e ferred to as tho baeo/common key. Therefore, B 
can produce e quivalent signatur e s from many QA Devices, oach of which has its own un i que 
variant of Kg. Since Chip i d is un i qu e to a given QA Dev i ce, wo uso that as Ua- A one way funct i on 
is required to cr e at e Ka from Kb or i t wou l d bo possible to derive Kh if Ka were e xposed. 
Common koy signatur e g e n e rat i on is us e d whon A and B aro e qually ava il ab le ^ to an attackor. 

30 For e xample, Printer QA Dev i ces and Ink QA Dev i c e s ar e equa l ly ava il ab le to attackers (both aro 
common l y available to an attackor), so shar e d koys between th e s e two d e v i ces should bo 
common koys. 

Var i ant k e y signaturo gen e rat i on i s used whon B i s not read i ly ava i lab l e to an attackor, and A is 
readi l y availab l e to an attackor. I f an attackor I s ab l e to determ i ne Ka, they will not know KA -fe<^-afiy 
35 oth e r QA Dev i ce of class A, and th e y wil l not b e ab le to determ i ne Kb. 



^he term "equally available" is relative. It typically means that the ease of availability of both are the 
effectively the same, regardless of price (e.g. both A and B are commercially available and effectively 
equally easy to come by). 
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Tho QA Device producing or t e st i ng a s i gnaturo n ee ds to know i f it must use tho common or 
var i ant m e ans of signature generat i on. L i kewise, wh e n a koy is stored I n a QA Devioo, tho statuo 
of th e k e y (wh e th e r it is a bas e or variant key) must b e stor e d a l ong w i th i t for future roforonco. 
Both of th e s e requir e m e nts ar e mot us i ng th e K e y l d as fol l ows: 
5 Th e 31 - b i t K e yld i s brok e n i nto two parts: 

A 30 bit unique i d e ntifior for th e k e y. B i ts 30 1 repr e s e nts tho Id. 

A 1 bit Variant F l ag, wh i ch repr e sents wh e th e r th e key i s a bas e key or a variant k e y. B i t 

0 r e pr e s e nts the Variant Flag. 
Tablo 2A7 doscribos th e r el ationsh i p of the Variant Flag with th e k e y. 
10 Tab le 247. Variant Flag r e pr e s e ntat i on 



val^bie 


Key represented 






Baso koy 




Variant key 



Tt^tI Equiva le nt signatur e g e n e ration botwoon QA Dovicos 

Equiva le nt s i gnature generation between A QA Dovicos A, B, C and D is shown in F i gur e 363. 
1 5 Each d e v i c e has a sing l e koy. K e yld. i d of all four k e ys ar e th e same l.o Koy l dA-ld ~ KoyldM. l d ~ 

Kr v lri. IH - K n v lH . Irf 

4f-Keyl€lA .VariantFlag - 0 and K e y l d e VariantF l ag - 0, then a signatur e produc e d by A, can b e 

equiva l ontly produced by B bocauso K^ K&- 

If K e y l dB.Var i antFlag ~ 0 and Koy l dc ^ .VariantF l ag ~ 1 , then a signatur e produced by C, is 
20 e qu i va l ont l y produced by B bocauso K^^f (Kb, Ch i p l d c^ 

I f K e y l dc-VariantF l ag ~ 1 and Koyld o ^.Var i antF l ag ~ 1, th e n a signature produc e d by C, cannot 
bo equiva l ontly produced by D b e cause there i s no common baso koy botwoon th e two dov i cos. 
I f K e yld&.VariantF l ag - 1 and Key l dAn VariantF l ag - 0, then a s i gnatur e produced by D, can bo 
equiva l ont l y produced by A because K^ f-(K A, Chip l dy ^r 

25 
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S Operating and stat e data 

Th e pr i mary purpose of a QA Dev i ce is to s e cur e ly ho l d app li cation spooif l o data. For oxamp i o if 
the QA Dev i c e is an I nk OA D e v i c e it may stor e i nk oharactor i stics and th e amount of i nk - 
5 r e maining. If th e QA D e vic e is a Pr i nter QA Device i t may stor e th e max i mum speed and width of 
print i ng. 

For soouro manipulation of data: 

Data must b e cl e ar l y id e nt i fied ( i ncludes typing of data). 

^ Data must have c l early d e fin e d acc e ss crit e ria and perm i ss i ons. 

10 Th e Chip Logicaf Interfac e contains structur e s to p e rm i t thes e activities. 

Th e QA Devic e contains a number of k i nds of data w i th d i ffering aocoGG requirements: 

Data that can be decremented by anyone, but on l y i ncr e as e d in an author i s e d fashion e.g. 

th e amount of i nk rema i ning in an i nk cartridg e . 

-* Data that can only bo d e cremontod i n an authorised fash i on e.g. the number of times a 

15 Param e ter Upgrador QA Dev i c e has upgrad e d another QA Dovico. 

Data that is normally read on l y, but can b e writt e n to (chang e d) i n an author i s e d fash i on 

e.g. tho operating param e t e rs of a print e r. 

Data that is a l ways r e ad on l y and do e sn't e v e r n ee d to b e chang e d e .g. i nk attribut e s or th e 

seria l number of an Ink cartr i dge or printer. 

20 ^ Data that i s wr i tt e n by QACo/Si l v e rbroek, and must not be changed by th e OEM or end 

us e r e .g. a l i cenc e numb e r conta i n i ng th e OEM's i d e ntificat i on that must match th e software 
i n the pr i nter. 

^ Data that is wr i tten by the OEM and must not b e chang e d by th e end user e.g. tho mach i ne 

numb e r that f i l le d th e i nk cartr i dge with ink (for problem track i ng). 
25 %A M 

M is th e general term for a l l of the m e mory (or data) i n a QA Dev i ce. M i s further subscripted to 
refer to thos e d i ff e r e nt parts of M that have different acc e ss r e quir e m e nts as fo ll ows: 

Mg conta i ns al l of tho data that is protected by access permiss i ons for key based 

(authent i cat e d) and non key based (non - auth e nt i cat e d) wr i t e s. 
30 contains tho typo i nformat i on and access p e rmissions for th e Mq data, and has wr i te- 
once permissions ( e ach sub part of M4. can only bo written to onco) to avo i d the poss i b ili ty 
of changing th e typ e or access permissions of something aft e r i t has been d e f i n e d. 

^ Mar-A 4 etc., referred to as M ^^ y contains al l tho data that can be updated by anyon e until th e 

p e rmiss i ons for thos e sub parts of fsA^ have changed from r e ad/write to read on l y. 
35 Wh i le all QA Devices must hav e at least My and M^, tho exact number of memory vectors (M ^s) 
ava il ab le i n a particu l ar QA Dev i c e i s giv e n by NumV e ctore. I n this v e rsion of th e QA Chip 
Log i ca l I nterface thero ar e e xactly 4 m e mory vectors, so NumVeotors ~ A, 
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Each M fl i o 512 bits in l e ngth, and i s furth e r brok e n into 16 x 32 b i t words. Tho ith word of Mn -4s 
roforrod to as M f,{i}rMn [0] is the l e ast significant word of Mb, and M^l 5] is tho most 
significant word of M^ t 

874t1 Mo-ar«l-M4 

5 In tho gonora l caso of data storage, it is up to tho oxtornal accossor to intorprot th e b i ts in any way 
it wants. Data structures can bo arbitrar il y arrang e d as l ong as tho various p ie c e s of softwar e and 
hardware that interpr e t those b i ts do so consistent l y. However if thoso b i ts hav e va l ue, as i n tho 
cas e of a consumab l e, i t is v i ta l that tho value cannot bo i noroasod without appropriate 
authorisation, or one type of valu e cannot b e added to anoth e r incompatib le k i nd e .g. do l lars 

10 shou l d never bo add e d to y e n. 

Thoroforo Mq i s divided into a number of fiolds, whore each fiold has a s i z e , a pos i tion, a typo and 
a set of p e rmiss i ons. Mg contains al l of th e data that r e quires authonticatod write access (one data 
e l e m e nt p e r f iel d), and M4 conta i ns tho field i nformation i .e. the size, type and acc e ss permissions 
for the data stored in M^^ t 

1 5 Each 32 bit word of d e fines a fio l d. Thoroforo thoro i s a max i mum of 16 defined fields. 
d e fin e s fi e ld 0, M4[1] d e fin e s fi e ld 1 and so on. Each field is defined i n terms of: 

siz e and posit i on, to permit oxtorna l acc e ssors d e t e rm i n e where a data i t e m is 

type, to permit external acc e ssors det e rmin e what tho data r e pr e s e nts 

^ permissions, to ensure appror i ate access to th e fi e ld by e xt e rna l accessors. 

20 Th e 32 b i t va l u e M4.[n] d e fin e s th e conceptual fiold attribut e s for fi el d n as fo ll ows: 

W i th regards to consistency of i nt e rpr e tation, th e typ e , s i z e and position i nformat i on stor e d in the 
var i ous words of M 4 a ll ows a syst e m to d e term i ne the contents of th e corresponding fi el ds (in Mq ) 
h e ld in the OA Dev i c e . For e xamp le , a 3 co l or i nk ca rtri dg e may hav e an I nk QA Dev i ce that ho l ds 
tho amount of cyan ink in field 0. the amount of mag e nta i nk in fi el d 1 , and the amount of yel l ow 

25 i nk in fio l d 2, whil e another s i ng l e co l or Ink QA D e v i c e may hold the amount of y e llow ink in field 
0, wh e re the s i ze of th e fie l ds in th e two I nk QA D e v i ces are diff e r e nt. 

A fi el d must be defined (in M4) b e fore i t can b e wr i tten to ( i n M^). At QA Dev i ce i nstantiat i on, the 
whole of Mo i s 0 and no fie l ds are defined (al l of M4 is 0). The first fie l d (fie l d 0) can on l y be 
cr e at e d by writing an appropr i ate value to M4[0]. Onc e fi el d 0 has been defined, the words of Mq 
30 corr e spond i ng to fio l d 0 can b e wr i tt e n to (v i a th e appropr i ate permissions w i th i n th e fie l d 
defin i tion M4 tOB^ 

Onc e a fi e ld has b ee n d e fined ( i . e . M4M has be e n writt e n to), th e siz e , typ e and p e rmiss i ons for 
that fi el d cannot bo changed i .e. M4 i s wr i t e onc e . Oth e rwise, for example, a fi el d cou l d be defin e d 
to b e lira and g i ven an i nitia l va l ue, then the type changed to do ll ars. 
35 Th e s i z e of a fi el d i s measur e d in terms of the numb e r of consecut i v e 32 bit words it occupi e s. 
S i nce ther e ar e on l y 16 x 32 - b i t words i n M q , thoro can only bo 16 fie l ds wh e n al l 16 fields are 
d e fin e d to b e 1 word siz e d each. Likewise, tho maximum s i ze of a fio l d is 512 bits when only a 
sing l e fiold i s d e fined, and it is poss i b l e to define two fi el ds of 256 b i ts each. 
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Qnco f i old 0 has beon croatod, f i eld 1 can b e cr e at e d, and so on. Whon onough f i o l ds havo boen 
cr e at e d to allocate a l l of Mo, th e r e maining words in M4. ar e availablo for wr i to onoo gonoral data 
storogo purpos e s. 

I t must b e emphas i s e d that whon a fiold i s created the permiss i ons for that fio l d aro fina l and 
5 cannot b e changod. This a l so means that any koys roforrod to by th e field permiss i ons must be 
a l r e ady lock e d i nto th ei r k e yslots. Otherw i s e som e on e cou l d s e t up a fi e ld's permissions that th e 
k e y in a part i cu l ar k e yslot has writo accoss to that fiold w i thout any guarant ee that tho d e s i r e d key 
w ill b e e v e r stor e d i n that slot (thus allowing pot e nt i al mis us e of th e fie l d's valu e ). 
8.1.1.1 — Fi e ld Sizo a nd Position 
10 A fi el d's s i z e and position are d e fined by m e ans of 4 bits (referr e d to as EndPos) that po i nt to the 
le ast s i gnificant word of th e f ie ld, w i th an impl ie d pos i tion of th e fi el d's most sign i ficant word. Tho 
i mp l i e d pos i t i on of f i e l d O's most s i gn i f i cant word i s Mu[15]. Tho posit i ons and s i zos of all fields can 
th e r e for e b e calculat e d by starting from f i old 0 and working upwards until all tho words of havo 
bo e n account e d for. 

15 The d e fault valu e of M:^[0] is 0, which moans f i oldO.ondPos - 0. S i nc e f i e l dO.startPos - 15, fi e ld 0 
i s tho only fio l d and is 16 words l ong. 

8.1.1.1.1 Example 

Suppose for example, w e want to allocat e A fie l ds as fo ll ows: 

fi e ld 0 :128 bits {A »f 32 bit words) 

20 f i o l d 1 : 32 bits (1 ^ 32 b i t word) 

fiold 2: 160 b i ts (5 »f 32 b i t words) 

fiold 3: 102 bits (6 ^ 32 b i t words) 

Fi el d O's pos i t i on and siz e i s d e fin e d by M^O], and has an assum e d start pos i t i on of 15, wh i ch 
m e ans th e most s i gnificant word of fio l d 0 must be in Mo[15]. F i old 0 thoroforo occup i es Mo[12] 
25 through to M4^[15], and has an endPos va l u e of 12. 

F iel d 1's pos i tion and s i z e i s d e fin e d by M4I], and has an assum e d start pos i tion of 1 1 ( i . e . 
M 4[0]. e ndPos — 1 ). Sinc e i t has a l e ngth of 1 word, field 1 therefore occupi e s on l y Mo[1 1] and i ts 
e nd posit i on i s th e sam e as its start pos i tion i .o. its ondPos va l u e i s 1 1 . 

L i k e wise fi el d 2's posit i on and siz e is d e fin e d by M42], and has an assum e d start pos i tion of 10 
30 ( i . e . M41] e ndPos — 1 ). Sinco i t has a l e ngth of 5 words, fi e ld 2 therefor e occupi e s Ma[6] through to 
Mq [1Q] and and has an endPos va l ue of 6. 

Final l y, fi e ld 3's position and siz e is d e fin e d by M43], and has an assumed start pos i t i on of 5 ( i . e . 
M 42].endPos — 1 ). S i nco it has a length of 6 words, fiold 3 thoroforo occupies Mo[5] through to 
M a[0] and and has an e ndPos va l u e of 0. 
35 Sinco a ll 16 words of aro now account e d for in th e 4 fie l ds, th e r e ma i ning words of M^ -ffrer 
M 4 4 ] though to M^l 5]) aro i gnored, and can b e us e d for any writ e once (and thenc e read on l y) 

Figur e 365 shews th e same examp le i n d i agramat i c format. 

8.1.1.1.2 Determining the number of fie l ds 
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Th e following pooudooodo il lustrates a moano of d e t e rm i ning th e numb e r of fi e lds: 
fioldNum FindNumFicldo (Ml ) 
o tart Poo < — 1-& 
fioldNum < — 9- 
5 While (ficldl^Tum < 16) 

cndroa < — Ml [fioldNum] .cndPoa 

1# — (ondPoo > o tart Poo) 

# orror in thio field. . . — oo muot be an attack 

attacJtDotoGted ( ) # moot likely olcaro all Iccyo and data 

10 Endlf 

f icldNum i i 

if — (cndPoo = 0) 

return f icldNum — # io already incremented 

ElOG 

15 otartPoo < — endPos 1 # endpoo muat be > 0 

Endlf 

EndWhilc 

# error if get here oinee 16 fieldo are eonoumed in 16 wordo at 
moot 

20 attackDetectedO # moat likely olcaro all keya and data 

8.1 .1 .1 .3 Determin i ng tho sizos of all fields 

Th e following ps e udocod e illustrat e s a m e ans of dotorming tho sizes of all va l id fields: 

FindFiGldCizca (Ml , f icldCigc [] ) 

numFicldo < — FindNumFicldo (Ml) — # aooumeo that FindJ^JumFieldo doco 
25 all chocking 

ntartPoo < — 1& 
fioldNum < — & 

While — (f icldNum < numFicldo) 

EndPoo < — Ml [fioldNum] .endPoo 

30 f ioldSize [fioldNum] — = otartPoo cndPoo — i — i 

OtartPoo < — endPoo i # endpoo muot be > 0 

fioldNum I i 

EndWhilc 

While (f icldNum < 16) 

35 f ieldSizc [f icldNum] — i — & 

fioldNum I I 

EndWhilc 
8.1.1.2 — Fi e ld Typ e 
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The system must bo Qb l o to idontify tho typo of data otorod i n a fio l d so that i t can p e rform 
op e rations us i ng tho oorroct data. For oxamp i o, a pr i nter syst e m must be ab le i dent i fy wh i ch of a 
consumable's f iel ds ar e i nk f iel ds (and which fi el d Is which i nk) so that th e i nk usage can b e 
corr e ctly app li ed during print i ng. 

A fi e ld's type i s d e f i n e d by 15 b i ts. Tabl e 332 i n App e nd i x A li sts th e f i eld types that aro 
spoc i flcal l y requ i red by the QA Ch i p Logica l Interfac e and th e r e for e app l y across a ll appl i cat i ons. 
The default voluo of M4O] is 0, which m e ans fieldO.typo ~ 0 (I. e . non -i nitialisod). 
Strictly speaking, the type n e ed on l y bo i ntorprot e d by all who can s e cur el y r e ad and wr i te to that 
f ie ld i. e . within th e context of one or more k e ys. However I t i s convon i ont i f possible to k e ep all 
typ e s un i que for s i mp li stic i d e nt i f i cat i on of data across a ll applicat i onG. 

In tho general case, an oxtorna l system commun i cat i ng w i th a QA Dov i co can i d e nt i fy th e data 
stored i n MO i n tho fol l owing way: 

-* R e ad th e Key l d of th e k e y that has p e rm i ss i on to writo to tho fiold. Th i s will a give broad 

I dentification of th e data typ e , which may b e suffici e nt for c e rta i n applications. 

Read the typo attr i but e for th e fi el d to narrow down the id e ntity w i th i n the broader context of 

tho Koyld. 

For e xampl e , th e print e r system can road th e Key l d to d e duc e that th e data stor e d i n a fi el d can 
be written to via tho HP_N e twork_lnkR e fi l l koy, which means that any data i s of th o general Ink 
category known to HP N e twork printers. By further r e ading th e typ e attribut e for the field th e 
system can d e t e rmine that th e i nk i s Black ink. 
8.1.1.3 — Fiold PormiGsions 

Ai l f iel ds can bo roady by ovoryon e . Howev e r wr i tes to fi e lds are gov e rn e d by 13 bits of 
perm i ssions that are pr e s e nt i n e ach fi e ld's attr i bute d e finition. The p e rmissions d e scr i b e who can 
do what to a specific fio l d. 

Writ e s to fi e lds can either bo auth e nt i cat e d (i.e. th e data to b e wr i tt e n i s s i gn e d by a k e y and th i s 
signatur e must b e ch e cked by tho rocoiv i ng devic e b e for e wr i to access Is given) or non 
authenticated ( i .e. th e data is not sign e d by a k e y). Th e r e for e w e d e f i n e a sing le b i t (AuthRW) that 
sp e cifi e s wh e th e r authenticated writes are p e rm i tted, and a s i ngle bit (NonAuthRW) specify i ng 
wh e th e r non authenticated wr i t e s ar e porm i ttod. Sinc e it is po i nt l ess to p e rm i t both auth e nticat e d 
and non auth e nt i cat e d wr i tes to wr i to any va l u e (th e auth e ntc i atod writes aro po i nt l ess), wo further 
d e fine the case whon both b i ts ar e set to bo i ntorprotod as authont i catod writ e s ar e p e rmitted, but 
non - auth e nt i cat e d wr i t e s on l y succeed when tho new va l u e i s l ess than th e pr e v i ous valu e i . e . th e 
p e rmission i s d e cr e m e nt only. Th e i nterpretat i on of th e s e two b i ts I s shown I n Table 2 4 9. 
Tab l o 240. I nterpretation of AuthRW and NonAuthRW 



NonAuthRW AuthRW 



Interpretation 



9 



0 



Road only acc e ss (no one can wr i to to th i s fiold). 

Th i s is tho init i a l stat e for oach fio l d. At i nstant i ation a l l of M4 -4&-0 



which moans AuthRW and NonAuthRW are 0 for each fio l d, and 



hence none of Mq can bo written to unti l a fi e ld i s defined. 
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Q 


4- 


Authenticated write accoss is permitted 

Non authonticatod write aoecss is not permitted 


4- 


0 


Authenticatod write acooss is not permitted 
Non-authentioated write accoss is permitted (i.e. anyone can 
write to this fiold) 


4- 


A- 


Authenticatod write accoss is permitted 

MoR-authonticated write access is decrement only. 



If authont i catod wr i to access is p e rm i tted, thcro arc 1 1 additional bits (bringing th e tota l numb e r of 
p e rm i ssion bits to 1 3) to moro fu ll y d e scr i b e th e kind of wr i te acc e ss for e ach key. Wo on l y p e rm i t 
a singl e k e y to hav e th e ab il ity to wr i t e any valu e to th e field, and th e r e ma i ning keys ar e d e fin e d 
5 as b ei ng e ith e r not perm i tted to wr i t e , or as having docromont on l y wr i te accoss. A 3 bit KoyNum 
represents the slot numb e r of the key that has tho abil i ty to write any value to the fiold (as l ong as 
th e k e y i s l ock e d into i t s k e y slot), and an 8 b i t KoyPorme d e f i nes th e write perm i ssions for the 
(max i mum of) 8 keys as fo ll ows: 

KoyPormefn] ~ 0: Th e k e y in s l ot n ( i .e. Kb) has no wr i te acooss to this fiold (oxoopt whon n 

10 - KeyNum). Sott i ng K e yP e rms to 0 prohibits a key from transf e rring va l u e (wh e n an 

amount i s d e ducted from fio l d in one OA Dev i ce and transferred to another fiold i n a 
d i ff e r e nt QA D e vice) 

-* K e yP e rmcfn] ~ 1: Th e k e y in s l ot n ( i . e . K^) is p e rmitt e d to p e rform decromont on l y writ e s to 

this fio l d (as long as K^ ^ is locked in its k e y slot). Sotting KeyPerms to 1 a l lows a k e y to 
15 transf e r v al u e (wh e n an amount Is deducted from fiold i n one QA Dev i c e and transf e rred to 

another f i o l d in a different QA Dovico). 

Tho 13 bits of permiss i ons (within b i ts 4 16 of M^n]) are allocated as fo ll ows: 

8.1.1.3.1 Examp l e 1 

F i gure 367 shows an example of permiss i on bits for a f ie ld. 
20 In th i s exampl e w e can ooo: 

^ — NonAuthRW- 0 and AuthRW^ 1, wh i ch moans that on l y auth e nticatod wr i tes 
ar e a l low e d i. e . wr i t e s to th e field without an appropr i ate signature are not 
p e rmitted. 

^ — KoyNum ~ 3, so th e only key perm i tted to wr i to any va l uo to tho f i o l d i s key 3 
25 {he.^ 

^ — KoyPormG[3] ~ 0, which means that although koy 3 Is p e rm i tt e d to writ e to this 
fi e ld, k e y 3 can't b e us e d to transfer value from th i s fi e ld to oth e r QA D e vic e s. 
^ — KoyPorm6[0,^,5,6,7] ~ 0, wh i ch moans that these respectiv e k e ys cannot wr i te 
to th i s fiold. 

30 ^ — K e yP e rm6[1,2] ~ 1 , wh i ch moans that keys 1 and 2 hav e decr e ment only 

acc e ss to this f ie ld i .o. th e y ar e p e rmitted to writo a now valuo to tho fiold on l y 
whon tho now va l uo i s l oss than tho current value. 

8.1.1.3.2 Examp l e 2 
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F i gure 368 shows a second oxampio of porm i ssion b i ts for a f i o l d. 
In th i s e xample we can coo: 

— NonAuthRW and AuthRW- 1, wh i ch m e ans that auth e nt i cated wr i tes aro 
allowed and wr i tes to the field without a signature ar e on l y perm i tted when tho 
new va l ue i s l ess than th e current value (i. e . non auth e nt i cated writ e s hav e 
decrement on l y permiss i on). 
^ — K e yNum ~ 3, so tho only k e y p e rmitt e d to write any valu e to tho fie l d is key 3 
(i.e. 

- — KeyPerms[3] " 1 , which moans that key 3 is p e rm i tt e d to write to this f ie ld, and 
can b e used to transfer valu e from th i s fie l d to oth e r QA Devices. 

- — K e yP e rmsfO, 4,5,6,7] ~ 0, which m e ans that these respective k e ys cannot writ e 
to th i s f iel d. 

^ — KoyPormG[1,2] - 1, wh i ch moans that keys 1 and 2 have d e cr e m e nt on l y 
acc e ss to this fi e ld i . e . they are perm i tt e d to wr i t e a n e w va l ue to tho fi e ld only 
when tho now value is l oss than tho current value. 
6.1.1.4 — Summary ofFiold attribut e s 

F i gur e 369 shows th e br e akdown of bits within tho 32 - bit fi e ld attr i bute va l ue 

Table 250 summarisos each attribute- 
Tabl e 260. Attr i butes for a fio l d 



Attr i bute 



Sub attribute namo 



Size 
i n b i ts 



I nterpretation 



4^ 



G i ves addit i ona l i d e nt i f i cat i on of th e data 



stor e d In th e fi el d with i n the cont e xt of tho 



aoc e ssors of that fi e ld. 



P e rm i ssions 



K e yNum 



The s l ot numb e r of th e k e y that has 



auth e nticated wr i te access to tho fiold. 



NonAuthRW 



AuthRW 



Key Perms 



0 - non authent i cated wr i tes aro not 



perm i tted to th i s fie l d. 

1 - non authent i cated writes ar e permitt e d 



to this f ie ld (s ee Tabl e 2^9). 



0 ~ authent i cat e d writ e s are not p e rm i tt e d 
to th i s f io ld. 



~ authent i cated wr i t e s ar e p e rmitt e d to 
this field. 



g 



Bitmap r e presenting tho writ e p e rm i ss i ons 
for e ach of the keys when AuthRW ~ 1 . 
For each bit: 
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0 ~ no writ e aoo e ss for th i s k e y (except for 
k e y KoyNum) 



~ docrom e nt on l y aoooso i s porm i ttod for 
th i s key. 



S i zo and 



EndPos 



Pos i t i on 



Th e word number in Mq that l io l ds th e Isw 
of th e f ie ld. The msw is h el d i n 



M1[f i oldNum - 1], whero msw of f ie ld 0 i s 



8.1.1.6 — P e rmiGGionc ofM :^ 

ho l ds th e f i eld attribut e s for data stored in Mq, and e ach word of M4 can b e wr i tt e n to once 
on l y. It is i mportant that a systom can detormino which words aro availabl e for wr i ting. Wh i le this 
can b e dotorminod by read i ng M4. and dotormining wh i ch of th e words i s non zoro, a 16 bit 
p e rm i ssions valu e i s avai l able, w i th e ach b i t i ndicating wh e ther or not a giv e n word i n M4 ^4^ 
b ee n writt e n to. Bit n of P4 roprosonts tho perm i ssions for M4P] as fo ll ows: 

Tabl e 251 . I nterpretat i on of P^n] i. e . bit n of M^'s p e rmission 





Doscription 


Q 


writes to M4n] are not permitted i.e. this word is now read only 


1- 


writes to M4[n] are permitted 



S i nc e is writ e onco, whonovor a word i s writton to i n M^., the corresponding b i t of P4 is also 
cl e ared, i ,o. wr i ting to M4n] cl e ars P^ tn^r 

Wr i tes to M4n] only succeed wh e n a l l of M4.[0...n 1] havo alr e ady wr i tton to ( i .o. prev i ous fie l ds aro 
defin e d) i . e . 

-* M 4[0..n 1] must havo a l r e ady been writton to ( i . e . P4.[0..n 1] aro 0) 

^ P 4W - 1 ( i e . i t has not yet boon writton to) 

I n addit i on, i f M4[n 1].endPos ^ - 0, th e new M4[n] word w i l l defin e th e attr i butes of fie l d n, so must 
b e furth e r ch e cked as fo l lows: 

^ Th e n e w M4[n].endPos must be va li d ( I . e . must bo le ss than M4[n - 1]. e ndPos) 

^ I f th e now M4[n].authRW is sot, Kte yt4ii m must b e locked, and all keys roforr e d to by th e 

now M4n].koyPorms must a l so b e locked. 

How e v e r if M4[n 1]. e ndPos ~ 0, th e n a ll of Mu has boon defined in terms of fie l ds. Sinc e e nough 
fi e lds hav e been croatod to allooato a ll of Mo, any remain i ng words i n M4 ar e ava i lab l e for wr i te 
onc e g e nera l data storage purposes, and are not ch e ck e d any furth e r. 



MaT-M ^ otc, roferrod to as M^ ^. , contains a ll the data that can bo updat e d by anyono ( i .o. no 
authenticated wr i te i s requ i red) unt il tho permiss i ons for thos e sub parts of M^ ^ . hav e chang e d 
from road/wr i to to r e ad on l y. 
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Th e sam e pormissions r e pr e s e ntation as us e d for M^, i s also usod for M;^. Consoquont l y P^ -ls-a 
16 - b l t va l u e that conta i ns tho pormlssions for (wh e r e n 0). Tho porm i ssions for word w of 
is givon by a singlo b i t Pfl[w]. Howovor, un li ko wr i tos to M4, wr i tos to do not automat i oai i y c le ar 
bits i n P. On l y wh e n th e bits i n Pa ^ , ar e e xp l ict l y c l eared (by anyon e ) do those corrospond i ng 
5 words bocom e r e ad - on l y and f i na l . 
0 Session data 

Data that i s valid on l y for the durat i on of 0 particular communication session i s roforrod to as 
s e ss i on data. Soso i on data e nsur e s that e v e ry s i gnature contains d i fferent data (somotimos 
r e f e rred to as a nonoo) and th i s prevents roplay attacks. 
10 9A R 

R is a 160 bit random numb e r seed that is sot up (when tho QA Dov i co is i nstant i ated) and from 
that po i nt on i t i s i ntornally manag e d and updated by tho OA Dov i co. R i s used to ensure that 
e ach s i gned i t e m contains tim e varying i nformat i on (not chos e n by an attacker), and e ach QA 
D e v i c e 's R is unrelat e d from on e QA D e vic e to th e n e xt. 
15 Th i s R is us e d in the gonorat i on and testing of s i gnatures. 

An attack e r must not b e ab le to doduco th e valu e s of R in present and futur e d e v i cos. Thoroforo. 
R should bo programm e d w i th a oryptographically strong random number, gothorod from a 
phys i ca l ly random phenomenon (must not bo deterministic). 
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9;2 Advancing R 

Tho sossion compon e nt of tho mossago must only l ast for a single oossion (cha lle ngo and 
rosponso). 

Tho mlos for updating R aro oo follows: 

5 R e ads of R do not advanco R. 

Ev e ryt i me a signatur e i s produc e d with R, R i s advanood to a now random numbor. 

^ Ev e rytim e a signature including R is test e d and is found to bo corroot, R is advanood to a 

now random numbor 

OtS Rfc AND Rg 

10 Each s i gnature conta i ns 2 piocos of soss i on data i .e. 2 Rs: 

On e R com e s from th o QA Dev i co issuing the chal l ongo i.e. th e oha ll engor. Th i s is so tho 

cha l l e nger can e nsure that th e cha l l e ng e d QA Dev i ce i sn't s i mply r e p l ay i ng an o l d signature 
i .e. the challenger i s protect i ng i ts el f aga i nst tho cha ll enged. 
^ Ono R comes from tho device respond i ng to the chal l ongo i.e. th e cha l lenged. Th i s is so 

15 th e challeng e d n e v e r s i gns anything that is g i ven to I t without i nsert i ng some time varying 

change i.e. protects th e chal le nged from th e chal l enger i n cas e th e challenger is actual l y an 
attack e r perform i ng a chosen text attack 
S i nce there are two Rs, wo need to dist i nguish b e tween them. W e do so by defin i ng each R as 
e xternal (R^) or l ocal (Rt , ) d e p e nding on i ts use in a g i ven function. For e xample, tho challenger 

20 s e nds out i ts l ocal R, referred to as R^. Th e d e vico being chal le ng e d rec ei v e s th e chall e nger's R 
as an externa l R, i .e R^,. It then gen e rates a s i gnature using its and the cha ll enger's R^. Tho 
r e sultant signature and R^, ar e s e nt to tho cha lle nger as tho respons e . Tho chal le nger r e ceives tho 
s i gnature and Rfe - (signature and produced by th e device being chal le ng e d), produces its own 
signature us i ng R^ (sent to tho d e vic e being challenged ear li er) and R^ r e c ei v e d, and compares 

25 that signatur e to tho signature rec e ived as r e sponse. 
S i gnature functions 

4€ Obj e cts 

^ KeyRef 

10.1.1 Object descript i on 

30 Instead of passing keys direct l y I nto a function, a KoyRof { \ .o. key referenc e ) object i s pass e d 
inst e ad. A KeyR e f obj e ct encapsu l at e s the process by which a key is formed for common and 
variant forms of s i gnatur e g e n e rat i on (bas e d on tho setting of th e variab le s within th e obj e ct). A 
KeyRef def i nes which key to use, whether i t i s a common or variant form of that key, and, i f it is a 
variant form, tho Ch i pid to use to croato th e var i ant. For more i nformation about common and 

35 variant forms of keys, see Sect i on 7.2. 

Us e rs pass KoyRof objects i n as i nput parameters to pub li c funct i ons of th e QA Ch i p Log i ca l 
I nt e rface , and th e s e K e yRefs ar e subsequ e ntly pass e d to th e signatur e function (cal l ed with i n tho 
i nterfac e funct i on). Note, however, that tho method funct i ons for KoyRof obj e cts aro not avai l ab l e 
outside tho QA Chip Log i cal I nterface. 

40 10.1.2 — Obj e ct var i ables 
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Table 252 doscrib e s oach of tho variabl e s w i thin a K e yR e f object. 

Table 252. DoQor i pt i on of obj e ct variab le s for K e yR e f obj e ct 



Paramotor Doocrlption 

koyNum Slot numb e r of the koy to uso as th e basis for key format i on 
usoChipId 0 ~ tho koy to b e formed i s a common key (i.o. i s th e sam e as Kto yNw) 

1 ~ th e key to be formed lo a variant key bas o d on K^ ^eyNt^m 
Glil|»l€l Whon usoChipId - 1 . th i s i s tho Chip i d to bo used to form th e var i ant key ( this 

will bo tho Ch i pid of tho QA D e vic e wh i ch stores tho var i ant of Ki teyNwi) 

Whon usoChipId - 0, chipid i s not us e d 



5 10.1.3 Object Methods 

10.1.3.1 gotKoy 

public koy getKoy(void) 

10.1.3.1.1 M e thod d e script i on 

Th i s method is a pub li c m e thod (pub li c in obj e ct orient e d t e rms, not pub l ic to us e rs of th e QA Chip 
10 Logica l I nt e rfac e ) and i s cal l ed by tho GonoratoSignaturo function to return the key for uso in 
signatur e g e neration. 

If usoCh i p I d is truo, th e formK e yVariant m e thod is callod to form th e k e y using chipid and than 
return the variant koy. I f usoCh i p I d is false, th e koy stor e d i n s l ot koyNum Is roturnod. 

10.1.3.1.2 M e thod s e qu e nce 

15 The gotKoy method is i l l ustrated by tho fol l owing poeudocodo: 
If (uacChipId 0) 

Bloc 

Itoy < — formKeyVariant ( ) 

20 Endlf 

Return Key 

10.1.3.2 formKeyVariant 

privat e k e y formKoyVariant (void) 

10.1.3.2.1 M e thod descript i on 

25 Th i s method produces the variant form of a k e y, bas e d on the K teyNw n and ch i pid. As d e scrib e d i n 
S e ction 7.2, the var i ant form of koy Kto yt4tffft . i s generat e d by owf (Kk eyNw n, chipid) wh e r e owf is a 
on e- way function. 

I n add i t i on, the time taken by owf must not depend on th e valu e of th e k e y i .e. the t i m i ng should 
bo offoct i voly constant. Th i s prevents timing attacks on th e k e y. 
30 At pr e s e nt, owf is SHA1 , although th i s st ill noods to b e v e rified. Thus the variant koy i s defined to 

b e SHA1(K, eyN«m4^hlfild)r 

10.1.3.2.2 Method soquonco 

The formKeyVariant method is ill ustrat e d by tho fo l low i ng ps e udocod e : 
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Iccy < — SIIAl ( Kfe e^^feHftH — chipid) — # Calculation muat ta]cG conotant time 
Return ]coy 
41 Funct i ons 

D i g i ta l signatur e s form th e basis of a l l authonticQtion protocols w i th i n th e QA Ch i p Logica l 
5 I ntorfaco . Tho signature funct i ons aro not diroctly avai l ab le to users of the QA Chip Logical 

Intorfaco , sinc e a gold e n rul e of d i gita l signatures is nev e r to sign anyth i ng e xactly as i t has boon 
g i ven to you. Instead, th e s e s i gnature functions aro i ntornal l y ava i lable to the funct i ons that 
compris e tho public i nterfac e , and aro us e d by thoso funct i ons for th e format i on of k e y s and th e 
g e n e ration of s i gnatures. 

10 4A-A GenerateSicnature 

I nput: KoyRof, Data, Randoml, Random2 

Output: SI6 

Chang e s: None 

AvoiiabiHty: Ail dov i coo 

15 11.1.1 Funct i on d e scr i pt i on 

Th i s function us e s K e yR e f to obtain tho actua l koy roquirod for s i gnature generat i on, app e nds 
Randoml and RQndom2 to Data, and performs HMAC_SHA1[k e y. Data] to output a signature. 
HMAC_SHA1 is doscribod in [1]. I n add i tion, this oporation must take constant t i mo irrospoctivo of 
th e valu e of th e koy (soo Soction 10.1 .3.2 for mor e d e tails). 

20 11.1.2 Input param e t e r d e scription 

Tablo 253 d e scr i b e s each of th e i nput parameters: 

Tablo 253. Description of i nput param e t e rs for G e n e rat e Slgnatur e 



Paramotor 


Doscription 


KeyRef 


This is an instanco of the KeyRef object for use by tho GonorotoSignaturo 






function. For common key signature goneratlon: KeyRef.koyNum ~ Slot number 
of the key to be used to produce the signature. KeyRef.usoChipId ~ 0 




For variant key eignaturo generation: KoyRolkoyNum ~ Slot number of the key 


to be used for generating the variant key, whoro tho var lant key is to be used to 
produce the signature KoyRof.usoChipId ~ 1 KoyRof.ohipId ~ Chipid of tho QA 


De\/lne whinh r.tnrnr. thn vnrinnt nf K|Xxvnof.toyNxjnT. ^"^ "p-^^* v-^ri.^nt key fnr 


signature goneratlon. 




Preformatted data to be signed. 


Randoml and Random2 aro appondod to Data boforo tho signature Is gonoratod 


to ensure that tho signature is session based (applicable only to a single 
session). 


Randoml 


This is the session component from the QA Device that is responding to tho 
challengo. 


Random2 


This Is tho GOGoion component from the QA Device that issuod the challongo. 
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11.1.3 Output paramotor dosoript i on 

Tabl e 25 4 descr i bes each of th e output paramotors. 

Table 254. D e scription of output paramotors for Gonerat e Signaturo 



Parameter 


Description 




SIG-" SIGfcey(Data | Random 1 | Random2) wlioro key ~ 
KeyRef.getKeyO 



5 11.1. 4 Funct i on s e qu e nce 

The GenoratoSignatur e funct i on is i l lustrated by th e fol l owing psoudocodo: 

Iccy < — KcyRcf . get Key ( ) 

dataToBcCignGd < — Data | Randoml [ Random2 

SIC < — H^4AC_CIIA1 (]cQy, dataToBoSigncd) — # Calculation muot taltc 
1 0 conotant — time 
Output SIG 
Return 

Ba si c Function s 
42 Definitions 

Th i s sect i on defines return cod e s and constants r e f e rr e d to by funct i ons and psoudocodo. 

4-27^ ResultFlac 

Th e R e sultFlag i s a byte that i ndicates the return status from a funct i on. Ca ll ors can us e th e value 
of R e sultF l ag to dotormino whether a ca l l to a function succoodod or fa ile d, and if the cal l failed, 
th e spec i fic error condition. 

Tabl e 255 d e scr i bes th e R e sultFlag valu e s and the mn e monics us e d i n tho pseudocod e . 



PEA23US 



768 



Tabl e 255. ResultFlag valu e doscription 



Mnemonic 








Pass 


Function completed 
sucessfully 


Function successfully completed roquosted task. 




FaU 


General Failure 


An orror occurred during function processing. 












DaQoig 


oignaiuFe-FriisrTiaicn 


Input signature didn't match the generated signature 




InvalidKey 


KeyRof Incorrect 


Input KeyRof.koyNum > 3. 




InvalidVoctor 


VectNum incorrect 






InvalidPormissio 
n 


Pormlsoion not adqeuato to 
per form oporation. 


Trying to perform a Write or WriteAuth with incorroct 
permissions. 




KeyAlroadyLocke 


Key already lockod . 






d 




Koy cannot be changed because it has already beer 
lockod. 



40^ Constants 

5 Tab le 256 d e scrib e s tho constants r e ferred to by functions and psoudocodo. 

Tab le 256. Constants 



10 



15 



20 



MaxKoy 



« Got l nfo 

Input: — 



NumKoys 1 (typ i ca ll y 



MaxWordIn 



M 



Num Vectors 1 



(typical l y 3) 



16 1-15 



-Noffte 



Output: 



Resu l tFlag, SoftwaroRoioas el dMajor, 



SoftwaroRoloaooldMinor, 

NumV e c tore, NumKoys,Ch i p l d 

DopthOfRol l BackCache (for an upgrade dov i oo on l y) 

ChangoG r None 



Availability: 



A ll d e v i c e s 



4^ 



Function descr i pt i on 



Usoro of QA Dov i oes must call the Gotlnfo funct i on on each QA Dov i co boforo ca l ling any other 
funct i ons on that dovico. 

Th e G e tlnfo function tolls tho caller what k i nd of QA D e vico th i s i s, what functions ar e availabl e 
and what proportloc th i s QA D e v i c e has. Th e call e r can use this i nformat i on to corr e ctly ca ll 
functions w i th appropriat el y formatt e d parameters. 
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Tho first vaiuo roturned, Softwar e R ele asoldMajor, e ff e ctivo l y identifios what kind of QA Dovico 
th i s is, and thorofore what functions ar e ava il abl e to cal le rs. SoftwaroR e ieas e fdMinor teWe th e 
ca l ler which v e rs i on of th e spec i f i c type of QA Dov i co this i s. Tho mapping between tho 
SoftwaroReleas el dMajor and type of dovico and their different functions is described in 
5 Tab l e 258 

Every QA Dovico also r e turns NumVoctors, NumKoys and Ch i pid which aro requ i red to sot 
Input param e t e r values for commands to tho dov i co. 

Addit i ona l informat i on may bo roturnod d e pending on tho typo of QA Dovico. Tho VarDataLen and 
VarData fie l ds of tho output ho l d th i s add i t i ona l i nformation. 

10 4^72 Output parameter s 

Tab le 257 describ e s each of tho output param e t e rs. 

Tab l e 257. Descript i on of output param e t e rs for Got l nfo function 



Parameter 


#bytee 


Description 








RosuitFiag 








Indicates whether the function completed successfully or 


not. If it did not complete successfully, the reason for the 
failure is returned hero. 
See Section 12.1. 


SoftwaroRoloasoldM 




This defines the function sot that is available on this QA 




Device. 


SoftwaroRoloasoldM 








This defines minor software releases within a major release, 
and are incremental changes to the software mainly to doal 


with bug fixes. 


NumVoctors 




Total number of memory vectors in this QA Device. 






NumKoys 




Total number of keys in this QA Device. 




€ 


This QA Device's Chipid 


VarDataLon 




Length of bytes to follow. 






VarData 


(VarDataLen 


This is additional application specific data, and will be of 


length VarDataLon (i.e. may bo 0). 



15 Tabl e 258 shows tho mapping b e tween the Softwar e Roloaeo/dMajor, th e type of QA D e vic e and 
th e ava il ab le d e v i ce funct i ons. 

Tabl e 258. Mapping betw ee n Softwar e R ele ase l dMajor and avai l ab l e dov i co 
funct i ons 



Softwar e R el easol 



d Major 



Device descr i pt i on 



Funct i ons avai l ab l e 



I nk or Pr i nt e r QA Dev i ce 



GeUnfe 



Random 
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Translate 


WriteMl* 


WrIteFlelds 


WrIteFieldsAuth 


SotPorm 


RoplaooKoy 


2 


Vaiuo Upgrader OA Device (o.g. Ink 


All functions in the Ink or Printer 


Refill QA Dovico) 


Devioo, plus: 


StartXfcr 


XferAmount 


StartRollBack 


RollBackAmount 


3 


Parameter Upgrader OA Devico 


All functions in the Ink or Printer 




device, plus: 


StartXfer 


XforFiold 


StartRollBack 


RollBackFloid 


4 


Key Roplaoement device 


All functions in the ink or Printer 




Dovioo, plus: 


GetProgramKoy 


RoplaooKoy — is different from 
the Ink or Printer dovico 


& 


Trusted device 


All functions in the ink or Printer 




Dovioo^ plus: 


Sf§f»M 



Tab l e 259 shows th e VarData components for Value Upgrader and Paramotor Upgrader QA 
D e v i c e s. 
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Tab l o 260. VarData for Valuo and Paramotor Upgrador QA Dev i coG 



VarData L e ngth in D e scr i ption 

Compononto bytes 

DopthOfRol l BaokCa 1- Tho numbor of dataoots that can bo 

Ghe accommodat e d 

i n tho Xfor Entry oaoho of tho dovico. 



4^7^ Funct i on sequence 

Tho Gotlnfo command i s ill ustrated by the fo l lowing ps e udocod e : 
Output Sof twarcRQlcaacIdMaj or 
Output Sof twarcRclQaoGldMinor 
Output NumVcGtoro 
Output NumKcyo 
Output Chipld. 

VarDataLcn < — 1 # In caoc of an upgrade device 

Output DepthOfRollBaclcCaGhc 

Return 

44 Random 

Input: Neffie 

Output: Rt 

Changos: None 

AvQflabiiity: Ail dov i oos 

Th e Random command i s used by tho cal l er to obtain a s e ssion compon e nt (oha l longo) for us e in 
subsequent s i gnature gen e rat i on. 

If a call e r cal l s th e Random funct i on mu l tipl e t i mes, tho same output w i l l b e r e turn e d e ach t i me. 
(i.e. th i s QA D e vic e 's R) wi ll on l y advanc e to th e n e xt random numb e r i n th e sequ e nc e aft e r a 
successful test of a s i gnatur e or after produc i ng a new s i gnatur e . Th e sam e R^, can nev e r b e us e d 
to produc e two s i gnatures from th e sam e QA D e v i c e . 
Th e Random command is i ll ustrat e d by the fol l owing ps e udocode: 

Output Rfa 
Return 
4^ Read 

Input: KeyRef, S i gOn l y, MSo l oct, Koy i dSo l oct, WordSo l oct, R^ 

Output: R e su l tFlag, So i oGtodWordsOfSo i cotodMSj SoioctedKoy l ds, R^ y 

Chang e s: — Rt 
Availability: A ll doviocs 
Function descript i on 
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Tho Read command i s us e d to road data and koy l ds from a QA Dov i co. Tho ca l lor can spooify 
wh i ch words from M and wh i ch Koy l ds arc road. 

Tho Road command can return both data and signatur e , or just th e signature of tho requ e st e d 
data. S i nc e tho return of data is basod on tho ca ll er's i nput roquost, it provonts unnocossary 
5 informat i on from being s e nt back to tho ca ll er. Cal le rs typical l y r e qu e st on l y th e s i gnatur e In ord e r 
to confirm that loca l ly cached values match the values on the QA Dev i ce . 
Th o data read from an untrustod QA Dovico (A) us i ng a R e ad command is val i dated by a trust e d 
QA D e vic e (B) us i ng the Tesf command. Th e Rj ^af>4-SIGe ^ produc e d as output from th e R e ad 
command are i nput (along w i th corr e ctly formatt e d data) to tho Tbsf command on a trusted QA 
10 DevicQ for val i dation of th e signature a nd h o n c o th e data. S I G^ o t oan also opt i onally bo pass e d 
through tho Traneiat e command on a number of QA D e v i ces between Road and Toet if tho QA 
Devic e s A and B do not shar e k e ys. 

45t2 I nput parameter s 

Table 260 describes each of the i nput parameters: 



Table 260. D e scription of input param e t e rs for R e ad 



Parameter 


Description 


KeyRef 


For common key Gignaturo gonoration: KoyRof.koyNum ~ Slot 
number of tho key to bo used for producing the output signature. 


KoyRef.usoChipId ~ 0 


No variant koy cignature generation roquirod i^'Sr'-^ v 




SigOnly 


Flog indicating return of signature and data. 0- indicates both the 


signature and data are to be returned. 1 - indicates only the 
signature is to be returned. 


Mseieot 


Soloctlon of memory vectors to bo road each bit corresponding to 




a given memory vec tor (a maximum of NumVector bits) 0 




indicates tho memory vector must not be read. 1 indicates 
memory vector must be read. 




Selection of Keylds to be read — each bit corresponds to a given 


KeyidSoloct 




Keyld (a maximum of NumKey bits). 0 indicates Koyld must not bo 
road. 1 indicates Koyld must be read. 




WordSoloct 


Soloction of words road from a dosirod M as requested in MSelect. 
Each WordSoloct is 16 bits corresponding to each bit in MSeleot 


Each bit in tho WordSoloct indicates whether or not to read the 


corresponding word for the particular M. 0 indicates word must not 


be read. 1 indicates word must bo road. 
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ExtQrnal random valuo required for output signature gonoration (i.e 


tho ohollongo). Re is obtainod by calling ihoJRandom function on 


the device which will receive the SIC^ from the Read function. 





4^t3 Output p arameter s 

Tab le 261 d e scr i bes each of the output paramotorc. 

5 



Parameter 


Description 


ResultFiag 


Indicates whether tho function oomplotod successfully or not. If It did 
not complete successfully, the reason for the failure is roturnod horo. 


Soo Section 12.1. 


SelectedWordsOfSefecte 






Selected words from soloctod memory vectors as roquostod by 
MSelect and WordSoloct 


SelectedKeyide 


Soloctod Koylds as requested by KoyldSelect. 


a 


Local random valuo added to the output signature(i.e S/Gom). Refer to 
Figure 370. 




SIGeut " SIGKeyReKdata 1 Rfc 1 Rs) as shown in Figure 8. 
Refer to Section 10.1 .3.1 for dotoils. 





45.3^1 StGert 

Figur e 370 shows th e formatt i ng of data for output s i gnaturo g e n e rat i on. 
Tabl e 262 g i v e s tho param e t e rs inc l ud e d i n S I Ge rt 

10 



Parameter 






Value set 




Length in bits 


Value set internally 


from Input 


RWSense 


3 


read constant - 000 






Refer to Section 15.3.1 .1 


MSelect 


4 






KoyldSoloct 


g 








4g 








This OA Device's Chipid 


WordSeloct 


16 per M 






SoloctodWordeOfSofocto 




The appropriate words from tho 




dMs 


32 per word 




various Ms as selected by tho 

coHor 






This QA Device's current R 




Re 


1-60 
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16,3.1.1 RWSonGO 

An RWSonso valu e i s prooont i n th e s i gn e d data to d i st i nguish wheth e r a s i gnatur e was produced 
from a Road or produced for a WritoAuth. 

The RWSonso i s set to a r e ad constant (000) for producing a signature from a road funct i on. Tho 
5 RWSonse is sot to a write constant (001 ) for produc i ng a s i gnatur e for a wr i te funct i on. 

Tho RWSonso prevents signatures produced by RoadXo bo subsequently sent i nto a WritoAuth 
function. Only signatures produced with RWSonse s e t to writ e (001), ar e acc e pt e d by a writ e 
funct i on. 

4^t4 Funct i on s equence 

10 Th e Read command is i l lustrat e d by th e fol l ow i ng pseudocodo: 

Acocpt input paramctcro ^KcyRcf, — SigOnly, — MSclcct , — KoyldSclcct 
# Accept input parameter WordCclcct baaed on MSclcct 

For i < — 0 to McucM 
15 If (MSclcct [i] ■ 1) 

Accept next WordSclcGt 

WordSclcctTGinp [i] — < — WordCclcct 

Endlf 

EndFor 
20 Accept Ra 

Chcclc range of KcyRcf . kcyNum 
If invalid 

— RcoultFlag < Inva l idK e y 

25 Output RcoultFlag 

Return 

Endlf 

#BuiId SelectedWordaOf€electedMo 
30 — 0 # k otorco the word count for SclcGtedWordDOf CclcctcdMo 
SclcctcdWordoOf SelectedMo [k] — ^-0 
For i< — 0 to 3 

If (MCclcct [i] = 1) 

For j — ^ — 0 to MaxWordlnM 

35 If (WordCclcctTcmp [i] [j] ^ 1) 

CclcctcdWordoOf GclcctcdMo [k] — (Mj , [j] ) 

k++ 

Endlf 

EndFor 

40 Endlf 
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EndFor 



#BuiId SclcctcdKcy^Ido 

1 < 0 # 1 otorco the word count for CGloctcdKcyldo 
SclcctcdKGyldo [1] < 0 
For i < — 0 to MaxKcy ^ 

If (KoyldSGlcct [i] - 1) 

SolGGtodKcylda [1] < KcyldCi] 

3h-i- 

Bndlf 

EndFor 



^Ccncratc mcaaagc for paaaing into the CcncratcBignaturc function 
data < (RWScnac | MSolGCt | KcyldSclcct | Chipid [ WordSclcct 

1 SolcctcdWordoOf SGlGGtGdMo | SclGCtcdKQyldo) — # Rcfor to 

Figure 370. 

#GcJicrQt:c Cignaturc function 

SIGfe < GcncratGSignaturG(KoyRcf .data^Rfe^R^) — # Sec Scotion 11,1 
Update Rfa-to R^ a 
ReoultFlag < — Paoo 
Output ReoultFlag 
If (SigOnly = 0) 

Output SclectcdWordoOf SeleetodMo, — SelectedKeyldo 

Endlf 

Output Ri Ti — 
Return 
4€ Test 

Iffipuls '■ KoyRot DataLongth, Data, Re -^SIGe 

Output: Rosu l tFlag 

Changes: Rt 

Availability: Al l dov i ces e xc e pt Ink dov i co 

Function descr i pt i on 

Th e T e et command is used to va li dat e data that has boon r e ad from an untrustod QA Dov i oo 
accord i ng to a d i g i tal s i gnature SIGe- Tho data w i ll typ i ca ll y bo momory v e ctor and K e y l d data. 
SIG g (and its rolatod Re) is th e most recent s i gnatur e this w ill b e the s i gnature produced by 
R e ad i f Tranelato was not used, or w i ll b e tho output from tho most rec e nt Translat e if Translat e 
was us e d. 
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10 



Tho Tos/ funct i on produc e s a loca l s i gnature (S I G^- SIGfc e y(Data | Rfe t ^) and comparos i t to tho 
i nput s i gnatur e (SIGg). If th e two s i gnatur e s match th e funct i on r e turns 'Pass', and tho oal l or 
knows that th e data read can bo trusted. 

Tho k e y us e d to produce S I Gfc-doponds on whothor. SIGg .was produc e d by a QA Dov i oo sharing a 
common key or a variant key. Tho KoyRef object pass e d i nto tho int e rfac e must bo sot 
appropr i at el y to refl e ct th i s. 

Tho 7oc^ function acc e pts pr e formatted data (as DataL e ngth numb e r of words), and app e nds the 
e xterna l Re-and l ocal to th e pr e formatt e d data to g e n e rat e th e signatur e as shown i n F i gur e 

4^r2 I nput parameters 



Table 263 descr i b e s e ach of th e input paramotors. 

Tabl e 263. D e scr i pt i on of i nput param e t e rs for T e st 



Parameter 



Descr i pt i on 



KeyRef 



For t e sting common koy signatur e : KoyRof-koyNum " Slot numb e r of the key to 



bo used for t e st i ng the s i gnoturo. SiG^ producod.us i ng KKoyRof.koyNum- by4he 
e xt e rna l dev i ce. KeyRef.usoChlpId " 0 



For testing variant /c e y signatur e : KoyRolkoyNum ~ S l ot number of th e k e y to 
b e us e d for generat i ng tho var i ant key. S/Gg produc e d,using a var i ant of 



by tho externa l device. KoyR e f.usoChipId - 1 KoyRof.chipld ~ 

Ch i p i d of th e d e vic e wh i ch g e n e rat e d SIG ^ using n vnrinnt of K K o yRof.koy M um- 



D a taL e ngtii 



L e ngth of pr e formatt e d data i n words. Must b e non z e ro. 



Preformatt e d data to b e us e d for producing tho signatur e . 



External random valuo requ i red for ver i fying the i nput s i gnature. This w i ll be the 
R from th e input signatur e g e nerator ( i .o th e d e vic e g e n e rat i ng SIG^^ 



Ext e rna l signatur e r e qu i red for authenticating i nput data as shown in F i gur e 371 . 



Th e extern a l sign a ture is generated e ith e r by a R e ad function or a Translat e 



function, A correct S/Gg-- S I GK eyRe ^Data | Rt, | R^ ^ 



15 16.2.1 Input signature verif i cat i on data format 

F i gure 371 shows tho formatting of data for Input s i gnature ver i fication. 

Th e data in Figure 371 (i.o. not or R^,) i s typica ll y output from a R e ad funct i on (formatt e d as p e r 
Figure 370). The data may a l so be generated in tho some format by the syst e m from its cach e as 
wi l l b e th e case when it p e rforms a Read using SigOnly ~ 1 . 

20 4673 Output parameters 

Table 26 4 describ e s each of th e output param e t e rs. 

Tabl e 26 4 . Description of output param e t e rs for Test 



Parameter 



D e scr i ption 
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RoGultFlag 



ind i oatos wheth e r the function compl e ted suooessfu ll y or not. I f it did 



not oomp l oto ouooossfu ll y, tho reason for th e fa ll uro i c return e d here. 
S ee Sect i on 12.1. 



Funct i on sequence 



Tho T e ef command i s i l lustrated by th e fo l low i ng ps e udocodo: 
Accept input param e t e rs%K e yR e f, DataL e ngth 



# Accept input paTomctcr — Data baocd on DataLength 



For i < — 0 to — (DataLength 3r> 

Accept next word of Data 

10 EndFor 



Accept input paramo t or o Rgi — SIGa 



Chcclc range of KcyRof . kcyNum 
1 5 If invalid 

— ReoultFlag < — Invalid K e y 

Output ReaultFlag 

Return 

Endlf 

20 

#Gcncjratc aignature 

SIGfc < — GcnoratoSignaturo (KoyRof , Data , Rs, Ri, ^ — # Refer to Figure 371. 



#ChccJc aicfnaturc 
25 If(SIG^^» SIG« ^ 

Update R fa -to R^ 

ReoultFlag < — Paoo 

Eloe 

ReoultFlag < BadSig 

30 Endlf 

Output ReoultFlag 
Return 



47 Translate 

Inpuls InputKoyR e f, DataLength, Data^ R& .i-SI6E ^OutputK e yR e f, Rb 

35 Output: RosuitF l ag, R^ gr-SIGom 

Chang e s: Rl 

Availability: Printer dovico, and poss i bly on other dov i cos 
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Funct i on descr i pt { on 

I t Is possib i o for a syst e m to call th e R e ad function on QA Dev i ce A to obta i n data and oignaturo, 
and thon ca l l tho Tbcf function on QA Dov i co B to vo l ldoto tho data and s i gnatur e . In th e samo 
way it i s possib le for a syst e m to ca l l the S/g/?M funct i on on a trusted QA D e v i c e B and then cal l 
5 tho WritoAuth function on QA Device B to actua ll y store data on B. Both of th e s e act i ons aro only 
possibl e wh e n QA D e v i ces A and B shar e s e cr e t k e y i nformation. 

If howovor, A and B do not shar e s e cr e t k e ys, w e can croato a validat i on chain (and honc o 
e xt e ns i on of trust) by means of trans l ation of s i gnatures. A g i ven QA Dovico can on l y trans l ate 
signatur e s if it knows the key of th o previous stage i n th o chain as wo ll as tho key of the n e xt 

10 stag e in th e cha i n. Th e Transfato function prov i d e s this functional i ty. 

Th e Translat e funct i on translat e s a s i gnatur e from one bas e d on one key to one bas e d another 
koy. Tho Tranelato funct i on first performs a t e st of th e i nput signatur e us i ng tho I nputKoyRof, and 
if the t e st succoodo produc e s an output s i gnature using tho OutputKoyRof. Tho Tranolato function 
con thoroforo in some ways bo cons i d e r e d to b e a combination of th e Test and Road funct i on, 

15 e xc e pt that th e data is i nput into tho QA Dev i c e instead of b ei ng r e ad from i t. 

Th e I nputKoyRof object passed into Tranelato must be s e t appropr i ate l y to r e fl e ct whothor. SIGe 
was produced by a QA Dev i ce sharing a common k e y or a variant koy. 
Th e koy used to produce output signature SIGe «t -d e p e nds on wh e th e r th e translating dovico 
shares a common koy or a variant key with th e QA D e vice rec e iving th e s i gnature. Th o 

20 OutputKeyRef obj e ct pass e d into Translat e must b e s e t approp ria t e ly to rofloct this> 

Sinc e th e Translate funct i on does not interpret or generate tho data in any way, only proformattod 
data can be passed i n. The Translat e function does howovor app e nd the external Rg.and l oooi R ^ 
to tho Preformatted data for verify i ng th e input s i gnature, thon advanc e s Rfc 4e4 ^, and appends 
R u and Rea to tho proformatt e d data to produc e th e output s i gnatur e . This i s dono to protect tho 

25 keys and prevent rep l ay attacks. 
Th e Translate funct i ons trans l ates: 

s i gnatures for subsequ e nt use in Tost, typ i cal l y or i ginat i ng from R e ad 

^ signatures for subsequ e nt us e in WrIt e Auth, typically originat i ng from SignM 

In both cases, proformattod data is passed into tho Translat e funct i on by th e syst e m. For 

30 trans l ation of data destined for Tost, tho data should be Preformatt e d as p e r F i gure 370 (all words 
e xc e pt th e Rs). For translation of s i gnatures for use in WritoAuth, th e data shou l d bo pr e formatt e d 
as p e r Figur e 373 (a l l words exc e pt the Rs). 

I nput parameters 

Tab l e 265 describes each of the input parameters. 

35 Tab le 265. D e scr i pt i on of i nput parameters for Trans l at e 



Parameter 


Description 


InputKeyRef 


For translating common key input signature: InputKeyRof.koyNum " Slot 


number of the koy to bo used for testing the signature. S/Gg producod,ysin§ 
KinputKoyRof.koyNum by tho oxtomal dovico. InputKeyRef.usoChipId ~ 0 
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For translating variant key input signatures: InputKeyRof.koyNum ~ Slot 


numDQr ui ine Key lO pe usBu TOi generQiing mo vonont KQy. o/Cj^ prooucoci.using 


u vuriulu tiT.TV|nputKoyRof koyNum Py me exiernai OGViGe. inpUiivoyKeT.usoonipiQ — + 


InputKoyRof.chipId - Chipid of the dovico which gonoratod S/Gt>^using a'yariant 

P' ^InputKoyRof.koyNum" - \ " ^ 


DataLength: 




Data 


Data used for testing the input signature and for producing tho output signature. 




External random value required for verifying input signature. This will bo the R 
from the input signature generator (i.e devico gonorating SiG^h 






External signature required for authenticating input data.T/io external signature 
is either generated by a Road function, a Xfor/Rollbacl< function or a 




iransfate function. A correct o/Gg- SIGKeyReKP^^^ 1 1^ j rs^p 


OutputKeyRo 
f 


For Qoneratina common f<ev output signature' QutPutKevRef kovNum ~ Slot 


number of the key for producing the output signature. SIGout produced using 

I^OutFirtKoyRof koyMum ^^^^"^'^^ riftvine rnnftiwing SIGniif tthnrag I^Outputl'.oyRof koy^Jum 

With the translating device. OutputKoyRof.usoChipId ~ 0 




For generating variant l<oy output signature: OutputKoyRof.koyNum -- Slot 
number of the koy to be used for generating the variant key. SIGout produced 


Lisina a variant of Ko. rf^. ^i^^^. ^.i. ... hnnmiRft thf* riia\/inn rQnftivinn SSIQffciif cLhraroR .q 


variant of K/^^■^.s..*l^^..p^^lJ^..M...^ with thft tmnfilr^tinn HftvinQ OnfniifKft\/RAf iignChinlH 


" 1 OutputKoyRof-ohipId " Chipid of the device which reooivos SIGq^ produood 


3y a variant Ot rSoutputKoyRof.koyNum~ 


Re2 


External random value required for output signature generation. This will bo tho 
R from tho destination of S/Geot- Rfe^ is obtained by calling \heJ^andom function 


on tho dovico which will rocolvo tho SIGet,t.from the Translato function. 





17.2.1 I nput signatur e v e r i fication data format 

This i s tho sam e format as used i n th e Teg^ function. R e fer to Section 16.2.1 . 

Output paramctcrs 

Tabl e 266 d e scribes each of tho output param e ters. 

Tab l o 266. Descript i on of output parameters for Translato 



Parameter 


Description 


ResuitFlag 


Indicates whether the function completed successfully or not. If it did not 
complete successfully, the reason for the failure is returned here. See Section 






Local random value used in output signature (i.o S/Goot^ 




Output signature produced using OutputKoyRofMoyNum using tho data format 


described in 
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F i gur e 372. 

S*GQor^^-SIGo,rtKeyRe KData I Rfca | Rea).Ref e r to Soot i on 10.1.3.1for dota il s. 



Figuro 372 shows tho data format for output signature g e n e ration from tho Tranelato function. 

4^.4 Funct i on sequence 

5 Tho Translate command is i ll ustratod by the fo ll ow i ng pseudocod e : 

Aaccpt input paramotcra InputKcyRcf, — DataLcngth 

# Accept input paramctcjr — Data baaed on DataLcngth 

10 For i < — 0 to — (Datalicngth 3r4- 

AcGcpt next Data 

EndFor 



Accept input param e t e rs — R e, S IG g-OutputK e yR e f, Rg a 

15 

Choclc range of Input KcyRc f . IccyNum and Output KcyRc f , IcoyNum 

If invalid ' 

— RcoultFlag < — I nvalidkoy 

Output RcoultFlag 

20 Return 

Endlf 

#Ccncr-Q tc gignature 

SIGfc < — GoncrateSignature ( InputKcyRcf , Data , R^, Ri ,^ — # Refer to Figure 
371. 

25 

#VQlidato input DignatujfG 
If(CIG^° SIGj,) 

Update Rfa,to R ^ 

Elac 

30 RcoultFlag < BadS l g 

Output RcoultFlag 

Return 

35 #CGnoirato output aignaturc 

SiGottfe— < — GoncrateSignature ( Output KeyRof , Data, R^^, Ry ) — # Refer to 
Figure 372. 
Update Rf a ~to R^^ 
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RcaultFlag < — Paoo 

Output RcoultFlag, — — SiGottt 

Return 

4« Wf»leA44+ 

5 iRpul^ VoctNum, WordSo l oct, MVal 

Output: Rosu l tF l ag 

Changes: MveetNwn 

Availability: All devices 
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Function descr i pt i on 

The WriteMI* function i s us e d to update so l oct e d words of M1*, subjoct to th e porm i osiono 
corr e spond i ng to thos e words stored i n Pv eetNwaT 

Note: Uniiko Writ e Auth, a eignaturo fe not r e quirod qg an input to this function. 

5 4^72 I nput PARAMCTcns 

Tablo 267 descr i b e s e ach of tho i nput paramotors. 

Tab l e 267. D e scription of input param e ters for Wr i to l \^1 + 



Paromotor 


Description 


VoctNum 


Numbor of the momory vector to be written. 
Must be in range 1 to (Num Vectors 1) 




WordSeloct 


Selection of words to bo written. 

0 indicatos corresponding word is not written. 


1- indicates corresponding word is to be written as per input. 


If WordSoiectfN'bit] is sot, then write to Mvee^tom word N, 






Muitipio of words corresponding to tho numbor of words 
selected for write. 

Starts with LSW of MveetNumT 



Note: Sinco this function has no accompany i ng si gnatures, additional i nput parameter 
error chock i ng is required. 

4^7^ Output parametcrs 

Tab l o 268 describes each of tho output paramotors. 

Tab le 268. D e scription of output parameters for WritoM1'» 



Parameter 


Description 


RoGuitFlag 


Indicates whether the function completed successfully or not. If it did 
not complete successfully, tho reason for tho failure is returned hero. 


See Section 12.1. 



+8:4 Funct i on sequlncc 

Tho iyr/foMf+ command is il l ustrated by th e fol l owing pseudocode: 
Accept input paramctcro VcctNum, WordSclcct 

^Accept MVal aa per WordCclcct 

MValTcmp [1<5] — < — 0 tt Tcmporar^^ buffer to hold MVal after being read 
For i < — 0 to MaxWordlnM # word 0 to word 15 

If (WordCclcGt [i] ^ 1) 

Accept next MVal 

^^alTGmp [i] — < MVal # Ctorc MVal in temporary buffer 



10 



15 



20 



25 
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Endlf 

BndFor 



Chook rango of VcctNum 
5 If invalid 

RcoultFlag < — Inval i dVeotor 

Output RcoultFlag 

Rotum 

Bndlf 

10 

^Checking non authenticated write pcrmiaaion for Ml \ 
PcrmOK < — ChcclcMl i rcrm (VQctNum, WordCQlcct ) 
15 mriting M with J i fVal 

If (PcrmOK ^1) 

WritcM (VcctNum, MValTcmp [] ) 

RcoultFlag < — Paoo 

20 Bise 

RcoultFlag < — I nval i d Porm i GO ion 

Bndlf 

Output RcoultFlag 
Rc t uim 

25 4%AA PcrmOK ChockM1*Porm ( VcctNum, WordSo l oct) 

Th i s function ch e cks WordSoloct aga i nst p e rmiss i on Pv eeaow n for the solootod word. 
For i < — 0 to MaxWordlnM # word 0 to word 15 

If (WordSclcct [i] — o-^r^ — a — t^^veetwHa-tiJ — « 0) # Trying to write a 

Readonly word 

30 Return PcrmOK < 0- 

Bndlf 

BndFor 

Return PGrmOK< — i 

18. 4 .2 Wr i t e M(VGGtNum, MValTompD) 

35 Th i s funct i on copies MValT e mp to Mv eetNttm^ 

For i < 0 to MoxWordlnl ^ ^ # Copying word from temp buff to M 
If (VcctNum ^ 1) # If Ml 

Pveetewa a [i] < 0 # Sct pcrmiooion to Readonly before writing 

Bndlf 
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-Mvee«toii+ad — < MValTcmp [i] 



# copy word 



buffer to M word 

Endlf 

EndFor 

4© Wr i toF i olds 

Input: 



Fio l dSo i oct, F i oldVa l 



Output: 



Rosu l tFlag 



Changes: 



""^^VoctNum 



Availability: 



All d e vicoG 



Funct i on description 



Th e Writ e Fields funct i on is us e d to writ e n e w data to s o loct e d f iel ds (stor e d i n MO). Th e writ e is 
carried out subj e ct to the non - authent i cated writ e acc e ss p e rmissions of tho fie l ds as stored in tho 
appropr i ato words of M1 (soo Section 8.1 .1 .3). 

Th e Writ e Fi e ide funct i on is used wh e n e ver author i zat i on for a writ e (i. e . a va l id signatur e ) is not 
roqu l rod. Tho WritoFioldeAuth function is used to perform authonticatod wr i t e s to f i e l ds. For 
e xamp l e, d e cr e menting the amount of i nk in an ink cartridge f i old i s p e rmitt e d by anyon e via th e 
Writ e Fields, but incromonting i t dur i ng a rofil l operation i s only porm i ttod using WriteFi e ldeAuth. 
Th e r e for e Writ e Fiolde doos not r e qu i r e a s i gnature as on e of its i nputs. 

4O72 I nput parameters 

Tablo 260 doscr i bes e ach of th e i nput param e ters. 

Tab le 269. D e scr i pt i on of input param e t e rs for WriteF i e l ds 



Param e ter 



Descript i on 



Fi e ldS e lect S ele ction of f i e l ds to b e wr i tt e n. 



0 i ndicat e s corr e spond i ng fi el d i s not written. 

1 i nd i cates correspond i ng fi el d is to b e wr i tten as per input. 



If FioldSoioct [N bit] is set, then wr i t e to F iel d A; of MO. 



FieldVal Mult i pl e of words corresponding to th e words for a ll so l octed f iel ds. 

Sinc e F i oldO starts at M0[15], FioldVal wordo starts w i th MSW of 



l ower fi el d. 



Note: S i nce this function has no accompany i ng s i gnatures, addit i ona i I nput parameter 
error ohock i ng Is r e quired ospocia il y i f tho QA Dov i cc Gommun i cat i on channel has poten - 
tial for error. 

4973 Output parameters 

Tab le 270 doscribos each of tho output parameters. 

Tabl e 270. D e scription of output parameters for Wr i t e Fi e lds 



Parameter 



D e scription 
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RoGuitFlag 



Indicates wh e th e r th e funct i on complot e d successfu ll y or not. I f i t did 
not comp l et e succossfully, tho roason for the fa il ure I s roturnod horo. 



See Section 12.1. 



A^tA Funct i on s equence 

The WriteFielde command is illustrat e d by th e fo l lowing pseudocode: 
Aaccpt input paramGtcro FicldScleGt 



^Accept FlcldVal aa per FicldSclcct into a temporary^ buffer 
MVal Temp 



# Find the oissc of each FicldNum to acaopt FicldData 

FicldSigc [16] — < — 0 # Array to hold FicldSigc aoouming there arc 16 

f icldo 

NuniFielda< — FindNumberOf FicldoInMO (Ml^FioldSiee) 



MValTemp [163 — < — 0 # Temporary buffer to hold FicldVal after being 
road 

For i < — 0 to NumFieldo 
If FieldCelect [i] » 1 

If i ■ 0 # Check if field number io 0 

PreviouoFieldEndPoo — ^ — MaxWordlnM — 

Elac 

PrcviouoFicldEndroa < Ml [i 1] .EndPoo # poaition of the 

laot word for the 

# prcviouo field 

Bndlf 

For j — < — ( PreviouoFieldEndPoo — 1-) — to Ml [FicldNum] .EndPooO 

^1ValTcmp [j] — Next FicldVal word # Ctore FicldVal in 

MValTemp . 

EndFor 

Endlf 

EndFor 



§Check non authenticated write pczmioaiona for all — flelda In 
FieldCelect 



PermOK < ChcclcMONonAuthPcrm ( FicldSclect , MValTemp , MO , Ml ) 
^Writing MO with MValTemp If permlaalona allow writing 
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If (PormOK = 1) 

WritcM ( 0 , MValTcmp) 

RooultFlag < — Paoo 

Elao 

— RooultFlag < — I nva li d P e rmiss i on 
Endlf 

Output RooultFlag 

Return 

19.^.1 NumF ie lds F i ndNumOfF ie ldslnM0(M1 ,F i e l dS i zeD) 

This funct i on returns th e numb e r of fi e lds in mo and an array Fio l dS i zo which stor e s the siz e of 
o ach fiold. 

CurrPoa < — G- 
NumFicldo < — 9- 

FicldSizc [16] — < — 0 — # Array otoring field oizco 
For FioldNum < — 0 to MaxWordI ftf4 

If (CurrPoa = 0) — # ohoolc if laot fiold hag roachod 

Rotum FioldNum # FioldNum indicatoo nuinbor of fioldo in MO 

Endlf 

FioldSizo [FioldNum] < — Cur r Poo Ml [FioldNum] .BndPoo 

— If (FioldSizo [FioldNum] < 0) 

Error # Integrity problem with fiold attributeo 

Return FioldNum # Lower MO fioldo are otill valid but liiglior 

MO fioldo are 

# ignored 

Eloo 

CurrPoo< — Ml [FioldNum] .EndPoo 

Endlf 

EndFor 

19. 4 .2 — WordBitMapForFi e ld G e tWordMapForFi e ld(F i e l dNum,Ml) 

Th i s funct i on returns tho word b i tmap corresponding to a fiold i .o tho fio l d consists of wh i ch 

consecut i v e words. 

Words itMap For Fiold< — 9^ 

WordMapTomp < — 0 

ProviouoFioldEndPoo < MlTFiold^Tum — 1] ,EndPoo # pooition of ttio 
laot word for tho 

— — -— — # previouo field 

For j < — ( ProviouoFioldEndPoo 1 1 ) — to Ml [FieldtJum] .EndPooO 
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# Cct bit corrcoponding to the word pooition 

WordMapTcmp < CIIIFTLEFT (1, j ) 

WordBitMapForFicld < — WordMapTcmp v WordBitMapForFicld 

EndFor 

5 Return WordBitMapForFicld 

19. 4 .3 PormOK Ch e ckMONonAuthP e rm(F ie idS ele ct,MValT e mpD,MO,Ml) 

Th i s functions check s non - authont i cated writ e p e rm i ssions for all fi el ds in Fi e ldS e l e ct 
PcrmOK ChcclcMONonAuthPcrm ( ) - 
FicldCiEC [1 ( 5] < 0 
10 NumFicldo < — FindNumOf FicldoInMO (FicldSigc) 

# Loop through all ficlda in FicldSclcct and Ghcck their 

# non authenticated pcrmiooion 
For i — < — G — to NumFicldo 

If FicldSclcct [i] — = 1 # check aclcctcd 

15 WordBitMapForField< — GetWordMapForField ( i , Ml ) — # get word 

bitmap for field 
PormOK 

< — CheakFieldNonAuthPcrm ( i , WordBitMapForFicld, MValTcmp , MO,) 

• # Chock pcrmiooion for field i in FicldSclcet 

20 If (PcrmOK = 0) # Writing io not allowed, — return if 

permiooiona for field 

# doean^t allow writing 

Return PormOK 

Endlf 

25 Bndlf 

EndFor 

Return PexTnOK 
AQAA PefmOK 

Ch e okF i oldNonAuthPernn(Fi e ldNum,WordB i tMapForF ie ld, MVa l T e mpD,MO) 

30 This function chocks non auth e nticated write permissions for th e fi e ld. 

DeerementOnly < — 0 

AuthRW < Ml [FieldNum] .AuthRW 

NonAuthRW < Ml [FieldNum] .AuthRW 

If (NonAuthRW = 0) — # No NonAuth write allovfcd 

35 Return rermOK < — & 

Endlf 

If ( (AuthRW u» 0) — A — (NonAuthRW ■ 1) ) # NonAuthRW allowed 
Return PermOK< 1 
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Blocif (AuthRW = 1) — A — (NonAuthRW = 1)# NonAuth DccrotnQntOnly 

allowed 

PormOK 

< — ChcclcInputDataForDocrGmcntOnly (MO,MValTcmp, WordBitMapForFicld) 

Return rcinnOK 

Endlf 



19.4.5 PormOK ChoGk l nputDQtaForD e cr e m e ntOnly(M0,MVa l T e mp[],WordB i tMapForF i o l d) 

Th i s funct i on ch e cks the data to be wr i tton to the fie l d is loss than th e current valuo. 

DccEneountered < — 0- 

LcooThanFlag < — Q 

EqualToFlag < — 0 

For i = MaxWordlnM to 0 



If (WordDitMapForField[i] — =— 3r^ — # otarting word of the field — 

otarting at M C W 

# comparing the word of temp buffer with MO current value 

LeaaThanFlag < — MO [i] — < MValTemp [i] — 

EqualToFlag< MO [ i ] — ° MValTemp [i] 

# current value ia leao or prcviouo valuo hao been decremented 

If (LeooThanFlag « !) v — (DccEneountered ° 1) 

DecEncountored < — t 

rcrmOK< — i 

Return PermOK 

Eloelf (EqualToFlag # 1) # Only if the value io greater than 

current and decrement not encountered in prcviouo wordo 

PcrmOK< — Q- 

Return PermOK 

Bndlf 



Endlf 



EndFor 



m4T6 WritoM(VoctNum, MVolTompD) 

Rofor to Section 18. 4 .2 for detai l s. 



2& 



WriteF l oidsAuth 



Inpul^ 

Output: 

Changos: 

Availabiiity: 



A ll dov i oos 



KoyRof, F i otdSoloot, FloldVal, Rh ^r^tGe 
MO and R|_ 
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2074 Funct i on Dcscn i PTiON 

The Writ e FieideAuth command is us e d to s e ouro l y update a numb e r of f ie lds (in mo)- Th e wr i t e i s 
carr i ed out subject to the authonticatod writ e acc e ss p e rmiss i ons of tho f i o l ds as stored In tho 
appropriat e words of M1 (s ee Section 8.1 .1 .3). WritoFieldGAuth wi l l e i ther updat e a ll of th e 
5 r e qu e st e d fields or none of them; tho wr i to only sucooods when all of tho roquostod fio l ds can bo 
wr i tt e n to. 

Tho WritoFieldsAuth funct i on roqu i roo tho data to b e accompani e d by an appropriato signatur e 
based on a k e y that has appropr i ate wr i te p e rm i ss i ons to tho fie l d, and tho signature must also 
ino l udo th o local R (i. e . nonc e /chal l enge) as previous l y r e ad from this QA Device via tho Random 
10 function. 

Th e appropriat e signatur e can on l y b e produc e d by knowing K neyRef - Th i s can b e ach i ev e d by a 
ca l l to an appropr i at e command on a QA D e vic e that ho l ds a key matching KK eyRef - Appropr i at e 
commands i nclud e SignM, XferAmount, XforField, StartXf e r, and StartRoHBack. 

2O72 I nput parameter s 

15 Tabl e 271 descr i bes each of th e input param e ters for WritoAuth. 



Parameter 


Description 


KeyRef 


For common key signature generation: KeyRof.keyNum ~ Slot 


number of the key to bo used for testing the input signature. 
KoyRof.useChipId - 0 


No variant key signature generation required 


FioldSoloGt 


Selection of fields to be written. 0 indicates corresponding field is 
not written. 1 indicates corresponding field is to be written as per 


Input. If FieidSoloct [N bit] is sot, then writo to Field N of MO. 




FieidVaf 


Multiple of words corrosponding to tho total number of words for all 


selected fields. Since FioldO starts at M0[15], FiefdVai words starts 
with MSW of lowor field. 


RE 


Extornal random value used to verify input signature. This will bo 




tho R from the input signature generator (i.e device generating 


SfGE 


External signature roquirod for authenticating input data. The 


extornal signature is either generated by a Translate or one of 


the Xfer functions- A correct S/Ge-= SIGKeyRe^data | Re | R|,^ 



20.2.1 I nput s i gnatur e verificat i on data format 

20 F i gure 373 shows th e i nput signatur e verification data format for the WritoAuth function. 

Table 273 glvnr. the pnrnm ft t fi rR i nrtluri ft d i n S I Gg Writo Auth 
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Parameter 


Length in bits 




Value set 






ValuQ set internally 


From Input 


RWSenee 


3 


writo constant - 001 






Kefor to Section 1 5.3.1 .1 


FieldNum 


4 




m- 












1 nis ViiM uevioe s onipiQ 


FieldData 


32 per word 




m- 












ICQ 

1 \J\J 


random valuo from 
device 





20t3 Output parameters 

Tab le 273 d e scr i bes e ach of tho output param e t e rs. 

Tabl e 273. Descr i ption of output param e ters for WrIt e Auth 

5 



Parameter 


Description 


ReeuftFiag 


Indicotoo whothor tho function completed sucoossfully or not. If it did not 
complete successfully, the reason for tho failure is returned here. See 


Section 12.1. 



20t^1 Funct i on s equence 

Th e Wht e Auth command Is ill ustrat e d by th e follow i ng pseudocod e : 
AcGcpt input paramctcro KcyRcf, — FiGldSclcat, 

10 

^Accept FicldVal ao per FicldSclcat Into a tcmporary^ huffcr 
MValTcmp 

# Find the oizc of each FieldNum to acoopt FieldData 
15 FieldSissc [16] < — 0 # Array to hold FieldSise aoouming there are 1 6 

f icldo 

NumFicldo< — FindNumberOf FieldalnMO (Ml-FieldSige) 

MValTcmp [16] — < — 0 # Temporary buffer to hold FieldVal after being 
20 ^?ea^ 

For i < — 0 to NumFielda 

If i = 0 # Cheolc if field number ia 0 

PreviouoFicldEndPoa < — MaxWordlnM — 

Biee 
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PrcviouoFiGldEndros < Ml [i 1] .EndPoo # poaition of the laot 

word for the proviouo field 
Bndlf 

For j — < — ( PreviouoFieldBndPoo M — to Ml [FicldNum] .EndPooO 

MValTcmp [ j ] — = Next FieldVal word # Storo FicldVal in 

rWalTemp . 

BndFor 

Endlf 

EndFor 

Accept Rb 7 — SIGfi 

Check range of KeyRef . keyNum 
If invalid range 

ReaultFlag < — InvalidKcy 

Output ReoultFlag 

Return 

Bndlf 

^Generate mcoaagc for paaoing to Genera tcGignaturc function 
data < — (RWScnoc | FieldSelect | Chipid | FicldVal 

#CcJ2cratc Signature 

SiGt— < — Generates ignature (KeyRef , data, R^, R^ ^ — # Refer to Figure 373. 

^Chcck aignaturc 

Update Rfe-to 

Bloe 

ReaultFlag < — BadSig 

Output ReoultFlag 

Return 

Endlf 



§Chcck authenticated write pcrmiaaian for all ficlda in 
FieldSelect uoing KeyRef 

PennOK< — CheclcMOAuthPerm ( FieldSelect , MValTemp , MO , Ml , KeyRef ) 
If (PcrmOK « i) 

Wri tcM(0, MValTcmp [] )# Copy temp buffer to MO 
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Eloo 

— RcoultFlag < Inval i dPorm i ssion 
Endlf 

Output RcoultFlag 
Return 

20. 4 .1 P e rmOK Ch e ckMOAuthP e rm(F ie idSo l oct,MValTompD,MO, Ml, KoyRof) 

This funct i ons checks non outh e ntioat e d writo porm i ssions for a l l fleldc in FioldS ' eloct using 
KeyRef. 

PcirmOK ChcclcMONonAuthrcinti -f-)- 
FicldSigQ [16] — < — 0^ 

NumFicldQ < — Find^JumOf FicldoInMO (FicldSigc) 
# Loop through ficldo 
For i < — 0 to NumFicldo 

If FiGldSclcct [i] — = 1 # chcclc aolcctcd 

Words i tMapFor Fi c 1 d < — GotWordMapForFicld (i, Ml) — #gct word 

bitmap for field 
rcrmOK 

< — CheolcAuthFieldPcrm ( i , WordBitMapForFicld, MValTcmp , MO, KeyRef) 

# Cheek permiaaion for field i in FieldSeleot 

If (rermOK ° 0) # Writing io not allowed, return if 

# permiooiono for field docon^ t allow writing 

Return rermOK 

Endlf 

Endlf 

BndFor 

Return PermOK 

20. 4 .2 P e rmOK Ch e ckAuthFl e ldPorm( F i o l dNum, WordMapForF i old,MVa l TompD, 

MO, KoyRof) 

This function ch e cks authonticatod porm i ssions for an mo fio l d using KoyRof 

(wh e ther KoyR e f has writo p e rm i ssions to tho fio l d). 
AuthRW < Ml [FieldNum] .AuthRW 
KeyMumAtt < Ml [FieldNum] . KeyNum 

If (AuthRW 1. 0) — # Checlc whether any ]cey hao write pcrmioo 4:eae 

Return rGrmOK< 0 # No authenticated write pcrmiooi eae 

Endlf 
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# Check KcyRcf haa RcadWritc Pcrmioaion to the field and it ±a 
locked 

If (KcyLoclcK eyw w =■ locltod) A (KcyNumAtt ■ KcyRcf . kcyNum) 

Return rcrmOK< — i 

5 Bloc # KoyNum ia not a RcadWritc Key 

KcyPcrm s— < — Ml [FicldNum] .DOForKcyo # laolatc Kcyrcrma for 

FicldNum 

* 

# Check Decrement Only PermiaDion for Key 

10 If (Kcyrcrmo [iCcyRcf .kcyNum] — = 1) — # Key io allowed to Decrement 

field 

rormOK 

-< — ChccklnputDataForDccrcmcntOnly (MO,MValTcmp , WordMapForField) 

Bloc # Key is a Readonly key 

15 rermOK< 0 

Bndlf 

Bndlf 

Return PcrmOK 

20.^.3 WordB i tMapF i oid GotWordMapForFiold(F i o l dNum.Ml) 

20 Ref e r to S e ction 1 0.l .2 for dota i ls. 

20. 4 . 4 P e rmOK Check l nputDataForD e cromontOn l y(MQ,MVa l T e mpD,WQrdMapForField) 

R e f e r to S e ction 19.^1.5 for d e ta il s. 

20.^.5 WriteM(VoctNum, MVa l T e mpD) 

R e f e r to S e ction 18.^.2 for d e tails. 

25 SetPefTO 

IniHil: VoctNum, PormVa l 

Output: Resu l tF l ag, NowPorm 

Changes: P« 

AvQiiability: A ll dov i cos 

30 24-rl Funct i on DESCRiPT i oN 

The SotPerm command is usod to updato tho contents of Pv eetMu m (wli i ch stores th e p e rmission for 

The now va l u e for Pv eetNt m i s a comb i nat i on of th e old and new p e rmiss i ons i n such a way that th e 
more rostr i ct i vo permission for oach part of Pv eetfou m is kopt. 
35 MO's permiss i ons ar e set by M1 th e r e for e th e y can't b e chang e d. 

M1's permiss i ons cannot b e changed by SotP e rm. M1 is a writ e onc e m e mory vector and Its 
perm i ssions are sot by writing to i t. 

Sec Sect i on 8.1 .1 .3 and S e ction 8.1 .1 .5 for mor e Informat i on about permissions. 
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24-72 Input parameters 

Tabio 27A descr i b e s e ach of th e i nput parameters for S e tP e rm 



Parameter 


Doscrlption 


VeotNum 


Number of the memory vector whose permission is boing 
changed. 


PermVal 


Bitmap of permission for the corresponding Memory Vector. 



Noto: S i nco th i s function has no accompanying signatures, additionai i nput paramotor 
e rror ch e ck i ng i s r e qu i r e d. 

24t3 Output parameters 

Tabl e 275 d e scrib e s e ach of th e output parameters for SotPorm. 



Param e t e r 



D e script i on 



RoeultFiag 



I ndicat e s wh e ther th e funct i on compl e t e d succ e ssful l y or not. I f it d i d 
not comploto ouccossfully, tho reason for tho fai l ure is roturnod horo. 
Soo Sect i on 12.1. 



P Gr /n 



If VoctNum - 0, th e n no P e rm is roturnod. 



If V e otNum ~ 1, th e n o l d Perm Is r e turn e d. 



If VoctNum > 1 , then new Perm is r e turn e d aft e r Pv eett^um-I 



chang e d bas e d on PormVa l - 



15 



24t4 Funct i on sequence 

Th e S e tP e rm command i s i ll ustrat e d by th e fo ll ow i ng pseudocode: 
Accept i nput poramotors VoctNum, PormVal 



Check range of VcctNum 
If invalid 

RcoultFlag < — I n val i d Vector 

20 Output RcoultFlag 

Return 



If (VoctNum = 0) — # No pcrmaoiono for MO 

25 RcoultFlag < — Paoo 

Output RcoultFlag 

Return 

Elocif (VcctNum =■ 1) 
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RcoultFlag < — Paao 

Output RcoultFlag 

Output Pj , 

Return 

Elocif (VcctNum >1) 

f Check that only — ^RW parta arc being changed 

# RW(1) — > RO(0) , RO(0) >RO(0), RW(1) > RW(1) valid change 

# RO(0) > RW ( 1 ) Invalid change 

# checking for change from Readonly to ReadWritc 

temp< - fircGtNum A PcrmVal : 

If (temp = 1 ) # If invalid change io 1 

RcoultFlag < — Inva li dP e rm i ssion 

Output RcoultFlag 

Bloc 

PvGGtMum < — rc2.-mVal 

RcoultFlag < — Paoo 

Output RcoultFlag 

Output Pv eefetfaa 

Endlf 

Return 

Endlf 

22 RoplaooKoy 

inputs K e yRef, K e y l d, K e yLock, EncryptodKey,R& .r-SiGe 

Output: Rosu l tF l ag 

Changes: KKoyRof.koyNum a«^-Rw 




2SA Function de s cr i pt i on 

Th e /? e p/ac e K e y command i s us e d to r e p l ac e th e cont e nts of a non l ock e d k e yslot, which moans 
rep l acing th e k e y, i ts assoc ia t e d k e y l d, and th e l ock s tatus bit for th e keys l ot. A k e y can only b e 
rep l ac e d if the s l ot has not b ee n l ocked i . e . the K e yLock for th e s l ot i s 0. Tho proc e dur e for 
rep l acing a k e y a l so roquiros know le dge of tho value of th e curr e nt koy i n the keys l ot I. e . you can 
only r e p l ac e a k e y if you know th e current key. 

Whonovor tho /?op/aceKQy function i s oQl l od, th e ca lle r has tho ab i lity to mak e this n e w k e y th e 
final k e y for th e slot. This i s accomp l ish e d by passing i n a new valu e for the K e yLock flag. A n e w 
KeyLock f l ag of 0 koops tho s l ot un l ocked, and perm i ts further roplacomonts. A now KoyLock flag 
of 1 m e ans the slot i s now l ooked, with tho now k e y as the fina l koy for tho s l ot i .e. no further key 
roplacem e nt i s porm i ttod for that slot. 
2272 Input PAnAMCTcnc 




Availability: 



A l l d e vic e s 
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Tablo 276 dosor i bes e ach of th e input paramotoro for R e p l aookoy. 



Parameter 


Doscription 


KeyRef 


For common key Gignaturo gonoration: KoyRofikeyNum " Slot number of the 


key to be used for testing the input signature, and will be replaced by the new 


No variant key eignature gonoration required :4 :y^^i:^^v 




Koyld of the new key. The LSB represents whether the new key is a variant or a 
common koy. 


KeyLock 


Flag indicating whether the new key should be the final key for the slot or not. (1 
~ final koy, 0 ~ not final koy) 


EncryptedKe 




y 


&^Kew(^Pkf^'^<Bew-where Kew " KeyRef. getkey(). Refer to Section 10.1 .3.1 




External random value required for verifying input signaturo. This will bo tho R 
from the input signature generator (device generating S/Ge)- In this case the 




input signature is a gonoratod by calling tho GofProgromKoy function on a Koy 
Programming device. 




External signature required for authenticating input data and determining the new 
key from the EncryptedKey. 



5 
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22.2.1 I nput s i gnatur e g e n e rat i on data format 

Figure 374 shows th e input signaturo gen e ration data format for tho /?op/ocoK e y funct i on. 
Tah i n 277 g i vQG tho paramntorn i nn l udnri i n S I G | = F^opijoQ i^ py 



Parameter 






Valuo sot 




Length in bits 


Valuo sot internally 


from Input 


Chipid 


48 


This QA Device's 






Chipid 


Koyld 


32 






Re 


1-60 






EncryptedKoy 









5 — . 
22t3 Output parameters 

Table 278 describes oach of the output paramotors for RoplacoKoy. 



Parameter 


Description 


RocuKFlag 


Indiootos whether the function complotod successfully or not. If It did 
not complete successfully, the reason for tho failure is roturnod horo. 


Soe Section 12.1. 



10 

22r4 Function sequence 

Th e /? e p/ac e K e y command is illustrat e d by th e follow i ng pseudocod e : 

Accept input paramctcra KcyRcf , — Key Id, — KcyLoclc , 

EncryptcdKcy , R^ -? — SIGs 

15 

Chcclc KcyRcf . IccyNum range 
If invalid 

RcoultFlag < — InvalidKcy 

Output RcoultFlag 

20 Return 

Bndlf 

#GoncjrQtc mcaaagc for paoaing- to Generates ignaturc function 
data < — (Chipid | Kcyld | KcyLoclc | R^^ | EncryptcdKcy) 

25 #Goncjratc gigrnaturc 

SIGfc -^ — GcnoratoSignaturQ (KcyRcf , data, Null , Null) — # Refer to Figure 
37 4 . 
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# check If the key alot ia unlocked 



If (KoyLoGlc # unlock) 

— RcoultFlag < — KeyAlreadyLookod 

5 Output RcoultFlag 

Return 

Endlf 

^Tcat CICs 
10 If (SIG ^ , # SIGi,) 

RcoultFlag < — BadS i g 

Output RcoultFlag 

Return 

Endlf 

15 SIGfc < — GcncratcSignaturc (Key, null, Rb^ R^ ^- 
Advance R^ , 

# Muot he atomic muat not be poaolblc to remove power and 

have Kcy^Id and Key^Num mlamatchcd. Alao preferable for KeyLock, 

although not atrictly^ required. 

20 KKeyNw n < S I G fc, ^ EncryptodKoy 

— Keyt^Keyfrkim < Koy l d 

Keyteekite^^fea— < — KcyLoclc 

RcoultFlag < — Paoo 

Output RcoultFlag 

25 Return 

23 Si§fiM 

Inputs KoyRof, Flo l dSoioct, F i oldVa l Longth, Fio l dVal, Ch i pid, 

Output: Resu l tF l ag, RL i-StGewt 

Changes: Rt 

30 AvQilability: Trusted dovico on l y 
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Funct i on description 

Tho S/gnM funct i on i s usod to gonorato tho appropr i ate digital signaturo roqu i rod for the 
autiientioated wr i te function Wrtt e Fi e ldeAuth. Th e S/gnM function is used wli e n e v e r th e callor 
wants to write a n e w valu e to a fi e ld that roqu i ros l<oy based wr i t e acc e ss. 
5 Th e call e r typ i ca l ly passes the now f i e l d va l uo as input to tho S/gnM funct i on, tog e ther with tho 
nonce (Rg) from th e OA D e vic e who w ill r e ce i v e th e g e n e rat e d s i gnaturo. Th e S/gnM function then 
produces the appropr i ate signatur e S I Ge » t. Note that SIG e^ t may n ee d to bo trans l ated via tho 
Translate funct i on on i ts way to th e f i na l Writ e FieldsAuth QA D e vice. 

Th e S/gnM function i s typ i cal l y used by th e syst e m to update proauthor i sat i on fields ( S e ct i on 
10 31.1.3). 

The key usod to produce output s i gnatur e S I Ge ut -dep e nds on wh e th e r th e trust e d d e vic e shar e s a 
common key or a variant key with the QA D e v i c e dir e ctly r e c e iv i ng th e signatur e . The K e yRef 
obj e ct pass e d into th e i nt e rfac e must be s e t appropriat el y to refl e ct th i s. 

2372 I nput parameter s 

15 Tabl e 279 descr i bes e ach of th e input paramet e rs for SIgnM. 



PTr?innf*tf r 




KeyRef 


For genorating common koy output signaturo: 

Ref.keyNum ~ Slot number of the key for producing the output signature. 


saGee^producod using.KKoyRof koyNum because the device receiving SIGea^shares 
l^oyRof koyNum With tho trustod dovlce. 
KoyRof.usoChiptd ~ 0 






For generating variant key output signature: 


KoyRof-koyNum ~ Slot number of the key to bo used for generating the variant r 

SICo^^prnriiihftH lining n vnrinnt of K|^oypttfj^oy,^j„^ hpfiniifie tha devine rftnaiving 
SIGea^shares a variant of KKoyRof koyNum with the trusted device. 
KoyRcf.usoChipId ~ 1 

KoyRof.chipId - Chipid of the device which recoivos S/Geut? 




FicldNum 


Field number of tho field that will bo written to. 






FieldDataLengt 
h 


The length of the FieldData in words. 


FioldData 


The value that will be written to the field selected by FioidNum. 






External random valuo usod in the output signaturo generation. 

Rs is obtained by calling ihe.Random function on the device, which will receive 


the SICeat from tho S/g/?M function, which in this case is the WriteAutli function or 


the Trans fato function. 


GhipM 


Chip identifier of the dovico whose WritoAutfi function will bo callod subsoquontly 
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to porform an authontioated wr i te to its FioldNum of mo. 



Output parameters 

Tab le 280 d e scribos each of the output paramotoro. 
Tab l e 280. D e scr i pt i on of output parameters for S i gnM 



Param e t e r 



D e script i on 



R e eultFlog 



I ndicates whetlior th e funct i on comp le t e d successfu l ly or not. I f i t did 
not comp l oto succossfu l ly, th e reason for th e fai l ure i s return e d her e . 



See Section 12.1. 



I nterna l random value used in the output signatur e . 



SIG 



SIGoo t ~ SIGK eyRe Kdata I I Rfe) as shown In Figur e 373. 
As p e r Figure 373, R^ i s actua ll y R^ ^af^d-R^,4s-R6-V 



produc i ng S I Ge ut -to be app li ed to Wr i t e Auth funct i on. 



10 



33t3t^ S*6e«t 

R e f e r to Section 20.2.1 . 

23t4 Funct i on SEQUENCE 

Th e SignM command is i llustrated by the fol l ow i ng ps e udocod e : 
AcGcpt input paramctcro KcyRcf , — FicldNum, — FicldDataLQiigth 



15 



# Accept FicldData worda 
For i = 0 to FicldValLcngth 

Accept next FioldDa fea 

EndFor 



20 



25 



Accept Chipld^ — Rb 

Chcclc KcyRof . IcoyNum range 
If invalid 

— RcaultFlag < — I nva li d K e y 

Output RcoultFlag 

Return 



Endlf 

#Conorato mcaaagc for paaaing Into the Generates Ignaturc function 
data < — (RWCcnacI FicldCelect |ChipId|FiQldVal) 



30 



#Gonc3rato gigrnaturc 

SJGe^ ^ < GeneratoSignaturG (KcyRef ,data,Rb^) # Refer to Section 
20.2.1. 
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Advanco Rfeto 11^ ^ 
RooultFlag < — Paoo 

Output paramctcro RooultFlag, — Ri^BiG^ 

Return 
5 Funct i ons on a 

Key programm i ng QA Device 
24 Concopts 

Th e k e y programming dovico i s us e d to r e placo keys i n othor d e vic e s. 

Tho koy programming d e vice stores both the o l d key which w i l l bo roplac e d in th e devic e b ei ng 
10 programm e d, and th e now koy which w i ll rop l aco tho old koy in tho d e vic e being programmed. 
Tho keys r e s i d e i n normal k e y slots of tho k e y programming d e vice. 

Any k e y stor e d i n th e k e y programming d e vic e can be us e d as an old key or a n e w k e y for th e 
dev i ce b e ing programm e d, provided it I s p e rm i tted by th e koy roplacoment map stored within tho 
koy programming dovico. 

15 F i gur e 375 is r e pr e s e ntat i on of a koy rop l acomont map. Th e- 1s i ndicat e s that tho now koy Is 

p e rm i tted to r e plac e th e old k e y. Tho Os indicat e s that k e y roplacoment i s not perm i tt e d for thoso 
posit i ons. Th e positions In F i gure 13 which ar e b l ank Indicat e a 0. 

According to th e k e y roplacemont map I n Figur e 13, Kg-can r e p l ac e K^, can r e p l ace K^, K4 7 
K fe,K/, can roplaco K^, Kq can replace K;^, and can replaco K^. No k e y can r e p l ace i tself. 

20 Figur e 375._ K e y replacement map 

Tho koy roplacomont map must bo readabl e from an e xterna l system and must b e updat e abl e 
by an authenticated write. Thoroforo, tho koy rop l acom o nt map must bo stored in an mo ffo/d. 
Th i s requires on e of th e k e ys r e s i ding in th e k e y programming d e vic e to be hav e R e adWr i t e 
acc e ss to tho koy roplacoment map. This key i s roforrod to as th e koy roplacomont map key 

25 and is us e d to updat e th e k e y roplacomont map. 

Th e r e w il l on e k e y replacem e nt map field in a key programm i ng dev i c e . 

No koy roplacomont mappings aro a ll owed to tho koy r e p l ac e m e nt map key b e cause It shou l d 
not be used i n anoth e r d e v i c e b ei ng programm e d. To prevent tho koy rop l ac e mont map koy 
from b e ing usod i n koy rop l acomont, In case tho mapping has boon accid e ntally changed, th e koy 
30 roplacomont map koy i s allocat e d a fix e d k e y slot of 0 I n a ll key programming d e vic e s. I f a 

GotProgram function is invoked on the koy programming devic e with tho koy rop l acomont map 
koy slot number 0 i t imm e d i ate l y returns an e rror, oven befor e the key r e plac e m e nt map i s 
checked. 

Th e k e ys Kq to K/ i n the k e y programm i ng d e vic e ar e i n i t i ally sot during th e i nstantiation of th e k e y 
35 programming dovico. Thereaft e r, any koy can bo roplaced on tho koy programming d e vice by 
another koy programming devic e If a k e y i n a koy slot of th e koy programming devic e is be i ng 
rep l aced, the koy rop i ac e m e nt map for tho o l d koy must b e i nva li dat e d automat i ca l ly. This i s 
done by setting tho row and co l umn for th e corr e spond i ng k e y s l ot to 0 For e xamp le , i f K4 JS 
r e plac e d, then co l umn 1 and row 1 aro sot to 0, as i nd i cated in Figure 376. 
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Tho now mapping informat i on for K t ^ i s thon enter e d by,p e rforming an auth e nt i cat e d wr i t e of th e 
koy rop i acomont map fie l d us i ng the koy rop l ac e ment map koy. 
2AA Key replacement map data s tructure 

As mention e d i n Section 2A, tho koy rep l acomont map must bo roadablo by external syst e ms 
and must b e updat e abl e using an auth e nt i cated write by tho koy rop i acomont map koy. 
Th e r e for e , th e koy rop i acomont map i s stor e d in an mo fio l d of tho k e y programming d e vic e . Th e 
map is 8 x8 b i ts in siz e and th e r e for e can bo stor e d in a two word fio l d. Tho LSW of koy 
rop i acomont map stor e s th e mapp i ngs for — K ^.Tho MSW of koy rop i acomont map stor e s tho 
mapp i ngs for K4 K/. Ref e rring to F i gure 375, koy rop i acomont map LSW is 0x ^ 10092000 and 
MSW is 0x1022^010. Referring to F i gur e 376, after is repl a ced in the f<oy programming 
d e vic e , 1h© valuo of tho koy rop i acomont map LSW is 0x40090000 and MSW Is 0x40224040. 
Tho koy rep l acomont map fio l d has an M1 word r e presenting i ts attributes. Tho attribute sott i ng 
for this fi el d is specifi e d i n Tab l e 281 . 

Table 281 . Koy r e p l ac e m e nt map attribute setting 



KoyNum 0 



Attribut e 



Valuo 



name 



TYPE KEY MAP 



Refer to Appendix A. 



NonAuttiRW f^ 



AumRW 



K e yP e rms Q 



^—1 IVJI 



r e pr e s e nts a koy roplacoment map. 



On l y on e such fi e ld p e r k e y 
programming QA D e v i c e . 



Value such that fi e ld s i z e i s 2 



words 



Explanation 



Indicates that tho fie l d va l ue 



Slot number of th e key replacement 
map /c e y. 



No non authenticat e d wr i t e s i s 



perm i tted. 



Authenticat e d writ e is p e rm i tt e d. 



No Docromont On l y permission for 
any k e y. 



24.2- 



Bas i c scheme 



Th e K e y R e p l ac e ment sequ e nc e is shown F i gure 377. 

Fo l lowing is a s e quential description of th e transf e r and rol l back process: 

20 4t Tho Systom goto a Random numbor from th e QA D e v i o e whos e k e ys aro go i ng to be rop l aood. 

a Th e System makos a G e tProgromKoy Roqu e st to th e K e y Programming QA D e vice. Th e K e y 

Programm i ng QA Dev i ce must contain both keys for QA Dov i co whoso keys aro b ei ng r e placed 
Old Keys wh i ch ar e tho keys that exist currently (b e for e k e y rop l ac e m e nt), and th e N e w K e ys 
which ar e th e keys wh i ch tho QA Device wil l hove after a succ e ssful proc e ss i ng of the R e a - 

25 plooKoy Request. Tho GotProgramKoy Request i s ca l led with th e Key numbor of tho Old Koy ( i n 
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th e K e y Programming QA D e v i co) and th e Key Numb e r of tho N e w Key ( in tho Koy Programm i ng 
QA Dov i oo). and th e Random numb e r from (1). Tho K e y Programming OA Dov i oo va l idatoo tho 
GotProgramKoy Roquoet basod on tho KoyRopfacement map, and thon produces th e n e cessary 
GetProgramKoy Output The GotProgramK e y Output cons i sts of tho encrypted Now Koy 
5 (oncryption dono using the O l d Key), along w i th a signature us i ng the Old Koy. 

3= Tho Systom then app li es G e tProgr a mKey Output to the QA Dovic e whose k e y i s being roplacod, 

by calling the Rop/acoK e y function on it, passing i n th e GotProgramKoy Output. Tho Rop l aooKoy 
funct i on w i ll d e crypt tho e ncrypt e d N e w Key using tho Old Key, and th e n replace i ts Old Koy w i th 
th e decrypt e d N e w Key. 

10 2§ Functions 

GetProcamKey 



25.1.1 Function d e script i on 

Th e G e tProgramKoy works in conjunction with th e f?ep/Qco/Coy command, and is us e d to rbplaco 
the spocifiod k e y and i ts K e yld. This function Is ava i lable on a koy programming d e vic e and 
producoG th e nocossary inputs for tho /?op/ocoK e y function. The Rep/aco/Coy command i s thon 
20 run on tho d e vic e whos e k e y is b ei ng rop l acod. 

Th e i< e y programming devico must havo both tho o l d koy and tho now k e y programmod as i ts 
k e ys, and tho koy rop l accmont map stored in ono of its mo fiold, b e for e GetProgramKey can b e 
called on tho dovico. 

D e p e nd i ng on the O l dKoyRof object and th e NowKoyRef obj e ct pass e d i n, th e G e tProgramKoy 
25 will produce a signature to rop l aco a common koy by a common koy, a var i ant k e y by a common 
koy, a common koy by a var i ant k e y or a var i ant koy by a variant key. 



15 



Inpufe 

Output: — 
Changes: 

Avaiiability: 



OldKoyRof, Chip i d, R^^., KoyLock, NowKoyRof 

Rosu l tF l ag, Rfa,EncryptodKoy, Koy l dOfNowKoy, S I G< 

Rw 

Koy programm i ng dov i co 



PEA23US 



804 



25.1.2 Input param e ters 

Tablo 282 dosor i b e s oaoh of the i nput paramotoro for GotProgramK e y. 



Parameter 


Description 


OlaKeyRef 


O/cf key is a common key: OldKeyRef.koyNum - Slot number of tho old key in the Key 


Programming QA Dovioo. The devico whoso koy is being roplaced, shares a common 

l^^y-^OIdKoyRof koyNum^'^h thft kpy prngrnmming dfax/ir.n OIHKoyRof .MQOChlpM ~ ^ 


Old key is q voriont kov KevRof.kovNum ~^ Slot numbor of the old kevin tho Kov ^ 
Programming QA Devico. that will be used to generate the variant koy. The device 




whose key is being replacod, shares a variant of Koi^jf^oypcf [^^yj^^^ with thp key 


programming qovico. vJiotvoyKOT.usetrnipiQ — i uiQi\eyKOT.Gnipici — Unipici oT tne 

device whose variant nf KQi^j^^oyf^pf i^qyi^jum key is hfting rnplnnnri 






Chip identifier of the device whose key is boing replaced. 


RE 


External random value which will bo used in output signature gonoration. is obtained 
by calling the./?a/7c/o/r? function on the device being programmed. This will also receive 


the SIGout from the GeffVogramKey function. SIGout is passed in to ReplaceKey 


Function. 


KoyLock 


Flag indicating whether the now kev should be unlocked/locked into its slot 


NewKeyRef 


Key Programming QA Device. Tho dovico whose key is boing replaced, will receive a 




common key K NowKoyRof koyNum from the key pro gramming device. 
NowKoyRGf.usoChipId ~ 0 




NewKoy is a variant koy: NowKeyRof.koyNum ~ Slot number of tho new key in the 
Key Programming OA Dovice. that will be used to generate the new variant key. The 




dovico whoso koy is being replaced, will receive a now koy which is a variant of 
KroewKeyRof koyNum from tho koy programming dovico. NewKoyRcf.usoChipId ^ 1 


MewKoyRof.chtpfd ~ Chipjd of the devico rocoiving a now key, the new key is a variant 





5 
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25.1.3 Output param e t e rs 

Tabic 283 descr i bos oaoh of tho output param e t e rs for G e tProgramKoy. 



Parameter 


Description 


ReBultFlog 


indicates whether the function completed successfully or not. If it did not 
oompiete suocessfuiiy, tho reason for tho failure is roturnod horo. Soo 


SoGtion 12.1 and Table 28^1 


fk 


intornal random value used in tho output signaturo. 


EnoryptedKey 




KoyldOfNowK 
ey 


Koyid of the now koy.Tho LSB reprosonts whether the new key is a variant 
or a common koy. 




_ - Qin^ ,Jc\nin 1 R. 1 R^^ 



5 

Toblo 28 4 . R e su l tFlag d e fin i tions for GetProgramKoy 



Result Flag 


Description 


invalidKoyRepiacementl\/lap 


Key replacement map field invalid or doesn't exist. 


KoyReplacementNotAllowed 


Key replacement not allowed as per key repiacoment map. 



25.1.3.1 S/Ge «t 

10 F i gur e 378 shows th e output signature g e n e rat i on data format for the 

GetProgramKoy funct i on. 

25.1. 4 Function s e qu e nc e 

Tho GoffirogramK e y command i s il lustrat e d by th e fol l ow i ng pseudocode: 

Accept input paramctcro OldKcyRcf , — Chipid, — R^t — KcyLoclc , 

1 5 NcwKcyRcf 



# key replacement map key at or cd in KO, muat not be uacd for 7ccy 
replacement 

20 If (OldKcyRcf .kcyNum o o) v (NcwKcyRcf . kcyNum ° 0) 

RcoultFlag < — Fail 

Output RcoultFlag 

Return 

Endlf 

25 

ChcclcRangc (OldKcyRcf . IccyNum) 
If invalid 
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RcoultFlag < — I nva li dKoy 

Output RcoultFlag 

Return 

Endlf 



ChcGlcRango (NowKcyRcf . IcoyNum) 
If invalid 

— RcoultFlag < — InvalidKoy 

Output RcoultFlag 

Return 

Bndlf 



# Find MO worda that rcprcacnt the 7ccy replacement map 
WordSclcetForKcyMapFicld < GetWordSolcctForKeyMapFicld (Ml) 
If (WordSclcctForKcyMapFicld =0) 
— RcoultFlag < — I n vo l Id KoyRoplacomentMap 

Output RcoultFlag 

Return 

Endlf 



^ChcclcP^apPermita key replacement 
RcplacoOK 

< ChcGlcI ^ laprcrmito (WordSelcctForKcyMapField, OldKcyNum, NewKcyNum) 
If (RcplaccOK = 0) 

— RcoultFlag < — KeyR e p l acemontNotAllow e d 

Output RcoultFlag 

Return 

Endlf 



checka are OK, now generate Signature with OldKey 
SIGt ,— < — GeneratcSignature (OldKeyRcf , null , R^ ^J^ 
#Cot new key 

Ksew¥be?f< — NewKcyRef . get Key ( ) 

#GcnojrQ to Encrypted Key 
BncryptcdKcy < SiGi,— ^-i%je%«ey 

#got JbaoG key or variant Jccy bit 0 of JCcyJd 

If (NewKcyRef .uoeChipId ^ i) 
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Kcyld< 0x00 01 A 0x00 01 

Elac 

Kcyld < 0x0001 A 0x0000 

Endlf 

#gct the new key Kcy^Id to the Kcyld bita 1 30 of Keyld 

KGyIdQfNGwKcy< SHIFTLEFT (KcyldOfNcwKcy, 1) 
KQyId< — Koyld v KcyldOf NcwKcy 

§Cct the KcyLock aa per input bit 31 of Kcyld 

KoyLoalcc — SHIFTLEFT (KcyLook, 31) 
# KoyId< — Kcyld v KcyliOclc 

^Gcncjratc meaaage for paaaing in to the CcncratcSlgnaturc 

function 

data < — Chipid | Koyld | | EncryptcdKoy 
§Ceneratc output aignatiH Fe 

SiGettt— < — GcnGratoSignaturc (OldKcyRcf , data, null.^ull) — 
# Refer to Figure 37 8 
Advance Ri,to 
ReoultFlag < — Paoo 

Output ReoultFlag, — I^S^Gea fe, Keyld, Encrypt odKey 
Rctur R 

25. 1.^.1 WordSQloctForFiold GotWordS o loctForKoyMQpFiold(M 1 ) 

Th i s funct i on g e ts th e words corr e spond i ng to th e koy roplaoomont map i n MO. 
FicldSizc [1 6 ] — < — 0 # Array to hold FicldSige aoouming there are 16 
f iolda 

NumFielda < — FindNumbcrOf FicldoInMO (Ml , FicldSige) 

§Find the Jccy roplaccincnt map field 
For i < 0 to NutnFicldo 

If (TYPE^KEY^jyiAP « Ml [i] .Type) # Field io key map field 

MapFioldNum < — i 

Return 

Bndif 

EndFor 

#Gct tiio worda correaponding to the key replacement map 
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WordMapForFicld< — CctWordMapForFiQld (MapFicldNum, Ml ) 
Return WordficlcctForFiQld 
25.1.4.2 NumFi e ids FindNumOfFieid6inMO(Ml,Fi e fdSiz e O) 
R e f e r to Figure 10.^.1 for dota il o 
5 26.1.4.3 WordMapForFi e ld G e tWordMapForFfefd(Fi e ldNumMl) 
R e f e r to Soct i on 19.4.2 for details. 

25. 1.4.4 RopfacoOK ChockMapPermiteOA/ordSofoctForK e yMapFi e id, OidKoyNum, 

N e wKeyNum, MO) 

This funct i on ch e cks wheth e r key r e p l ac e ment map porm i tG koy roplacoment. 

10 

^laolatc Kcy^RcplaccmcntMap baaed on Word€clcctForKcyMapFlcld. and 

KcyRGplaccmcntMap [6 4 bit] 

15 ^laolatc pcrmlaalon hit corrcaponding for NcwKcy^Num in the map 

for OldKcyNm 

RcplaccOK < — KcyRGplaGomcntMap [ (GldKcyNum x 8 I NewKeyNum) bit] 
Return ReplaccOK 
2§72 ReplaccKiiy 

20 I nput: KoyRof, Koyld, KoyLock, EncryptodKoy,Rb ,rSIGE 

Output: ResultF l ag 

Changos: KKeyNum-and-RL 

AvQilablUty: K e y programming dovioo 

25.2.1 Funct i on d e scr i ption 

25 This funct i on is used for r e p l acing a koy in a koy programm i ng dovico and is s i m il ar to the generic 
ffop/ocoKoyf unction(Rofor to Soct i on 2 4 ), w i th an additional st e p of s e tting th e KeyRef.koyNum 
co l umn and KoyRof-koyNum row k e y r e p l acement map to 0. 

25.2.2 I nput param e t e rs 

Rofor to Soction 22. 

30 25.2.3 Output paramotoro 

R e f e r to Section 22. 
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25.2. ' 1 



Funotion Goquonoo 

Tho RopiaceKoy command is il l ustrat e d by the fo ll owing ps e udocodo: 

Accept input paramctcro KcyRcf ^ — Kcyld, — Encr^'ptodKcy ^ — CIGa 



^Ccncratc mcaaaga for paaaing into CcncratcCignaturc function 
data < — (Chipldl KGyId|Ra|EncryptcdKGy) # Refer to Figure 374. 



# Validate Kcy^Rcf, — and then verify aignaturc 
ReoultFlag - ValidateKeyRef AndSignaturo (KcyRef ^ data, Rg/ Rfe ->- 
— (ReoultFlag ^ Paoo) 

Output ReoultFlag 

15 Return 

Endlf 



# Check if the key a lot ia unlocked 
20 laolatc KcyLoclc for KeyRcf 

If (KcyLoGk ° lock) — 

ReoultFlag < — KoyAlroadyLockod 

Output ReoultFlag 

Return 

25 Endlf 

SlCj, < — Generates ignaturo (Key, Null , R^, Rfa -f- 
Advance R^ 

# Find MO worda that rcprcacnt the key replacement map 

30 WordSeleotForKeyMapField < GetWordSeleetForKeyMapField (Ml) 

# get the bit a corresponding to the KeyRef .key^Num row and column 
to 0 

# i.o invalidate the Jcoy roplaoojnont map for Key^Ref . keyNum , 

35 #Muot be done before the key ia replaced and muot he atomic with 

Jccy jroplQComonfc. 
SetFlag 

< — SetkeyMapForKeyNum ( WordSelectForKeyMapFicld, KcyRef . IceyNum, MO ) 
If (SetFlag » 1) 
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ff Must bo atom i c — mu s t not b e possib l e to romovo power and havo Koyld and 
KeyNum mismatchod 
-KKeyMum-^-^*S fc g EnoiyptodKoy 



— KeyldKoyNum- 

5 KcyLoclcK eyaftgi-^ — KcyLoclc 

RcoultFlag < — Paoo 

Bloc 

RcoultFlag < — Fail 

Bndlf — 

10 Output RcoultFlag 

Return 

25. 2. ^. 1 WordSoloctForFi e ld G e tWordS o l o ctForKoyMapFi e ld(M 1 ) 

Rof o r to F i gur e 25.1. 4 .1 for details. 
25,2.^,2 S e tFlag SotKoyMapForK e yNum(WordSel e ctForKoyMapFi e ld,K e yNum, MO) 
15 This function invalldatos tho k e y roplacomont map for KoyNum. 

#Jgoiato KcyRcplaccmantMap baaed on WordSclcctForKcy^MapFicld and 

KcyRcplacctncntMap [6 4 bit] 

20 # got KeyNum row (all bita) — to 0 In the KeyReplaccmcntMap 

For i g 0 to 7 

KcyRcplaGcmcntMap [ (KeyNum x 8 i i)bit] — < — G 

BndFor 



25 # Set Kcy^Num column to 0 in tho KeyReplaccmcntMap 

For i = 0 to 7 

KeyReplaccmcntMap [( ix 8 t KeyNum) bit] — < — G 

BndFor 
SetFlag < — t 
30 Return SetFlag 
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Functions 
Upgrade device 
( I nk re/rll) 

26 Conc e pts 

5 Purpose 

I n a pr i nting app l icat i on, an ink cartridge contains an Ink QA Dov i oe storing tho ink r e ma i n i ng 
va l ues for that ink cartridg e . Th e ink remaining valu e s d e cr e ment as tho ink cartridgo is usod to 
print. When an i nk cartridg e is phyGically ro/fi ll od, tho I nk QA Pov i co ne e ds to be /og/co//y r e /fi l l e d 
as wo ll . Thoroforo, tho main purpos e of an upgrade i s to ro/fili the ink remain i ng values of an Ink 

10 QA D e vic e i n an authoris e d manner. 

Tho author i sation for a ro/f ill is achieved by using a Valu e Upgrador QA D e vic e which contains all 
tho nooossary functions to ro/wr i to to tho I nk QA D e v i c e . In this case, tho value upgrador is called 
an ink R e fili QA D e vic e , wh i ch is us e d to fil l /r e f ill i nk amount in an I nk QA Dov i co. 
When an I nk R e fi l l QA D e vice incr e ases (additive) tho amount of ink remain i ng in an I nk QA 

15 Devic e , the amount of i nk remain i ng i n th e I nk Refi ll QA D e v i ce is oorrospond i ngly decreased. 
Th i s m e ans that th e Ink Ref i ll QA D e vic e can on l y pass on what e v e r ink remain i ng va l ue i t itse l f 
has boon issu e d with. Thus an I nk Refi l l QA Dev i ce can itse l f b e r e pl e nish e d or topped up by 
anoth e r I nk R e fi l l QA Dev i ce. 

The Ink Refi l l QA Dovico can a l so b e r e f e rred to as tho Upgrad i ng QA D e v i c e , and tho Ink QA 
20 D e vic e can also b e r e f e rred to as tho QA D e v i c e b ei ng upgraded. 

Th e r e fill of i nk can also b e ref e rr e d to as a transfer of i nk, or transf e r of amount/valu, or an 
upgrade. 

Typica l ly, th e l ogica l transfer of ink is don e only aft e r a phys i cal transf e r of ink is succ e ssfu l . 

2§t2 Requ i rements 

25 Th e transf e r process has two bas i c requ i r e m e nts: 

Th e transf e r can on l y bo performed i f tho transfer request is va l id. Tho va li d i ty of tho 

transf e r r e qu e st must bo comp le t el y ch e ck e d by the I nk R e f il l QA D e v i ce, before it 
produc e s th e r e quir e d output for the transf e r. I t must not b o possibl e to apply the transfer 
output to the ink QA Devic e , if tho I nk R e fil l QA D e vice has been a l r e ady b ee n roll e d back 
30 for that particular transfer. 

^ A proc e ss of ro l lback i s ava i lablo if the transf e r was not received by th e I nk QA D e vic e . A 

ro l lback is perform e d on l y if the rollback r e qu e st i s va li d. The va li dity of th e rol l back r e qu e st 
must be comp l et el y ch e ck e d by tho I nk R e fi ll QA Dev i ce, before it adjusts its valu e to a 
pr e v i ous valu e boforo tho transfer request was i ssued. I t must not bo possib l e to ro l lback an 
35 I nk R e fil l QA Device for a transfer which has a l r e ady b ee n app lie d to tho Ink QA D e v i c e i. e 
the I nk R e fill QA Dovico must only bo rol l ed back for transf e rs that havo actua l ly fo il od. 
26t3 Bas i c scheme 

Tho transfer and ro ll back process i s shown i n F i gur e 37 9 . 

Fol l owing i s a s e qu e ntia l description of th e transf e r and ro ll back procoss: 
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4, Tho SyGtom Roods th e m e mory vootors MO and M1 of tho ink QA D e vic e . Tho output from th e 

road which i nc l udos tho MO and M1 words of the I nk OA Dovioo, and a cignaturo, i s passod as an 
i nput to th e Tranefor Requ e st I t is essent i a l that MO and M1ar e r e ad tog e ther. This onsuros that 
th e fi e ld informat i on for MO fi e lds ar e corr e ct, and hav e not boon mod i f i ed, or substituted from 
5 anoth e r dev i co. Ent i r e MO and M1 must be read to ver i fy tho oorrootnoss of th e subsoquont 
Transf e r Request by the I nk Refill QA Dovico. 

2-, Tho Systom makoo a Trorjsfor Roqu e st to tho I nk Ref ill QA Dov i co with the amount that must bo 

transferred, the field in tho I nk Refil l QA Dev i ce tho amount must be transforrod from, and the fioid 
in I nk QA D e vic e the amount must b e transforrod to. Th e Transf e r Roqu e st a l so inc l ud e s th e 

10 output from R o ad of th e I nk QA D e vic e . The I nk R e f ill QA Dov i co va li dates tho Tranofor Roquost 
based on tho Road output, ch e cks that it has e nough valuo for a succ e ssful transf e r, and th e n 
produc e s the necessary Transfer Output. Th e Transf e r Output iyp l caWy cons i sts of n e w fi el d data 
for tho fio l d b e ing r e fi lle d or upgrad e d, additiona l field data r e qu i r e d to e nsur e th e corr e ctn e ss of 
tho transfer/rollback, along w i th a s i gnature. 

15 3^ Tho Systom thon oppHos tho Transf e r Output to th e Ink QA Dev i ce, by call i ng an authont i catod 

Write function on i t, passing in tho Transfer Output. The Write is either successful or not. If the 
Write i s not successfu l , thon th e Syst e m will repeat ca ll ing the Write funct i on using th e sam e 
transf e r output, which may be succosGfu! or not. I f unsucc e sfu l the Syst e m w il l i n i tiate a rollbacl < of 
th e transf e r. Th e roilbaci^ must be perform e d on th e Ink R e fil l QA D e vic e , so that i t can adjust its 

20 va l uo to a pr e v i ous valu e b e for e the curr e nt Transf e r R e qu e st was init i at e d. It i s not nec e ssary to 
perform a rollback i mmedlato l y aft e r a fai le d Transfer. Th e I nk QA Dev i c e can still be usod to 
print, if th e r e i s any ink r e ma i n i ng i n i t. 

4-. Tho SyQtom Gtarto a rollback by Reading tho memory vectors MO and M1 of the I nk QA Devico. 

& Tho Systom makos a StartRollBack Requ e st to th e Ink R e fi l l QA D e vic e w i th samo i nput 

25 paramotors as tho Transfer Roquost, and tho output from R e ad i n ( 4 ). Th e Ink R e fi l l QA D e v i c e 

va l idates the StartRollBack R e qu e st bas e d on th e R e ad output, and th e n produc e s th e n e c e ssary 
Pro rolltKBCk output. The Pre - rollback output cons i sts on l y of additiona l fiold data a l ong with a 
signature. 

^. Th e Syst e m then app li es tho Pre rollback Output to tho I nk QA D e v i c e , by ca lli ng an 

30 authenticat e d Wr i te function on i t, passing in tho Pro ro ll back output. Th e Wr i t e i s ei th e r 

successful or not. I f tho Write i s not successfu l , then eith e r (6), or (5) and (6) must b e repeated. 

7= Tho System thon R e ads th e m e mory vectors MO and Ml of th e Ink QA Devic e . 

Th e Syst e m makos a RollBock R e qu e st to th e I nk R e fi l l QA Device w i th sam e i nput param e t e rs 

as tho Transf e r R e qu e st, and th e output from R e ad (7). Th e I nk Refil l QA D e vic e va l idat e s th e 
35 RollBack Request bas e d on the Read output, and thon rolls back i ts fiold corrospond i ng to tho 

transf e r. 

26.3.1 Transf e r 

As w e m e ntioned, tho I nk QA D e v i co stores ink remaining va l ues in i ts MO fields, and its 
corr e sponding M4 words conta i ns field information for i ts i nk rema i ning fields. Tho field i nformat i on 
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consists of th e s i z e of tho fiold, the typo of data stor e d i n f i old and tho aoooso perm i ss i on to tho 
f i e l d. S e e Sect i on 8.1 .1 for detai l s. 

Th e I nk R e fil l OA Dev i c e a l so stores its ink - r e ma i n i ng va l ues in i ts MO f i olds, and i ts cor 
e ssponding M4. words contains f i o l d informat i on for i ts ink remaining fie l ds. 
5 26.3.1.1 AuthoricQtion 

The basic authorisat i on for a transf e r comos from a k e y, wh i ch has authonticatod RoadWr i to 
p e rmission (stor e d in field i nformation as KeyNum) to th e i nk remaining fi e ld (to which ink w i ll bo 
transforrrod) i n the Ink QA Dovlc e . W e will rofor to this key as the r e /7// koy. Th e r e ff// k e y must 
a l so hav e authenticat e d d e crem e nt on l y perm i ss i on for tho ink rema i ning fio l d (from wh i ch i nk wi l l 

10 b e transferr e d) in th e Ink Ref il l QA D e vico, 

After validating th e input transfer r e quest, th e Ink R e f i ll QA Dev i c e will decr e m e nt tho amount to 
be transferred from i ts i nk remaining fiold, and produc e a transf e r amount (prov i ous i nk rema i ning 
amount i n th e Ink QA D e v i c e + transfer amount), add i tiona l fio l d data, and a s i gnatur e us i ng tho 
roffli koy. Note that tho Ink R e fill QA D e vic e can docroment its ink r e maining fi e ld only if th e r e fill 

15 k e y has th e p e rmission to decrement it 

Tho signature produced by tho ink Ref i l l QA D e v i ce is subsequently appli e d to the Ink QA Dovioo. 
Th e Ink QA Dev i ce w il l accept th e transf e r amount only if th e s i gnatur e is va l id. Note that the 
signatur e will only be valid if it was produced using the refill koy which has write permission to tho 
ink - r e maining field b e ing written. 

20 26.3,1.2 Data Type matching 

Th e I nk Rofiil QA D e v i ce va l idates tho transf e r request by matching th e Typo of tho data in i nk 
r e main i ng i nformat i on fiold of Ink QA D e vic e to tho Typo of data i n Ink remaining infonrnat i on fie l d 
of the I nk Ref il l QA Device. This e nsures that e quival e nt data Types are transf e rr e d i .e 
Network_OEM1Jnfrared ink i s not transferred to Notwork_OEM1_oyon ink. 

25 26.3.1.3 Addition validation 

Additiona l val i dat i on of th e transf e r r e qu e st must also b e performed before a transfer output is 
generated by tho Ink Rofi i l QA Dev i c e . Th e se ar e as fol l ows: 

^ For the I nk Refi l l QA Dev i ce: 

4t Whothor th e fie l d be i ng upgrad e d i s actua l ly proGont. 

30 2^ — Wh e ther tho fiold be i ng upgraded can hold the upgraded amount. 

For tho I nk QA Device: 

4^ Wh e ther tho fio l d from which tho amount i s transferred is actua l ly prosont. 

2^ Whothor tho fio l d has suffio i ont amount required for th e transfer. 

26.3. 1. 4 Rollback facilitation 

35 To facilitat e a ro l lback, tho I nk Rof i il QA Dev i ce wi ll store a list of transf e r requests processed by 
i t. Th i s list i s referred to as tho Xfor Entry cach e . Each record i n tho li st consists of tho transfer 
param e ters corr e sponding to tho transf e r r e quest. 
ReHbaek 

A ro ll back r e quest i s va l idat e d by l ook i ng through tho Xfor Entry of tho Ink Rof i il QA D e vic e and 
40 finding tho requ e st that shou l d b e ro ll ed back. After the right transfer request I s found th e I nk Rofi il 
QA Dov i oo chocks that tho output from th e transfer r e quest was not applied to tho I nk QA Dovioo 
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by comparing tho Gurrent R e ad of tho Ink OA Dovioo to tho va l uos i n tho Xf e r Entry cach e , and 
f i na l ly ro il s back i ts ink r e maining fiold (from which the i nk was transforrod) to a proviouo valuo 
boforo tho transfer request was issued. 

Th e I nk Refil l QA D e vic e must b e absolute l y s ur e that th e I nk QA D e v i ce didn't roco i vo tho 
5 transfer. This factor d e t e rmin e s th e addit i ona l f ie lds that must bo writt e n a l ong with transfer 
amount, and a l so tho parameters of th e transf e r r e qu e st that must be stored in th e Xfer Entry 
cacho to faci l itat e a ro l lback, to prov e that th e Pr i nt e r QA D e v i c e didn't actual l y r e ce i ve the 
transfer. 

26. 3. 2. 1 Soquence fio/dG 

10 Th e rollback proc e ss must e nsur e that th e transfer output (which was prov i ouoly produced) for 
which tho rollback is b e ing p e rform e d, cannot bo app li ed after th e rol l back has been performed. 
How do w e ach ie v e this? There aro two s e parat e d e cr e m e nt only Goquonco fields {SEQ_1 and 
SEQ_2) i n tho I nk QA Dov i co which can only bo docromentod by tho Ink Refi ll QA Dov i oo using 
th e r e ff// k e y. Th e nature of data to bo writt e n to th e sequ e nc e f iel ds i s such that e i th e r th e transfer 

15 output or th e pre rol l back output oan be app li ed to tho I nk QA Dovico, but not both i .o they must 
b e mutua l ly e xclusiv e .R e f e r to Tabl e 285 for d e tails. 

Tab le 285. S e qu e nc e field data for Transf e r and Pr e- rol l back 



Function 



wr i tt e n to Ink QA Dovico 



S e quonco Fiold data 



SEQ 1 



ISEQ 2 



Explanat i on 



I nit i a l is e d 



QxFFFFFFFF 



OxFFFFFFFF 



Wr i tten us i ng th e s e quenc e k e y 
wh i ch i s different from the r e fill 



Write us i ng 
Transf e r 



(Prev i ous Va l u e - 2) 



I f Prev i ous Value -int i a l isod 



(Previous Valu e 1 ) 
I f Previous Va l uo ~ 



Wr i tt e n using the refill key us i ng 



Output 



va l u e th e n OxFFFFFFFD 



intial i sod value 



tho rofill key which has 
d e cr e m e nt only 



then OxFFFFFFFE 



permiss i on on tho fie l ds. 



Valuo cannot be written if pro 



rollback 



output is already written. 



Wr i t e us i ing 
Pr e ro l lback 



(Pr e vious Va l u o — V) 

If Previous Va l u e "int i al i s e d 



(Previous Va l uo — 2) 



I f Previous Value ~ 



Writt e n us i ng the rofil l koy us i ng 
tho rofi l l key wh i ch has 



then OxFFFFFFFE 



intialisod valuo 



decrement on l y 



thon OxFFFFFFFD p e rm i ss i onon th e f iel ds. 



Valu e can b e written only if 



Tr a nsf e r 



Output has not boon written. 
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Tho two sequonco fiolds are i n i tial i s e d to OxFFFFFFFF using Goquonoo k e y. Th e sequonco koy is 
difforont to the rof ill koy, and has authonticat e d RoadWr i to ponm i ss i on to both th e soquonco fie l ds. 
Tho transfor output cons i sts of tho now data for tho fi el d boing upgrad e d, field data of tho two 
s e quence fi el ds, and a signatur e us i ng tho refil l koy. Tho fie l d data for SEQ_1 is docromontod by 
5 2 from tho original value that was pass e d i n with th e transfor requ e st. The fie l d data for SEQ_2 is 
decrement e d by 1 from the original valu e that was passed i n with th e transf e r r e quest. 
Tho pro rollback output consists only of th e fi e ld data of th e two s e qu e nc e fi e lds, and a s i gnature 
using tho refi l l koy. Tho field data for SEQ__1 i s docromontod by 1 from tho orig i na l voluo that was 
passed i n with th o transf e r requost. Tho field data for SEQ_2 is docromontod by 2 from tho 

10 orig i na l valu e that was pass e d i n w i th tho transfor requost. 

S i nce the two s e qu e nce fiolds ar e d e cr e m e nt only fiolds, th e wr i t i ng of th e transfer output to QA 
D e v i c e b e ing upgrad e d wi l l prevent th e writing of the pr e- rollback output to OA Devic e b ei ng 
upgraded. I f tho wr i ting of tho transfor output fai l s, then pro rol l back can bo wr i tten. How e v e r, the 
transfer output cannot be wr i tten aft e r th e pre rollback has b ee n wr i tten. 

15 B e fore a ro l lback is p e rform e d, tho Ink R e fi l l GtA D e vice must confirm that th e soquonco fio l ds was 
successful l y written to th e pr e- ro l lback va l ues in the I nk QA Device. Becaus e th e s e qu e nc e fields 
are Docromont On l y fie l ds, tho Ink QA Dev i ce will allow pro rollback output to bo writt e n only if tho 
upgrade output has not b ee n writt e n. I t also moans that tho transfor output cannot bo written after 
th e pre ro ll back valu e s have be e n written. 

20 26.3.2.1.1 Fi e ld information of th e soquonc o data fi ol d 

For a dev i ce to bo upgrad e ab le tho devic e must hav e two soquonco fio l ds SEQ_1 and SEQ_2 
wh i ch are writt e n w i th sequence data dur i ng th e transfor e e quonco. Thus a ll upgrad i ng QA 
devices. Ink QA D e v i c e s and printer QA Devices must hav e two s e qu e nc e fi el ds. The upgrading 
QA D e vic e s must a l so have thos e fi el ds b e causo they can bo upgraded as wel l . 

25 Tho Goquenco fio l d informat i on is defined in Tabl e 286. 

Tab le 286. Sequ e nc e fi el d information 



Attribute Name 



Va l u e 



Explanation 



TYPE SEQ 1 or TYPE SEQ 2. 



See Append i x A for e xact va l u e . 



KeyNum 



Slot numb e r of th e soquonco key. 



Oniy tho soquonco koy has 
authontioatod 



RoadWrit e acc e ss to th i s fio l d. 



Non Auth RW 



9 



• X^l I I ■ 



Non authent i cated RoadWrito 



i s not a l lowod to tho fio l d. 



Auth RW Perm 



Authont i cat e d (k e y based) ReadWr i t e 



acc e ss 



is a ll ow e d to th e fie l d. 



KeyPorm 



KoyP e rms[K e yNum] " 0 



KoyNum i s tho s l ot number of the 
s oquonc e k e y, 
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which hao RoadWrito pormlGsion to tho 






KeyPorms[Slot number of the refill 
key] ~ 1 


Refill key can docrement tho sequence 


KeyPerms[othors- 0 ..7(excopt rofill 
koy)] - 0 


All other koys hovo ffooc/On/y accoss. 


End Pos 








Sot as roquirod. Size is typically 1 word. 



26.3.3 Upgrade states 

Thoro aro thre e stat e s in an transf e r soquonco, tho first stato i s initiated for e v e ry transf e r, whilo 
tho noxt two stat e s ar e i n i t i at e d only when tho transfer fails. Tho stat e s ar e Xfer, StartRol l back, 
5 and Rol l back. 

26.3.3.1 UpgradoFlow 

F i gure 380 shows a typ i ca l upgrade flow. 

26.3.3.2 Xfor 

Th i s stat e i ndicat e s th e start of th e transfer prpo e ss, and is tho only state r e quir e d if the transfer is 
10 succ e ssfu l . During th i s stato, tho Ink Rof i ll OA Dev i ce adds a now record to i ts Xf e r Entry cacho, 
decr e m e nts its amount, produc e s new amount, new s e qu e nce data (as described i n S e ct i on 
26.3.2.1) and a signatur e basod on th e r e fi l l k e y. 

Th e Ink QA D e vic e w i l l subsequent l y wr i t e th e new amount and now sequence data, aftor 
v e r i fying th e signature. If th e n e w amount can bo succ e ssfully wr i tt e n to tho I nk OA D e v i c e , th e n 
15 th i s w i ll f i nish a successfu l transf e r. 

I f th e writ i ng of the now amount is unsuccessfu l (result returned i s BAD B I G ), th e System w ill r e 
transm i t th e transfer output to tho I nk QA D e vice, by cal li ng th e authenticated Write function on i t 
again, using tho samo transfer output. 

I f r e trying to write the sam e transfer output fails repeatedly, th e System wi l l start th e ro ll back 
20 proc e ss on I nk R e fi l l QA D e v i c e , by cal l ing th e Road funct i on on th e I nk QA Dov i co, and 

subsequent l y cal li ng tho StartRo ll Back funct i on on tho I nk Refi ll QA D e v i c e . After a successful 
ro ll back i s perform e d, th e Syst e m wi l l invok e th e transfer s e quenc e aga i n. 

26.3.3.3 StartRollBack 

Th i s stat e indicates the start of th e rollback process. Dur i ng this stat e , the Ink Refil l QA Dev i ce 
25 produc e s th e n e xt soquonco data and a signature based on th e refill k e y. This is a l so ca ll ed a pre 
rollback, as descr i bed i n Sect i on 26.3.2. 

Th e pr e rol l back output can only bo written to th e Ink QA Device, if tho prev i ous transfer output 
has not be e n wr i tten. Tho writ i ng of th e pro rollback sequence data a l so e nsur e s, that i f tho 
previous transfer output was captured and not app lie d, th e n it cannot b e app lie d to the I nk QA 
30 D e vice i n the future. 

I f th e wr i ting of the pro rol l back output is unsuccessfu l (result returned is BAD S I G ), th e System 
w ill re transmit tho pro ro l lback output to tho I nk QA Dev i ce, by call i ng th e authent i cat e d Wr i t e 
funct i on on i t aga i n, us i ng tho sam e pr e ro l lback output. 
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I f r e try i ng to wr i to tho samo pre rollback output fa i ls repoatocliy, tho System w ill ca l l tho 
StartRo ll back on th e Ink R e f ill OA Devico again, and subsoquontly call i ng the outhont i cat e d Writ e 
funct i on on the Ink OA D e v i c e using this output. 
26,3.3.^ Rollback 

5 Th i s stat e i ndicat e s a successful do l ot i on (compl e t i on) of a tran s fer soquonco. During this stat e , 

the Ink Refi l l OA Device v e rifi e s the sequence data producod from StartRol l Back has boon 

correct l y writt e n to Ink Refill OA Device, then rol l s i ts ink - r e main i ng field to a prev i ous va l u e b e fore 

the transf e r r e qu e st was issu e d. 

26.3. 4 Xf e r Entry cach e 

10 Th e Xfor Entry data structure must al l ow for th e follow i ng: 

Stores the tranefor state and s e qu e noo data for a giv e n transf e r e e quenco. 

^ Stor e a l l data corr e sponding to a giv e n transf e r, to faci l itate a rollb a ck to th e previous va l ue 

b e fore tho transf e r output was generated. 

Th e Xf e r Entry cacho d e pth will d e p e nd on th e OA Ch i p Logica l I nt e rfac e imp le m e ntat i on. For 
15 some implementations a s i ngle Xfor Entry value will bo saved. If tho I nk Refi l l OA D e v i c e has 

no pow e rsafe storage of Xfor Entry cache, a power down wi l l cause the erasure of th e Xf e r Entry 

cach e and the I nk Refi ll QA D e v i c e wil l not be ab l e to rollback to a pr e pow e r down value. 

A dataset in th e Xfor Entry cache wi ll consist of the follow i ng: 

^ Information about th e QA D e vice b e ing upgrad e d: 

20 — Ch i p i d of tho dov i co. 

bt Fi e idNum of tho MO fi el d (i.o what was b e ing upgrad e d). 

Informat i on about th e upgrad i ng QA Dev i co: 

dr RoidNum of tho MO fi el d us e d to transfer tho amount from. 

Xf e rVa l th e transfer amount. 

25 ^ Xf e r Stat e indicat i ng at wh i ch stat e the transf e r s e quonco is. Th i s wi ll cons i st of: 

Sh Stat e defin i tion wh i ch ooufd bo ono of tho fo ll ow i ng: — Xfor, 

StartRo l lBack and comp le t e /d el eted. 

b: Tho vaiuo of s e quence data fie l ds SEQ_1 and SEQ_2. 

26.3.^.1 Adding now datasot 
30 A n e w datas e t is add e d to Xf e r Entry cach e by th e Xfer funct i on. 

There are throe methods wh i ch can bo usod to add now datasot to tho Xfor Entry cache. Tho 
m e thods hav e b ee n li sted below in th e ord e r of their pr i or i ty: 

4^ Replac i ng existing datasot i n Xfor Entry cacho with now datasot based on Chipid and 

Fi ei dNum of tho Ink QA Dev i co in tho now dataset. A matching Ch i p i d and F ie idNum 
35 cou l d be found becaus e a pr e vious transfer output corresponding to tho datasot stored i n 

th e Xfor Entry cache has boon corroctly rec ei v e d and proc e ss e d by th e Ink Ref i l l QA 
D e vice, and a new transfer request for the same I nk QA Dov i co, samo field, has come 
through to the Ink R e f i ll QA Dov i co. 

a: R e place ex i st i ng datasot oaoho with n e w datasot basod on tho Xfor State, /f the Xfer 

40 State for a datasot indicates dolotod (comp l et e ), then such a datas e t wi l l not bo used for 

any further functions, and con bo overwr i tten by a now dataset. 
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z-. Add now dataset to tho ond of tho cacho. This wil l outomatioal i y do l oto tho old e st datas e t 

from tho cacho rogard l oss of tho Xfor Stato, 

2§t4 D l FFERE^f^ TYPES OF TRANSFER 

Thoro can bo throo typos of tranofor: 
5 -* Peer to P ee r Transfer Th i s transf e r cou l d be on e of tiio 2 typos dosor i bod bo l ow: 

€h From an Ink Rofill QA Dovioo to a Ink OA D e v i oo. Thic io porfonmod wh e n tho Ink QA Dovioo io rofil l od by tho Ink 

Refi ll QA DovlGO. 

From ono Ink Rofi ll QA Dovioo to another I nk Rofil l QA Dov i oo, whoro both QA Dov i oos be l ong to tho same OEM. 

This i s typica ll y p e rform e d whon OEM dividoo i nk from on e I nk Refi ll QA Dov i oo to anoth e r Ink Rofi ll QA Dov i oo, 
10 whoro both dovioos belong to th e same OEM 

H e irachica/ Transf e r Th i s i s a transf e r from on e I nk R e fil l QA D e vic e to another Ink Refil l 

QA D e v i c e , wh e re the QA Dovicos b el ong to different organisat i on, say ComCo and OEM. 
This i s typically p e rformed whon ComCo div i d e s ink from its r e fi ll d e v i c e to s e veral ref i l l 
d e v i c e s b e longing to sev e ral OEMs. 
15 F i gur e 381 is a r e pr e sentation of various authorised ink rofil l paths in tho printing systom. 
26. 4 .1 Hierarchica l transf e r 

R e f e rring to Figure 381, this transf e r I s typically p e rform e d whon ink is transforrod from ComCo's 
I nk R e fi l l QA D e v i c e to OEM's Ink R e fil l QA D e vice, or from QACo's Ink R e fi l l QA D e vic e to 
ComCo's I nk R e fil l QA D e v i c e . 
20 26. ^.1.1 Koys and acc e ss p e rmisGion 

Wo will exp l a i n th i s using a transfer from ComCo to OEM. 

Th e re is an ink romaining fio i d assoc i ated with th e ComCo's Ink R e fi l l QA D e vic e , Th i s ink - 
romaining fiQld has two keys associated w i th: 

Th e first key tr a nsfers ink to tho device from a nother rofill device (which is higher in 

25 the heirachy), fills/refills (upgrades) the device its e lf This key has a uthenticat o d 

Re a dWrite permission to th e field. 
^ Th e second k e y transf e rs I nk from it to oth e r d e v i c e s (which ar e l ow e r i n th e heirachy), 

f il ls/rofi ll s (upgrades) other dovicos from i t. Th i s k e y has authontlcated d e cr e m e nt - only 

perm i ssion to tho f i e l d. 

30 Thoro i s an ink remaining field associatod with the OEM's I nk rofil l device. Th i s ink r e maining field 
has a single koy associat e d w i th: 

^ Th i s key tr a nsf e rs ink to the device from anoth e r refill device (which is higher or at 

the same level in the hierarchy), fills/refills (upgrades) the device itself, and additionally 

transfers ink from i t to other dov i cos (wh i ch are low e r i n th e hoirochy), fil l s/rofi ll s (upgrades) other 
35 dov i cos from it. Thoroforo, this koy has both authont l cat e d RoadWrito and decrement on l y 
p e rmiss i on to tho field. 

For a succ e ssful transfer ink from ComCo's refiil device to an OEM's refill device, the 
ComCo's refill devic e and the OEM's refill d e vice must share a common k e y or a variant 
Ifoy. This key is fi ll /rofi il koy with respect to the OEM's refill device and it is th e transf e r koy 
40 with r e sp e ct to the ComCo's refill device. 
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For a ComCo to suGGOSSfuUy fill/refill its refill device from a nother refill device (which is 
higher in the heirachy possibly belonging to the QACo), th e ComCo's refill device and the 
QACo's refill device must shar e a common key or a variant key. This k e y i s fi ll /refi ll koy 
with respect to the ComCo's refill device and it is the transfer key with respect to the 
QACo's refill device. 
26.4.1.1.1 Ink ■ r e maining fiold i nformation 

Table 287 shows th e fio l d information for an fi e ld storing l ogical ink - r e ma i ning amounts in tho 
refi l l dov i c e and which has tho ability to transfer down th e ho i raohy. 



10 



Attr i but e Nam e 



Value 



Exp l anation 



For o.g 

TYPE H I GHQUALITY BLACK I NK^ 



Type d e scrib i ng tho log i cal ink storod i n 
th e i nk r e ma i n i ng f iel d i n tho ref ill dovioo. 



KeyNum 



Slot number of the refi ll koy. 



Only the refil l koy has a uthenticat e d 



RoadWr i to access to this Held. 



Non Auth RW 



Non Quthonticatod R e adWrito 



Porm^ 



not al l ow e d to tho fiofd. 



Auth RW Porm^ 



AuthontioQtod (koy bas e d) ReadWrito 



acceee 



' a l lowed to tho fio l d. 



K e yP e rm 



K e yPorms[KoyNum] ~ 0 



KeyNum is th e slot number of th e r e fil l 



wh i ch has ReadWrito permission to the 



Rel^T 



K e yP e rms[Slot Num of transfer /coy] " 1 



KoyPorms[others~ O..7(oxcept transf e r 
key)] - 0 



TranGfor k e y can decr e ment the fi el d. 



All other k e ys hav e R e adonly acc e ss. 



End Pes 



S e t as required. 



D e pends on th e amount of logica l i nk tho 
dov i co can stor e and storage roso l ut i on 



e in pico l itr e s or i n mioro li tr e s. 



a. This i s a samp l e type only and is not i ncluded i n the Typo Map i n Append i x A. 

b. Non authonticatod Road Write p e rmission. 

c. Auth e nticated Road Wr i to permission. 
15 26.4.2 Peer to Poor transfer 

R e f e rr i ng to F i gure 381, th i s transfer is typica l ly performed when i nk is transf e rr e d from OEM's I nk 
R e f i l l D e v i c e to another I nk Refi ll D e vic e b el ong i ng to th e sam e OEM, or OEM's Ink R e fi ll D e v i c e 
to Ink Dovico b el ong i ng to the same OEM. 
26. 4. 2. 1 K e ys and qccogg pormiGoion 



PEA23US 



820 



Thoro is on ink romaining f ie ld assooiatod w i th tho rof i ll dovico wh i ch transforo i nk amounts to 
other rofil l dov i oos (poor dovio e s), or to other Ink dov i cos. This ink romaining fie l d has o einglo koy 
associat e d w i th: 

^ Th i s k e y transf e rs ink to the device from another refill d e vice (which Is higher or at 

the same level in the helrachy), fflls/refiils (upgrades) the device Its e lf, and 
additionally transf e rs ink from i t to other devic e s (wh i ch ar e low e r in th e h e irachy), 
fills/r e fi l ls (upgrad e s) oth e r devices from i t. 

Th i s k e y is rcfcrrod to as th e fill/refi ll koy and is us e d for both fi l l/rofil l and transfer. Henco. 

th i s koy has both R e adWr i to a nd Docromcnt - Only permission to the Ink roma i ning Held in 

the rofi ll device. 

26. 4 .2.1.1 Ink romaining fie l d i nformation 

Tab l e 288 shows th e field informat i on for an field stor i ng l og i cal i nk romaining amounts i n tho 
rofi ll dov i co with tho ab i lity to transfer botweon poors. 



Attribute Name 



Valu e 



Explanat i on 



For e .g 



Typ e d e scr i b i ng the logical ink stor e d In the Ink 



TYPE_H I GHQUAL I TY_BL remaining field 



ACK INK ^ 



in tho rof il l devic e . 



KoyNum 



Slot number of the rofi ll 



Only the rofi ll key has authenticated 



R e adWr i to access to this field. 



Non Auth RW 



Non auth e nticat e d RoadWrit e 



Perm 



I S not allowed to tho field. 



Auth RW Porm^ 



Authenticat e d (koy bas e d) RoadWrito qccocg 
i s al l ow e d to th e fie l d. 



KeyP e rm 



K e yP e rms[K e yNum] ~ 1 



K e yNum is th e s l ot numb e r of th e refi l l koy, 

which has RoadWrit e and D e cr e m e nt permission to 

tho field. 



K e yP e rms[others~ 0 



All oth e r k e ys have /? e ac/On/y access. 



./( e xcept K e yNum)] ~ 0 



End Pos 



S e t as r e quir e d. 



D e p e nds on tho amount of l og i cal i nk the dev i ce 



can store 



and storage r e solution — i . e in picol i tr e s or i n 
m i crolitr e s. 



a. Th i s is a sample typ e on l y and i s not includ e d i n th e Typo Map in App e ndix A. 

b. Non authenticated Road Write perm i ssion. 
0. Auth e nticated R e ad Wr i te perm i ss i on. 

27 Funct i ons 

27rA XferAmount 
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Input: KoyRof, MoOfExtorna l , M^OfExtorna l , Chip i d, F i o l dNumL, 

F i o l dNumE, XforVa i Longth, XforVa l , InputParamotorCheck 
(optional), R^, S I Gb, R^ a 

Output: Rosu l tF l ag, F i o l dSoloct, F i o i dVa l , Rfc ar^tGem 

5 ^^fianQ&G. ' ' i^iQ^ckthd 

Avoilabiiity ink r e fill QA Dovico 

27.1.1 Function d e scr i ption 

Th e X/er/\/770i/fi( funct i on produc e s data and s i gnatur e for updating a g i von m f \ o\d. Th i s data and 
s i gnatur e wh e n applied to tho appropr i at e dev i co through th e WritoFloldGAuth function, wi l l update 

10 the-Mo ti e ld of th e dovico. 

The system calls tho Xfer/\moi/nf function on th e upgrade devic e with a c e rtain Xf e rVal, th i s 
XferVal is va li dated by th e XfeMmot/nf funct i on for var i ous rulos as describ e d in S e ction 27.1 . 4 , 
th e funct i on th e n produc e s th e data and s i gnatur e for th e pass i ng Into tho WritoFloldGAuth 
function for tho dovico being upgrad e d. 

15 Th e transfer amount output consists of tho n e w data for th e fie l d b e ing upgraded, field data of tho 
two soquonco fiolds, and a signature using the r e fil l key. Whon a transf e r output i s produc e d, tho 
sequonco fiold data in SEQ_1 is docromontod by 2 from tho previous voluof'ag paeaod in with tho 
input), and tho s e qu e nce f i eld data i n SEQ_2 is decrem e nt e d by 1 from th e previous value (ae 
passed in with th e input). 

20 Addition a ilnputParam e terChockyoluQ must bo prov i d e d for th e param e t e rs not i ncluded I n th o 
SIG g, i f th e transm i ss i on between tho System and Ink R e fil l QA Dev i co i s error prone, and those 
e rrors ar e not corr e ct e d by the transimiss i on protoco l itself. InputParam e t e rCh e ck is SHA 
1/F i o l dNumL | F i o l dNumE | XforVaiLongth | XforVa i ;, and i s requ i r e d to e nsur e th e integr i ty of 
th e se param e t e rs, whon thoso inputs are received by th e Ink R e fi ll QA D e v i ce. Th i s wil l prevent 

25 an incorroct transfer amount boing doduotod. 

Th e Xf e r/\mounf function must first ca l culate th e SHA ^/FioldNumL | Fi el dNumE | Xfor - 
VaiLongth I XforVaiy, compar e the calculated value to tho valuo rec ei v e d (InputParam e t e rCh e ck) 
and only i f tho va l ues match act upon tho inputs. 

27.1.2 I nput paramotors 

30 Tab l e 289 d e scr i bes e ach of tho i nput param e ters for Xf e rAmount funct i on. 



Parameter 


Description 


KeyRef 


For oomemon key input and output eignaturo: KoyRof.koyNum - Slot number of 


the key to bo used for testing input signature and producing the output signature. 


S/Ge producod.using KKoyRof koyrf><um by tho QA Dovico boing upgraded. SIGout 
produced using.KKoyRof.koyNum for delivery to the QA Device being upgraded. 
KeyRof.usoChipId - 0 


For variant koy input and output signatures: KeyRpf.koyNum - Slot number of 


the key to be usod foi^ generating tho variant key. S/Gfe producod-using a variant 
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©t^<KoyRof koy^^um by the QA Device being upgraded. SIGout produced usin9.a 
variant of KKoyRof koywum for delivery to the QA Device being upgraded. 




gvuyrxCT.usoonipiq i wioyp^oT.onipiq onipio or ine ugvioe wnicn gonoraioo : 


. f^fr vfr\ rn t / 


All 16 wordo of ^ of tho QA Dovico being upgraded. 




^44- (jr cXior nOt 


All 16 words of ^ of the QA Device being upgraded. 




onipio OT ino vrf/\ uevioe Doing upgruooo. 


FiefdNumL 


^4o field number of the local (refill) devico from which tho value will be transferred. 




Mto field number of tho QA Device being upgraded to which the valuo will be 
transferred. 


XforVafLongth 


XferVal lenath in word*=' Non "^ero lenath reauired 


XferVal 


The logical amount that will be transferred from tho local device to the external 

device 


Re 


pytfrmi nnrinm vnliif* ii^^f^H \c\ v/f^rifv innijf ^'innnti irf=* Thi^ will \\f^ thf* R "frnm thr* 
input sinnnturg^ ggnf^mtor dfvino npnf^r^tino ^\C^c\ T/ie inr%ijf sionsi 




generator in this case, is the device being upgraded or a translation device. 




^^lUI 1 lUI 1 Ul lUV/l 1 1 VUlUw UwwU \\J yft \J\A\A\J\^ VJUl|iJUl OIUI ICIIUI 1 1 IIO Will \JK* 1 ^ \./li/LCill IV>rU 

by calling \he.Random function on the device which will receive the SlCeat from 


the XferAmounf function. Tho dovico receiving the SlCeat-in this case, is tho 




device being upgraded or a translation devico. 




External signature required for authenticating input data. The input data in this 


case, is tho output from the Read function performed on the device being 
upgraded. 

A correct S/Gs-" SIGKeyReKDota | Rs | F^^r 



27. 1.2.1 Input cignatur e v e rification data format 

Tho input signature passed in to tho XfoMmoun^ funct i on is th e output signatur e from th e R e ad 
function of th e ink QA Devico. 

F i gur e 382 shows the input s i gnatur e v e r i f i cat i on data format for tho Xf e rAmoun^ function. 
Tab l e 200 givos tho param e ters included i n S I Ge forxforAmount. 



Parameter 



Length in b i ts 



Valuo sot int e rna ll y Va l uo set from I nput 



RWS e neo 



QQQ 

R e f e r to S e ction 



15.3.1.1 



MSoloct 



0044 



KoyldSoioct 



8 



00000000 
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Chipid 


4S 




Chipid of the OA 




Device being upgraded 




+0 


Pits sot to 1 




wora^oiQOi tot Mq 






+0 


Pits sot to 1 




WoraSeiect tor M^. 




vtxt 








\JLL 


§42 








1 XJKJ 






a 


460 


Based on the internal R 





The Xfor/\mot//?f function is not passed al l the paramet e rs required to gonorat e S I G^. For 
produc i ng SIGt, which is us e d to test SIGg, tho function uses tho oxpoctod va l ues of some tho 
param e t e rs. 

5 27.1.3 Output param e t e rs 

Table 291 descr i b e s e ach of th e output param e t e rs for Xf e rAmount. 



Parameter 


Description 


RoeultF/ag 


Indicates whether the function completed successfully or not. If it did not 


complete successfully, the reason for the failure is returned hero. Soo 

Table A7. 


FieldSeieot 


Selection of fields to be written 


In this caso tho bit corresponding to SEQ_1 , SEQ_2 and to FieldNumE 
are sot to 1 . 

All other bits are set to 0. 


FioldVal 


Updated data words for Soquonco data field and FieldNumE for OA 




Device being upgraded. 
Starts with LSW of lower field. 

This must be passed as input to the WrlteFieldsAuth function of the QA 


Device being upgraded. 






Internal random value required to generate output signature. This must be 


passed ao input to the WritoFMdcAuth function or Translate function of 
the QA Device being upgraded. 




Output signature which must be passed as an input to the WritoFioldGAuth 
Function of tho Dovico being upgraded. 


S^Geut - SIGKeyReKdata 1 RyH-Rsa) as por Figure 373. 



10 
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Tabl e 292. Result Flag d e finitions for Xf e rAmount 







FieldNumElnvalid 


FieldNum to which the amount is being transferred, or which is boing 




SeqFieldlnvalid 


The sequence field for the QA Dovice being upgraded is invalid. 


FleldNumEWritoPormlnvalid 


FieldNum to which the amount is boing transforrod, or which is being 
upgraded in the QA Device boing upgraded has no authenticated writo 


permission. 


FioldNumLlnvalid 


FieldNum from which the amount is being tr3ng:fcrrcd or from which 
the value is boing copied in the Upgrading QA Devioo is invalid. 




FioldNumLWrltePermlnvalid 


FieldNum from which the amount is being trnnrrferrcd in the Unnrndinn 
QA Dovico has no authonticatod permission, or no authenticated 


permission with the KoyRof. 


TypoMlsmatoh 


Type of the data from which the amount Is being transferred in the 
Upgrading QA Dovice, doesn't match the Type of data to which tho 


amount in being transferred in the Dovice being upgraded. 




UpgradeFleldElnvQiid 


Only applicable for transferring count remaining values. The upgrade 


Field associated with the count remaining field in the QA Device being 
upgraded is invalid. 


UpgradoFieldLlnvalid 


Only applicablo for transferring count-remaining values. The upgrade 
Field associated with the count-remaining field in the Upgrading QA 


Dovico is invalid. 


upgraderieldMisnnatcn 


Only applicable for transferring count-remaining values. 

Type of the data in the upgrade field in the Upgrading QA Device, 




doesn't match the Type of data in the upgrade field in the Device being 
upgraded. 


FieldNumESizelnsuffioiont 


FieldNum to which the amount is being transferred, or which is being 
upgraded in the QA Device is not big enough to store tho transferred 


data. 


FieldNumLAmountlnsufficiont 


FieldNum in the Upgrading QA Device from which tho amount is being 
transferred doesn't have tho amount required for the transfer. 





5 Refer to Sect i on 20.2.1 for details. 

27.1. 4 Funct i on s e quence 

Th e Xfor/\mot/nf command i s i ll ustrat e d by the following pseudocode: 
Accept input paramctcro KoyRof, MOOf External, MlOf External , 
Chipid, FicldNumL, FicldlTumE, Xf crValLcngth 

10 
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# Accept XfcrVal worda 
For i < — 0 to XfcrValLcngth 

Accept next XfcrVal 

BndFor 

5 

Accept Rs, — SIGb, Rs a 

^Generate mcaaagc for paaaing into ValidatcKcyRcfAndSlgnaturc 
function 

data < — (RWScnac | MCcloct | KeyldSclect [ Chipid | WordCclcct | MO [ Ml) 
10 # Refer to Figure 3 8 2. 



# Validate KcyRcf, — and then verify aignaturc 
1 5 ReoultFlag = ValidateKeyRef AndSignature (KeyRef , data^ R^, R^ ,-)- 
— (ReoultFlag ^ Paoo) 
Output ReoultFlag 

Return 



20 



Endlf 



#VQlidatG FicldNumE 

# FieldNumE ia prcacnt in the device being upgraded 
rreoentFlagFieldNumE < — GetFieldrreoent (MlOf External , FicldNumE) 



25 

# Chook Fioldl^uniS prcacnt flag 
If (rreoentFlagFieldNumE # 1) 
— ReoultFlag < — F i e l dNumElnva li d 

Output ReoultFlag 

30 Return 

Endlf 



# Check Scq Ficlda Exiat and get their Field Num 

# Cot Seqdata field CEQ_1 num for the device being upgraded 
Xf erSEQ_lFieldI>Jum< GetFieldNum (MlOf External , SBQ_1) 
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# Check if the Ccqdata field GEQ_1 ia \^al±d 
If (Xf orSEQ_lFicl(iNum invalid) 

— RooultFlag < — SoqFio l d I nva li d 

Output RooultFlag 

5 Return 

Endlf 

# Get Scqdata field CEQ_2 num for the device bcincf upgraded 
Xf crCEQ_2Ficldimm< GotFicldNum (MlOf External , CEQ_2 ) 

10 # Check if the Ccqdata field CEQ_2 ia sralid 

If (X£GrCBQ_2FiGldNum invalid) 

RooultFlag < — SoqF i old l nva l id 

Output RooultFlag 

Return 

15 Endlf 



§Check write permiaaion for FieldNumE 

PormOKFieldNumE < — Che okFioldNumE Perm (MlOf External , FieldNumE) 
20 If (PormOKFieldNumE #1) 

— RooultFlag < — FioldNumEWritoPorm I nval i d 

Output RooultFlag 

Return 



25 



Endlf 



§Check that hoth GcqData fields have Decrement Only permiaai ^R 
with the aame key 

4 ft hat haa write permiaaion on FieldNumE 

PermOKXf orSoqData < — CheokSeqDataFieldPermo (MlOf External , 
30 Xf crCBQ_lFieldNum, Xf orSEQ_2FicldNum, Fiold]^?umE) 

If (PermOKXf orSeqData r 1) 

— RooultFlag < S e qWr i t e P e rm I nval i d 

Output RooultFlag 

Return 

35 Endlf 

# Got SeqData £EQ_1 data from device being upgraded 
GotFioldDataWordo (Xf erCEQ_lField^mm, 

Xf erCEQ_lDataFromDevioe , MOOf External , MlOf External ) 

40 
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# Cot CcqData GEQ_2 data from device being upgraded 
GctFicldDataWordo (Xf QrCEQ_2FicldNum, 

Xf QrCEQ_2DataFromDcviGC, MOOf External , MlOf Extomal ) 



# FieldNumL ia a preaent in the refill device 
PrcocntFlagFicldNumL < — GotFicldPrcoont (Ml ^ FieldNumL) 
If (PreoentFlagFieldNumL ^ 1) 
— RcoultFlag < — F iel dNumLinvolid 

10 Output ReoultFlag 

Return 

Endlf 

^Check permiaaion for FieldNumL 
15 PermOKFieldNumL < — CheekFieldNutnLPcxTTi (Ml, FieldNumL, KeyRef ) 

If (PermOICFieldNumL # 1) 

— ReoultFlag < — Fi e ld NumLWritoPorm Inva l id 

Output RcoultFlag 

Return 

20 Endlf 



#Find the type attribute for FicldNumE 
TypoFloidNumE < F i ndFioldNumTyp e (M10fExternal,Fio l dNumE) 



25 



§Find the type attribute for FieldNumL 
TypeFicldJNumL < — FindFieldNumType (Ml, FieldNumL) 

# Check type attribute for both fielda match 
30 If(T^^eField^TumB ? fe TypeFieldNumL) 

ReoultFlag < TypoMismatch 

Output RcoultFlag 

Return 



35 



Endlf 



Do thio if the Refill Device io tranferring Count remaining for Printer 
upgrade o 
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§ If the Type la count remaining, — check that upgrade valuea 
aooociatcd with 

# the count remaining arc valid. Refer to Section 23, — for further 
detail a on 

5 # count remaining and upgrade value. 

If (TypcFicldl^JumL ° TYrE_COUNT_RBMAINING) a (TypcFicldNumE 
■^ TYrE_COUNT_REr>lAINING ) 

# Upgradc value field io lower adjoining field 

UpgradcValucFicldNumB = Ficld^JumE 3r 

10 If (Upgrade VqIugFIgI dNumE < 0) — it upgrade field doeon^t exiot 

for QA Device being upgraded 

RcoultFlag < — UpgradoFi e ldE l nva l id 

Output RcoultFlag 

Return 



25 



15 Endlf 

UpgradcValucFicldl^mmL ° FicldlJumL i 

If (UpgradcValueFioldMiainL < 0) — ft upgrade field docon^t exist 

for local device 

RcoultFlag ( — UpgradoF ie ldL l nvalid 

20 Output RcoultFlag 

Return 

Endlf 



UpgradcValuGChcclcOK < 

UpgradcValChcclc (UpgradcValuoFicldlTumL , MO , Ml , 



Upgrade ValucFicldlJumL , MOOf External , MlOf External , KcyRof ) 

If (UpgradcValucChcGlcOK ° 0) 

RcoultFlag < — UpgradoF iel dM i smatoh 

Output RcoultFlag 



30 Return 

Endlf 

Endlf 

# Do thia if Field Type ia Count Remaining end 

35 

^Check whether the device being upgraded can hold the tranafer 
amount 

# (XferVal — i AmountLcft — 

40 OvcrFlow < Canllold (FicldtJumB, MOOf External, XferVal) 
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If OvcrFlow error 

— RcoultFlag < F i Q i dNumES i zelnsuffic i ont 

Output RcoultFlag 

Return 

5 Endlf 



^Chcck the refill device haa the dcalrcd amount — (XfcrVal < 
AmountLeft) 

10 UndcrFlow < HaoAmount (FicldNumL, MO , XfcrVal) 

If UndcrFlow error 

— RcoultFlag ( — F i oldNumLAmount l nsuffici e nt 

Output RcoultFlag 

Return 

15 Bndlf 



# All chccka complete 



# Generate Ccqdata for CEQ_1 and SEQ_2 fields 

20 Xf crGEQ_lDataToDevico = Xf crSEQ_lDataFromDcvicc 2^ 

Xf erSEQ_2DataToDevicc = Xf crSEQ_2DataFromDevicG 1 

# Add DataCet to Xfer Entry Cache 

AddDataSctToXf crEntryCachc (Chipid, FicldNumE, FieldNutnL, 
25 Xf crLength , XfcrVal , — XfcrSEQ IDataFrotnDcvicc^ 

Xf crSEQ_2DataFrotnDcviao) 

# Get current FicldDataE field data worda to write to Xfer Entry 

cache 

30 GctFicldDataWordo ( FicldNumB , FicldDataE , MOOf External , MlOf External ) 



#Doduct jY-forVal from FieldNumL and Write new value 
DeduGtAndWritcValToFicldNuitiL (XfcrVal, FicldNumL, MO) 

35 — 

^Generate new field data worda for FicldNumE. — The current 
FicldDataE ia added to 
# XfcrVal to generate new FieldDa^ etE 
40 GcncratcNcwFicldData (FicldNumE.XfcrVal, FicldDataE) 
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# Generate FicldCclcct and FicldVal for CcqData field CEQ_1, 
CEQ_2 and 

# FieldDataE 

CurrontFiGldSclQCt< & 

FicldVal < — & 

GcncratcFicldSolGGtAndFiGldVal ( FicldliTumlii , FioldDataB , 
XfcrSEQ^lFiGld^Tum, Xf GrCEQ_lDataToDGviGG, Xf crCEQ_2FiGldNum, 
Xf GrSEQ_2DataToDQviQG , 
FicldSclGGt , FicldVal ) 

^Generate meaaage for paaaing Into GencrateCignature function 
data < — (RWSGnoG I FicldCGlGQt[ChipId I FicldVal) # Refer to Figure 
373. 

#CreQtG output gignaturc for FicldNumE 
SiGettfe^ — GGncratGCignaturc (KcyRcf , data , R ^a^r^^^ 
Update Rfc 3 -to R^ 
RcoultFlag < — Paao 

Output RcoultFlag, — FicldDa fear? — ^2 ,^ ^^^out 

RcturR 

Endlf 

27,1.4,1 RosultFiag ValidateK e yRofAndSignoturo(KoyR o f,dQtQ,R^,R ^ 

This funct i on chocks K e yRof is val i d, and if KoyRof i s valid, then i nput s i gnature is v e rifi e d us i ng 
KeyRefr 

ChcGltRangc (KcyRcf . IccyNum) 
If invalid 

RcoultFlag < — InValidKcy 

Output RcoultFlag 

Return 

Endlf 

#Ccnoratc meaaage for paaaing into GencrateCignature function 
data < — (RWScnoe | MScleot | KcyldSclcct | Chipid | WordSclect | MO | Ml) 

ft Refer to Figure 382. 

#ConojratG Signature 

SIG^, < GencrateSignature (KcyRcf, data, R4^,Rfe 4- 
^ Check input oignature CIG^ 
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If(SIG^° SIGb) 
Update I^to Rfc a 

ElQC 

ReoultFlag < — Bad Signature 

5 Output ReoultFlag 

Return 

Endlf 

27. 1,^.2 GonorotoFiQldSolQCtAndFioidVal (FioldNumE, Fi e ldDataE, 

XforSEQ_1FioldNum, Xf e rSEQ_1DotoToDovico, XforSEQ_2FieidNum, 
10 Xf e rSEQ_2DQta ToDovicc, FioldSeloct, FioldVal) 

Th i s funct i ons g e n e rat e s the F iel dSelcct and F i oldVa l for output from Fio l dNumE and its fina l 

data, and data to b e wr i tt e n to S e q fi el ds SEQ_1 and SEQ_2. 

27.1.4.3 ProGontFfag GotFieldPr e e e nt(M1 ,FloldNum) 

This function checks whether Fie l dNum is a va li d. 
15 FicldCigc [16] — < — 0 # Array to hold FieldSizc aoauming there arc 16 

f ieldo 



NumFielda< — FindNutnberOf FicldoInMO (Ml-FieldSige) — #Refer to 
Section 19, 4 .1 
20 If (FicldNum< NumFieldo) 

PreoentFlag< — t 

Bloc 

PrcocntFlag< — 0- 

Endlf 

25 Return PrcoentFlag 

27. 1. 4. 4 NumFi e lds FindNumOfFf e id6inMO(Ml,Fi e ldSfz e O) 
Rofor to Figur e 19. 4 .1 for deta il s. 

27.1.4.5 FiQldNumGotFioldNum(M1,Typo) 

Th i s function returns th e fi e ld number based on tho Typo. 
30 FieldSizc [16] — < — 0 # Array to hold FieldSize aoauming there are 16 

f ieldo 

NumFieldo < — FindNumberOf FicldoInMO (Ml^FieldSige) — # Refcr to 

Section 19. 4 .1 

For i = 0 to NumFieldo 

35 If (Ml[i] .Typo = T>T>c) 

Return i # Thio io field Num for matching field 

EndFor 

i g 255 # If XferSeooion field wao not found then return an 
invalid value 
40 Retuim -ar 
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27.1.4.6 PormOK ChockFfoidNumEPorm(M1, FioldNumE) 

This funct i on chocks auth e ntlcatod writo p e rm i ss i on for F iel dNum wh i ch ho l ds tho upgradod 
vo l uo. 

AuthRW < Ml [FicldlTum] .AuthRW 
5 NonAuthRW < Ml [FieldNum] .NonAuthRW 

If (AuthRW ° 1) A(NoiiAuthRW = 0) 

rcrmOIC < — 3r 

Bloc 

PcrmOK -< — 0- 

10 Endlf 

Return PormOK 

27. 1. 4. 7 P e rmOK Ch e ckS e qDQtQFioldPormG(M1 , XforSEQ_JFioldNum, 
XforSEQ_2FioldNum, FioldNumE) 

Th i s function ch e cks that both SoqData fie l ds hav e D e cr e m e nt On l y permission w i th th e 
15 sam e k e y that has wr i te permission on F ie ldNumE. 

KcyNumForFicldNumE < — Ml [FieldNumE] .KcyNum # loolate KcyNum for 
the field that will 

# be upgraded 

# loolate KeyNum for both SeqData fieldo and checJc that they can 
20 be written uoing the oame Itey 

KeyNumForSEQ_l < Ml [Xf erSEQ_lFioldNum] . KeyNum 
KeyNumForCEQ_2 < Ml [XferCEQ_2 FieldNum] .KeyNum 
If (KeyNumForSEQ^l ^ KeyNumForCEQ_2 ) 

PermOK -< — 0- 

25 Return PermOK 

Endlf 

# Check that the write Jcey for FieldNumE and SeqData field io not 
the game 

i€ — (KcyNumForSEQ__l = KcyNumForFicldNumE) 

30 PermOK < — & 

Return PermOK 

Endlf 

# Ioolate Decrement Only permiooiono with tho writo Icey of 
FieldNumE 
35 KeyPcintnaSEQ_l 

< Ml [Xf crSEQ^lFicldNum] , KeyPermo [KcyNumForFicldNumE] 
KeyPermoSEQ_2 

< Ml [Xf crCBQ__2FicldNum] . KeyPermo [KcyNumForFicldNumE] 
PEA23US 833 



# Chcclc that both ocqucncc f ioldo have DQcrcmcnt Only pcrmiooion 
for thio key 

If (KoyrcrmoSBQ_l = 0) v (KGyPormaSEQ_2 = 0) 



rcrmOK < — & 



5 Rctujfn PcrmOK 

Endlf 

PcrmOK < — i 
Return Pcrm OK 

27.1.4.8 AddDataSetToXf e rEntryCach e (Chipfd, FieldNumE, Fi e ldNumL, 
10 XforVal, SEQ_1DQto, SEQ_2DatQ) 

Th i s funct i on adds a new dataset to the Xfor Entry cach e . Datas e t i s a sing l e r e cord in the 
Xf e r Entrycach e . Ref e r to S e ction 27 for details. 

# Search for matching Chipid FieldNumE io Cache 
15 DataSet < SearchDataSetlnCache — (Chipid, — FieldNumE) 

# If found 

If (DataSet io valid) 

DclctcDataSctlnCachc (DataSet) — # Thio createa a vacant dataoet 

AddRccordToCachc (Chipid, 

20 FieldNumE, FieldDataL, Xf erVal, SBQ_lData, SBQ_2Data) 

Endlf 

# Soarchco the cachG — for XferState complete/deleted 
Found < — g cQrchRcGordoInCachc ( eomplctc/ deleted) 

If (Found =1) 

25 AddRccordToCachc (Chipid, 

FieldNumE, FieldDataL, XferVal , SBQ_lData, SBQ_2Data) 
Eloe 

# Thio will overwrite the oldeot DataSet in cache 

AddRecordToCachc (Chipid, 

30 FieldNumE, FieldDataL, XferVal , SBQ_lData, SEQ_2Data) 

Return 

Endif 

Set XferState in record to Xfer 
Return 

35 27.1.4.9 Fi e ldType FindFieMNumTypo(M1,Fi e ldNum) 

This funct i on gots the Type attr i bute for o given f i e l d. 
FieldType < — Ml [Fieldl^Jum] . Type 
Return FieldType 
27. 1. 4. lOP e rmOK ChQckFioldNumLPorm(M1,Fi e ldNumL,KeyRef) 
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This funct i on chooko Quthontioat e d write pormiss i ons us i ng KoyRof for Fio l dNumL in tho rofi l l 
dev i c e . 

AuthRW < [FioldNumL] .AuthRW 
Kcy^NumAtt < — [FioldNumL] .KcyNum 
5 DOForKoyo < m 4 - [FioldNumL] .DOForKoyo [KoyNum] 

# Authontioatod writo allowed 

# RoadWrito Iccy for fiold io the oamo ao Input KoyRof , JcoyNum 

# Koy hao botli RoadWrito and DccromontOnly rcnniaoion 

If (AuthRW =■ 1) — A — (KoyRof .IcoyNum » KoyNumAtt) — a — (DOForKoyo ■ 1 

10 rcrmOK< — i 

Bloo 

PormOK< 0- 



Endlf 

Return PcrmOK 

15 27.1.4.11 Ch e ckOK Upgrad e ValCh e ck(F/oidNum1, MOOfFieldNumI , MIOfFi e ldNumI, 
FioldNum2, M0OfFioidNum2, M10fFioidNum2,KoyRof) 

Th i s function chocks tho upgrade vo l uo corrosponding to tho count r e main i ng. Tho upgrade voiuo 
corr e sponding to tho count r e maining fiold i s stor e d i n the low e r adjo i ning f ie ld. To upgrade the 
count remaining f i old, th e upgrade va l uo in r e fill d e vice and tho dev i ce b e ing upgrad e d must 
20 match. 

§Chcck authenticated write pcrmiaaiona ia allowed to the field 
^Chcck that only one key haa ReadWrite acceaa, 
^and all other key a are Readonly acceaa 
PcrmChcGkOKFicldNuml 
25 < ChcGkUpgradcKcyForField(FieldNuml,M10f FieldNuml, KeyRef ) 

If (rcrmClieGkOKFieldtmml -t 1) 

CheekOK < 0 

Return CheekOK 

Endlf 

30 



rcrmC]iGo]cOKFioldJJum2 

< ChocJcUpgradoKoyForFiold ( FioldJmm2 , MlOf FioldNum2 , KoyRof ) 
If (rcrmChoGlcOKFioldNum2 # 1) 

35 ChoolcOK < 0 

Return ClioolcOK 

Endlf 



#Gct the upgrade value aooociatod with field 
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GctFicldDataWordo (FicldNuml , UpgradcValuQFicldNuml , MOOf FicldNuml , M 
lOfFicldNuml) 



#Gct the upgrade value aaaoclatcd with field 
5 GotFicldDataWordo (FicldNuma , UpgradcValucFicldNum2 , MOOf FiGldNum2 , M 

10fFicldNum2) 

If (Upgrade ValucFicldNuml ^ UpgradoValucFicldNum2 ) 

CheelcOK < 0 

Return CheelcOK 

10 Endlf 

# Got the ty'pc attribute for the field 

UpgradoTypcFieldNumK — GGtUpgradcT;yT><^ ( FicldNuml , MlOf FicldJ^Juml ) 
UpgradcT>^cFiGldNum2 < — GctUpgradcT^^e ( FicldIiJum2 , MlQf FicldMrum2 ) 
If (UpgradcTypcFicldNuml ^ UpgradcT>T3eFieldNum2 ) 

15 CheelcOK < 0 

Return CheelcOK 

Endlf 

CheokOK < — i 
Return CheelcOK 

20 27. 1.^.12 ChockOK ChockUpgrQdoKoyForFiold(FioldNum,MtKoyRof) 

Th i s function ch e cks that auth e nt i cat e d writ e p e rm i ssions is al l ow e d to the fie l d. I t a l so ch e cks 
that only on e key has R e adWrito access and a ll other keys havo RoadOnly access. KeyR e f which 
updates count rema i ning must not have writ e acc e ss to tho upgarde value f i eld. 
KeyNum < Ml [FieldNum] . KeyNum 
25 AuthRW < Ml [FieldNum] .AuthRW 

NonAuthRW < Ml [FieldNum] .NonAuthRW 
DOForKcyo< — Ml [FieldNum] .DOForKeyo 

iChcck that KeyRef docan' t have write pcrmiaaiona to the field 
I f ( KcyRG f . IccyNum = KeyNum ) 

30 CheelcOK < 0 

Return CheekOK 

Endlf 

§AuthRW acccao allowed or NonAuthRW not allowed 
If (AutliRW «i 0) V (NonAuthRW « 1) 

35 CheelcOK < 0 

Return CheekOK 

Endlf 

For i < — 0 to 7 
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# Kcya other than KcyNum arc allowed RcadOnly^ acccaa, 

# DeorementOnly acceaa not allowed for other kcyo (not KcyNum) 
If (i ^KcyNum) a (DOForKcyo [i] « 1) 

ChoGlcOK < 0 



Rotum ChcclcOK 

Endlf 

§ReadWr±te acceaa allowed for KeyNum, 

^ReadWrlte and DecrementOnly acceaa not allowed for KcyNum, 
If (i ■ KcyNum) a (DOForKcyo [i] — ° 1) 



10 



Chcc]cOK < 0 
Return ChccltOK 



Bndlf 



EndFor 
ChGGlcOK < — t 
1 5 Return ChcclcOK 

27.1.4.13 UpgradoTypo GotUpgrad e Type(FieidNum, Ml) 

This funct i on g e ts tho typo attributo for tho upgrade fiold. 
UpgradcTypc GctUpgradcTypG (FicldNum) 
UpgradGTypc< Ml [FicldNum] -Type 
20 Return UpgradcTypc 

27.1.4.U GotFio!dDataWordc(FfofdNum,FioidDQtQn, M0,M1) 
Th i s function g e ts th e words corr e sponding to a giv e n fi e ld. 
CurrPoa < — MaxWordlnM 
If Ficld^Tum = 0 



25 



CurrPoo < — MaxWordlnM 

Elac 

Currroo < (Ml [FicldNum 

laot word of the 



1] .Endro3) 1 # Next lower word after 



# prcviouo field 



30 



Bndlf 

EndPoa < (Ml [FicldNum] .EndPoo) 
For i < — EndPoo to CurrPoo j — < — ^ 

FicldData [j] — < — MO [i] — # Copy MO word to FicldData array 

EndFor 



35 



StartRollBagk 



input: 

Output: — 
Changos: 



K e yRof, MoOfExtorna l , M^OfExtoma l , Ch i pid, F i o l dNumL, 
Fi e ldNumE, inputParam e t e rCheck (optional), R^, S I G^, R^a 
RosultF l ag, FieldSel e ct, FloldVa l , R^^r-SIGout 
-M O and R| , 
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Avaiiabi/ity ink r e fill QA Dovico and Parametor Upgrador QA Dovioo 

27.2.1 Function dosor i ption 

StartRollBaok funcWon is used to start a rollback eoqu e nc e if tho.QA Device bo i ng upgrad e d d i dn't 
r e c ei ve th e transf e r m e ssag e corr e ctly and honco d i dn't roco i vo tho tranofor. 
5 Tho system cal l s th e function on th e upgrading QA D e vice, pass i ng in Fi e ldNumE and Chipld of 
tho QA Dovico bo i ng upgraded, and FioldNumL of tho upgrad i ng QA Dev i ce. Tho upgrad i ng QA 
D e vic e chocks that tho QA Dovio e b e ing upgraded didn't actual l y r e c e iv e th e m e ssag e corr e ctly, 
by comparing tho valu e s r e ad from th e dev i ce w i th the va l ues stored i n tho Xfor Entry cacho. Tho 
va l u e s comparod Is th e valu e of th e e e qu e nco fields. After al l ch e cks ar e fulfi l led, th e upgrading 

10 QA Dev i c e produc e s th e n e w data for tho sequenc e fi el ds and a signature. This is subsequently 
applied to th e QA Dev i c e being upgraded (using the WhtoFioldAuth function), which updates the 
Goquonco fiolde SEQ_1 and SEQ_2 to th e pr e rol l back va l u e s. However, tho n e w data for the 
sequence fie l ds and signatur e can only b e appl i ed i f th e pr e v i ous data for th e sequ e nc e f ie lds 
produc e d by Xf e r function has not boon wr i tten. 

15 The output from th e StartRo l lBack funct i on consists on l y of th e field data of th e two sequence 

fi el ds, and a signatur e us i ng tho rofi l l key. Wh e n a pre ro ll back output i s produced, then sequence 
fi e ld data in SEQ_1 (aG stored in th e Xfer Entry cach e , which io what ic passed in to tho 
Xf e rAmount function) I s d e cr e m e nt e d by 1 and th e s e qu e nce field data in SEQ_2 (as storod in th e 
Xf e r Entry cacho, which is what is passod in to th e Xf e rAmount function) i s d e cr e mented by 2. 

20 Additional InputParam e terChock va l ue must be provided for tho param e ters net i nc l uded i n th e 
SIG s, if tho transmiss i on between the System and Ink Refil l QA D e vic e i s e rror prone, and th e s e 
e rrors are not corrected by tho trans i mission protoco l its el f. InputParamotorChock is SHA 
f /F i oldNumL | F i eldNumE I and is r e quir e d to ensure tho integrity of thoso parameters, when 
those inputs ar e rece i ved by th e Ink R e fil l QA Device. 

25 The Sto/tffQ//8ac/c funct i on must first calculat e tho SHA ^/F i oldNumL | F i e l dNumE/, compare tho 
ca l culated value to th e valu e rece i v e d (InputParamotorChock) and only i f the values match act 
upon the i nputs. 

27.2.2 I nput parameters 

30 Tabl e 293 describes e ach of th e Input param e t e rs for StartRollback function. 



Param e ter 



Dosor i ption 



KeyRef 



For common k e y input signature: KeyRofk e yNum - S l ot number of tho koy to 



b e us e d for t e sting Input signatur e . SIG^ produc e d.us i ng K KeyRefe c o yNu i H by tho 
D e v i ce boing upgraded. KoyRof.usoCh i p I d ~ 0 



For variant koy input pignaturo: KoyRof.koyHum r S l ot number of the k e y to b e 



used for g e nerating th e var i ant koy for testing Input signature. S/G^ produced 



KoyRof.koyNu 



^by tho QA D e vic e b e ing upgraded. 



KoyRof.uscChipId "1 KoyRof. ch i pld - Ch i p l d of the dovico wh i ch generated 
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All lb woras or oj the UA Device being upgradod which failed to upgrado. 


u^OfExtomal 


All 16 words of of the QA Dovice boing upgraded which failod to upgrade. 




Chipid of the QA Devico boing upgradod which foiled to upgrado. 


FiefdNumL 


1^ field number of the local (refill) device from which tho value woo cupposod to 
transferred. 


FloldNumE 


1^ fiold number of tho QA Device being upgraded to which the value couldn't be 
transforrod. 




External random value used to verify input signature. This will bo the R from tho 


input signature generator (i.o device generating S/Gg). The input signal 
generator In this case, Is tho device which failed to upgrade or a translation 


device. 




External signature roquirod for authenticating input data. Tho input data in this 

r*-rte>£\ \e> ifm if fr^tnn t\r\r^ O^oW fi m/->ti/-«n r^A«-f Ai>>mnr<kr<l r\n 






to upgrade. A conroct S/Ge-= SIGKeyRef(Data | R& | R^J^ 



27.2.2, 1 Input eignaturo vorificQtlon data format 
R e f e r to S e ction 27.1 .2.1 . 

27.2.3 Output parameters 

5 Tabl e 29^ d e scribes e ach of the output param e t e rs for StartRol l back function. 



Parameter 


Description 


ResultFlag 


Indicates whether tho function completed successfully or not. If it did 




not comploto succossfully, tho roason for tho failure is returned here. 


Soo Section 12.1, Table 2Q2 and Table 295. 




FieldSeloct 


Soloction of fields to be written 

In this case the bits corresponding to SEQ_1 and SEQ_2 are set to 1 . 


All othor bits are set to 0. 


FieidVaf 






Updated data for soquonoo datat ffo/c/for QA Device being upgraded. 
This must be passed as input to the WriteFioldsAuth function of the QA 


Device boing upgraded. 






Internal random value roquirod to generate output signature. This must 
be passed as input to the WriteFiefdsAuth function or Tranefato 




function of tho QA Device boing upgraded. 




Output signature which must bo passed as an input to tho 


WritoFioldsAuth function of the QA Device boing upgradod. 
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Tablo 205. Result dof i n i t i on for StartRo ll Back 



ResultFlag Definition 


Description 


RollBacklnvalid 


RollBaok cannot be performed on tlie roquest becauso paramotoro for 
rollback is incorrect. 



R e f e r to Section 20.2.1 for dotails. 

27.2.4 Funct i on sequence 

Th e StartRollBack comm a nd is ill ustrated by th e following ps e udocode: 
Accept i nput param e t e rs K e yR e f, MOOfExt e rnal, MIOfExt e rna l , Ch i p i d, FieldNumL, 
10 . FieldNumE, R^,. S i G^ r^ 



§Ccnarata mcaaacfc for paaalng into ValidatcKcyRcfAnd£!ignatU 3FG 
function 

15 data < — (RWCcnoo | MSclcct | KGyldCclcGt | Chipid | WordSclGct | MO | Ml) 
# Refer to Figure 3 8 2 . 



# Validate KcyRcf, — and then verify oignaturc 
20 ReaultFlag = ValidateKcyRcf AndSignature (KeyRef , data , Rs, Ri ,^ 

If (RoaultFlag # Paoo) 

Output ReaultFlag 

Return 



25 



Endlf 



Check Scq Fie Ida Exiat and get their Field Num 

# Get Seqdata field SEQ_1 num for the device heing upgraded 
Xf crCBQ_lField^Jum< GctFicldNum (MlOf External , SBQ_1) 

30 

# Check if the Ceqdata field CEQ_1 ia valid 
If (Xf erSEQ_lFieldNum invalid) 

— RcoultFlag < — S e qFi e ld Inva li d 

Output ReaultFlag 

35 Return 

Bndlf 

# Cot Ceqdata field CEQ_2 num for the device heing upgraded 
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XfGrSBQ_2FicldlTum< — GctFicldNum (MlOf External , SBQ_2 ) 

# Check if the ecqdata field CEQ_2 ia valid 
If (XforCEQ_2FioldNum invalid) 
— RQoultFlag < S e qF ie ld l nvalid 

Output RcoultFlag 

Return 

Endlf 



# Cot CcqData SEQ_1 data from device being upgraded 
GctFicldDataWorda (Xf crSBQ_lFicldNum, 

Xf erSEQ_lDataFromDcviae , MOOf External , MlOf External ) 

1 5 # Got CeqData BEQ_2 data from device being upgraded 

GetFicldDataWordo (Xf crSEQ_2FieldNum, 

Xf erCBQ_2DataFroinDeviGe , MOOf External , MlOf External ) 



20 # Check Xfer Entry^ in cache ia correct data^jot cjciata. Field 

data 

# and aequence field data matchca and Xfer Ctate ia correct 
XferEntryOK < CheelcEntry (Chipid, FieldNumE, FieldNumL, 
Xf crCEQ_lDataFromDevicc , — XferSEQ 2DataFromDcvioe) 



25 



If( XferEntryOK" 0) 

— ReoultFlag < Ro ll Backlnval i d 

Output ReoultFlag 

Return 



30 Endlf 



# Goncrato Seqdata for €EQ_1 and CEQ_2 fielda 

XfcrSEQ_lDataToDevicG ° Xf erCEQ_lDataFroinDeviae i 

35 Xf erSBQ_2DataToDevice ° Xf erSBQ_2DataFromDevice ^ 

^ Generate FicldCelect and FieldVal for aequence fielda CEQ_1 and 
CEQ_2 

CurrentFiGldCGlcGt< ^ 

40 FieldVal < — & 
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GcncratcFicldSGlGGtAndFiclcLVal (Xf crSEQ_lFicldNum, 

Xf crSEQ_lDQtaToDcviGC, Xf crSEQ_2FiGldNum^ Xf crSEQ_2DataToDQviGQ, 
FiGldSGlGGt , — FioldVal) 

5 ^Ccncratc mcaaagc for paaaing into Genera tc€ignaturc function 

data < — (RWSGnoG | FiGldflGlGCt | Chipid | FiGldVal) # Refer to FigurG 
373, 

^Create output aignaturc for FicldNumE 
&iGettfe< — GcncratcSignaturG (KGyRGf , data , Rfe a-7-3E^4- 
10 Update R^ ^ to R^ ^ 

ReoultFlag < — Paoo 

Output ReaultFlag, — FieldData, — Rfcs__SiGeafe 

Rctur a 

Endlf 

15 ^Tid RollBackAmount 

input: KoyRof, MoOfExtomal, j^OfExtorna l , Ch i pid, F ie tdNumL, 

F i e l dNumE, InputParam e t e rChock (optional), Re, S I Ge 

Output: Resu i tF l ag 

Ctiangos: Mo-and-Rt. 

20 AvQilablity: /n/c r e ftii QA D e vice 

27.3.1 Function d e scr i ption 

RollBackAmount iuncWon final l y adjusts tho va l u e of the F i o l dNumL of the upgording QA D e vic e 
to a pr e v i ous va l ue befor e th e transfer request, i f the QA Device being upgrad e d didn't r e c ei v e th e 
transfer mossage correctly (and h e nc e was not upgrad e d). 

25 Th e upgrading QA D e v i c e ch e cks that th e QA Dev i c e b e ing upgrad e d didn't aotua ii y r e c e iv e th e 
transfer message correct l y, by compar i ng the s e qu e nc e data f iel d va l u e s read from tho dov i co 
w i th tho valu e s stored in th e Xf e r Entry cache. Th e s e qu e nc e data field va l ues r e ad must match 
what was pr e v i ous l y writt e n us i ng th e Steffffo//Sac/c function. Aft e r a l l checks ar e fu l f i ll e d, th e 
upgrading QA D e vic e adjusts itS - FioldNumL. 

30 Additional InputParamet e rCh e ck va l u e must b e provided for tho param e ters not i nclud e d in th e 
S I Gg, I f th e transmiss i on b e tw ee n th e Syst e m and Ink Refil l QA Devic e i s e rror pron e /and th e se 
errors are not corrected by tho transimiss i on protoco l its el f. InputParamotorChock i s SNA 
^/F i eidNumL | Fio l dNumE ], and is required to ensure tho i ntegrity of those parameters, when 
th e s e inputs ar e r e c e ived by tho Ink R e f ill QA D e vice. 

35 Tho f?o//Bac/</\/noi/nMunction must first calcu l at e th e SHA f/F ie ldNumL | F iel dNumEy, compar e 
th e calculat e d valu e to tho va l u e r e c ei ved {InputParam e terClieck) and only if tho valu e s match act 
upon th e i nputs. 

27.3.2 I nput paramotoro 

Tab l e 206 describ e s oach of th e i nput parameters for Ro l lbackAmount funct i on. 

40 
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Parameter 


Description 


KeyRef 


For common key input signQturs: KoyRof.koyNmn ~ Siot number of the key to 
be used for tQstina inout signature S/Ge produood using Ku^^^o^* i^^wm. bx/thfaOA 


Dovioe being upgraded. KeyRef.usoChipId - 0 






For variant key input eignoture: KoyRof.keyNum ~ Slot number of tlie key to bo 


used for generating the variant key for tdbting input signature. S/Gg produced ^ 


using a variant of-KKoyRof.koyNum by the QA Device being upgraded. 




fvcyixcT.usconipiQ — i r^oyfxQT.Gnipiq — onipiq ot ine oevice wnicn generaieo 




/\N ID woras oT O' ino vjj/\ uevice peing upgraoeo wnicn laHeg lo upgraoe. 


uirOfExtornal 


AH 16 words of mi of the QA Device being upgraded which failed to upgrade. 


unipio 


Chipid of the QA Device being upgraded which failed to upgrade. 


FieldNumL 


uui fieid number of the local (refiih device from which the value was supposed to 
transferred. 


FieidNumE 


^4o field number of the QA Dovice being upgraded to which the value was not 
transferred. 




External random value used to verify input ^ionatur^ Thl5! will bo tho R from the 
input signature generator (\ e device generating S!Gl:\ The inout sianai 


generator in this case, is the device which failed to upgrade or a traneiation 


device. 




External signature required for authenticating input data. Tho input data in this 
caso, is tho output from the Rood function performed on the device which failed 




to upgrade. A correct SiG^r SIGKeyReKPata | | R^^t 



27,3.2. 1 input Gignaturo gen e ration data format 

Refer to S e ct i on 27.1 .2.1 for deta il s. 

27.3.3 Output parameters 

5 Tab l e 297 d e scr i b e s e ach of the output param e t e rs for RollbackAmount. 



Parameter 


DoQcription 


RosultFlag 


Indicates whether the function comploted successfully or not. If it 


did not comploto successfully, the reason for the failure is 
returned hero. See Sootion 12.1, Table 292 and Table 295. 





27.3.^ Function s e qu e nce 

10 Tho RollBackAmount command is ill ustrated by tho fo l low i ng pseudocode: 

AGGcpt input paramctcro KeyRef, MOOf External, MlOf External, 
Chipid, FieldNumL, FiGldJTumE, 11^,010^ 
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^Ccncratc mcooago far paaaing into ValldatcKcy^RcfAndSlgnaturc 
function 

data < — (RWScnoc | MCclcct | KcyldSclGCt [ Chipid | WordSclcct | MO | Ml) 
# Refer to Figure 3 8 2. 

5 

# Validate Kcy^Rcf, — and then verify aignaturc 

ReoultFlag = ValidateKeyRefAndSignature (KeyRef , data, Rs/ Rfe 4- 

If (ReaultFlag # Paoo) 

Output ReoultFlag 

1 0 Return 

Endlf 



# Check £cq Ficlda Exiat and get their Field Num 

# Get gogdata field SEQ_1 num for the device being upgraded 
15 XferSEQ_lFieldNum< GetFieldNum (MlOf External, CBQ 1) 



# Check if the Scqdata field CEQ_1 ia valid 
If (XfGrSEQ_lFicldIJum invalid) 

20 — ReoultFlag < — SoqFi el dlnval i d 

Output ReoultFlag 

Return 

Endlf 

# Cot Geqdata field €EQ_2 num for the device being upgraded 
25 Xf erSEQ_2FieldNum< GetFieldNum (MlOf External , SEQ_2 ) 

# Check if the Geqdata field €EQ_2 ia valid 
If (XferSEQ_2FieldNum invalid) 

— ReoultFlag < S e q F ie ld I nvalid 

30 Output ReoultFlag 

Return 

Endlf 



35 # Got CeqData CEQ_1 data from device being upgraded 

GetFieldDataWordo (Xf erSEQ^lFieldNum, 

Xf erSBQ_lDataFroinDevico, MOOf External , MlOf External) 

# Got CeqData GEQ_2 data from device being upgraded 
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GctFicldDataWordo (Xf GrSEQ_2FicldNum, 

Xf crSEQ_2DataFromDGvicc , MOOf Bjctcrnal , MlOf External ) 



5 # Cancratc Ccqdata for GEQ_1 and CEQ_2 flclda with the data that 

ia read 

Xf GrSEQ_lData = xf crSEQ_lDataFromDcvicc — i — i 
Xf GrSEQ_2Data = Xf QrSEQ_2DataFromDcvicc — i — S- 

10 # Check Xfcr Entry in cache ia correct dataaet exiata, — Field 

# and acquencc field data matches and Xfcr Ctatc ia correct 
XfGrEntr^OK < — ChcGkEntry (Chipid, — FieldbTumE, FiGldNumL, 
XfGrSEQ_lData, Xf GrSEQ_2Data) 

15 

If( XfGrEntryOK^ 0) 

RGOultFlag < — Ro 1 iBacklnval id 

Output RGOultFlag 

Return 

20 Endlf 

# Get AFicldDataL from DataCct 
GetVal (Chipid, FiGldtJumE, AFicldDataL) 

# Add AFicldDataL to FicldNumL 
AddValToFiGld (FiGld^JumL, AFicldDataL) 

25 # Update XfcrState in DataSct to complete/deleted 

UpdatGXf QrStatGToCotnplGte (Chipld^ FicldNumE) 
RGOultFlag < — Paao 
Output RGOultFlag 
RGtum 

30 
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Funct i ons 
Upgrade dev i ce 

(Pn i NTER UPCnADE) 

28 Conc e pts 

5 This soction is very sim il ar to Sect i on 26. Th e d i ff e r e nc e s botwoon this sect i on and S e ct i on 26 
have boon summaris e d and under l ined, where required. 
Purpose 

In a pr i nt i ng appl i cation, q printer conta i ns a Pr i nter QA Dov i co, wh i ch stores details of the various 
operating parameters of a printer, some of wh i ch may b e upgrad e ab le . The upgrad e ab le 

10 param e t e rs must be wr i tten ( i n i t i a l ly) and changed i n an author i s e d manner. 

The authorisation for th e wr i t e or change is achieved by using a Paramotor Upgrador QA Dovico 
which conta i ns the necessary funct i ons to a l low a writo or a chango of a paramotor va l ue (e.g. a 
print speed) into anoth e r QA D e v i ce, typically a print e r QA Devic e . Th i s QA D e v i co is a l so 
r e f e rr e d to as an upgrading QA Dovico. 

15 A param e t e r upgrad e r QA D e v i c e is abl e to p e rform a f i xed numb e r of upgrad e s, and this number 
i s eff e ct i vely a consumab le value. Tho number of upgrades rema i ning is also referred to as 
count - ronnaining. With each writ e /change of an op e rating paramotor in a Printor QA Dovico, the 
count remaining decreas e s by 1 . and can be replenish e d by a value upgrad e r QA D e vice. 
Th e Parameter Upgrador QA Dovic o can a l so b e r e ferred to as tho Upgrading QA D e vic e , and th e 

20 Printor QA D e vic e can also be referr e d to as th e QA Dovico being upgrad e d. 

Tho writing or chang i ng of th e param e ter can a l so bo referred to as a transfer of a paramet e r. 
T ho Parameter Upgrador QA Dov i co cop i os i ts paramotor va l ue field to tho param e t e r valu e fi el d 
ef^ Pr i nt e r QA Device, and d e cr e m e nts th e count remain i no fie l d associat e d with tho baram etep 
v a l ue field bv -1-r 

25 2^r2 Requ i rements 

Tho transfer of a parameter has two bas i c r e qu i r e m e nts: 

Th e transfer can only bo porformod i f tho transfer request i s val i d. Tho va l idity of th e 

transfer r e quest must b e comp le t e ly ch e cked by th e Param e t e r Upgrad e r QA Devic e , 
b e for e it produc e s tho required output for th e transfer. It must not b e poss i ble to apply tho 
30 transfer output to the Pr i ntor QA Devico, if the Paramotor Upgrad e r QA Dov i co has boon 

a l r e ady been ro ll ed back for that part i cular transfer. 

^ A process of ro l lback is ava i lab l e i f th e transfer was not rec ei ved by the Pr i ntor QA 

Dev i c e . A ro ll back is porformod on l y i f th e ro ll back roquost i s va li d. Tho va l idity of tho 
ro ll back request must bo comp l ot el y ch e ck e d by tho Paramotor Upgrad e r QA Dev i co , 
35 b e for e the count remaining va l ue is incromontod by 1 . I t must not bo possiblo to ro l lback 

an Parameter Upgrador QA D e v i ce for a transf e r, which has already b ee n app l i e d to th e 
Pr i nt e r QA Dovico i.e tho Paramotor Upgrador QA Dov i co must only bo ro ll ed back for 
transfers that have actual l y fai l ed. 

40 28.3 Ba s ic schcmi: 
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Th e transfer and roi l baok process i G ohown in Figuro 383. 

Fo ll owing is a ooquontia l doscr i ption of the transfer and ro ll baok procoss: 

4t Tho Syctom RoodG the momory vectors MO and M1 of th e Pr i nt e r QA Devioo. The output from 

the road wh i ch i ncludes the MO and 1 ^1 words of the Printer OA Dovico, and a o i gnoturo, is 
5 passed as an i nput to th e Tranefer Roqu e et I t is e ss e nt i a l that MO and l \^1ar e r e ad 

tog e th e r. This ensur e s that th e fio l d i nformat i on for MO fie l ds aro corroct, and hav e not boon 
modif ie d, or substitut e d from another device. Entire MO and M1 must b e road to ver i fy the 
correctness of th e subsequ e nt Transf e r Requ e et by tho Paramet e r Upgrador QA Dovico. 
2-. Tho Syst o m makoG a Trancfor Roqu e st to the Parameter Upgrador QA D e vice with tho field in 

10 th e Parameter Upgrad e r QA D e v i c e whoso data wi ll bo copi e d to th e Printer QA D e vic e , 

and tho fio l d i n Printer QA D e v i c e to wh i ch this data w ill b e cop i ed to. Th e Transf e r R e quest 
also i nc l ud e s tho output from R e ad of the Printer QA D e vic e . Th e Param e ter Upgrader QA 
D e vic e validates the Tranefor Roquoot based on tho Road output, chocks that i t has 
e nough count rema i n i ng for a succ e ssfu l transfer, and th e n produc e s th e necessary 

15 Transfer output. Th e Transfer Output typica ll y consists of n e w fi el d data for th e fi el d b e ing 

r e filled or upgrad e d, additional fio l d data required to ensure tho oorroctnoss of 
transfer/rollback, a l ong with a signature. 

Th e System thon oppiioo tho Transf e r Output on tho Printer QA Dov i co, by ca l l i ng an 

authenticated Write on it, passing in tho Transfer Output, The Wr i t e is e ith e r successful or 

20 not. I f th e Write i s not successful, th e n th e System w i l l rep e at ca lli ng the Writ e funct i on 

using tho same transfer output, wh i ch may be succ e ssful or not. If unsucc e ssfu l th e Syst e m 
will in i tiat e a rollbaok of the transfer. Tho rollback must bo performed on tho Parameter 
Upgrader QA D e v i c e , so that it can adjust its valu e to a pr e vious value b e for e th e curr e nt 
Transfer Roquost v/QB i n i t i at e d. 

25 4-. — The Syotom otarts a rollback by Reading tho momory vectors MO and M1 of tho Pr i nter QA 
D e v i c e . 

Tho Systom makoo a StartRoHBack Requ e st to th e Param e t e r Upgrad e r QA Dev i c e with same 

i nput parameters as th e Transfer Request, and th e output from R e ad i n ( 4 ). Th e Param e t e r 
Upgrad e r QA D e vic e va l idates tho StartRollBack R e qu e st bas e d on th e Road output, and 
30 then produc e s th e n e cessary Pro rollback output. Th e Pr e- rollback output typical l y consists 

only of additional fio l d data along with a signature. 

6^ The Systom th e n applies tho Pre rollback output on th e Paramet e r Upgrad e r QA Dev i ce, by 

ca lli ng an authent i cat e d Writ e on i t, pass i ng i n tho Pro rollback output. Th e Writ e i s ei th e r 
succ e ssfu l or not. If tho Wr i te is not successful, thon e i ther (6), or (5) and (6) must bo 
35 rep e at e d. 

7^ The Systom thon R e ads the momory vectors MO and M1 of th e Print e r QA D e v i c e . 

The System makoo a RollBock Request to the Parameter Upgrader QA Dovico w i th same i nput 

param e t e rs as the Transf e r Request, and th e output from R e ad (7). Th e Param e t e r 
Upgrad e r QA Dev i c e va li dates tho RollBock Request bas e d on th e R e ad output, and th e n 
40 ro ll s back its count rema i n i ng fio l d by i ncromonting i t by 1 . 
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2%,^ Transf e r 

Th e Printer OA D e vic e stor e s upgradeable op e rating paramotor va l uoo i n MO f i o l do, and its 
corr e spond i ng M4 words conta i ns f i old informat i on for i ts operating param e ter f i elds. Tho field 
i nformat i on cons i sts of the size of the field, the Typo of data stored in field and tho accoso 
5 p e rmiss i on to th e fi el d. Soo Soctlon 8.1 .1 for details. 

Tho Paramotor Upgrad e r QA Dovico also stor e s th e now op e rat i ng paramotor va l uos (which wil l 
b e wr i tten to tho Printer QA Dev i ce) i n i ts MO f i elds, and its coresspond i ng M4 words contains f ie ld 
informat i on for th e now op e rating paramet e r f ie lds. Additiona l ly, tho Paramotor Upgrader QA 
Dovico hoG a count - romaining fi o ld associat e d with tho n e w operat i ng param e t e r value fi el d. Tho 
10 count romaining fi el d oocupios tho h i gh e r field position wh e n compared to its assoc i ated op e rat i ng 
parameter valu e fi e ld. 

28.3.1.1 Authorisation 

The bas i c author i sat i on for a transf e r com e s from a /coy, wh i ch has authenticated RoadWrito 
p e rmission (stor e d in fi e ld i nformat i on as KeyNum) to the operat i ng paramotor fio l d in tho Printor 
15 QA Dovic e . W e w i ll refer to th i s key as tho upgrad e iiey. Tho same upgrado i< e y must a l so have 
authenticated d e cr e mont - only permission to tho count r e ma i ning fi e ld (wh i ch d e crements by 1 
with ovory transfer) in tho Paramotor Upgrador QA Devico. 

Aft e r va li dating tho input upgrado r e quest, th e Param e t e r Upgrador QA Dovico wi l l docromont tho 
va l uo of th o count romaining field by 1 , and produce data (by copy i ng the data stored from i ts 
20 operating paramotor fi e ld) and s i gnatur e for th e n e w operating param e t e r using th e upgrado k o y. 
Note that tho Parameter Upgrader QA Dovico can docroment itG count r e maining fi e id only if tho 
upgrado koy hoe tho p e rmieeion to d e or e mont it. 

Tho data and s i gnatur e produced by th e Paramotor Upgrador QA Dovic e is subsoquontly app li ed 
to the Printor QA Dovic e . Th e Printor QA D e vico wil l acc e pt tho now transferred operating 

25 paramotor, on l y i f tho s i gnature is val i d. Note that th e signature will onty b e valid if it was produced 
using tho upgrade koy which has write p e rmieeion to th e operating param e t e r fi e ld boing written. 
T ho uDorado kov has authenticat e d R e adWrito oormission to tho oporat i no param e t e r fi e ld (which 
wil l chanao) i n tho Print e r QA D e v i c e . Th e upgrado k e v has d e cr e ment - on l v permisoion to th e th e 
eo unt r e ma i ning fi e ld (wh i ch decr e m e nts by 1 with overv transfer of fiold) in tho Para fwetep 

30 Upgrad e r QA D o vl Ger 

28.3.1.2 Data Typo matching 

Tho Paramet e r Upgrador QA Dovico validates tho transf e r request by matching th e Typo of tho 
data in tho fio l d informat i on of operat i ng paramotor fiold (stored in M1) of Print e r QA D e v i co to the 
Typ e of data i n tho fiold i nformat i on of operat i ng paramotor fio l d of tho Parameter Upgrad e r QA 
35 Dovico. This ensures that equiva le nt data typ e s ar e b e ing transferred i.o 

Network_OEM1_printspeed_1500 i s not transferred to Notwork_OEM1_pr i ntspood_2000. 

28.3.1.3 Addition validation 

Add i tiona l validation of th e transfer request must bo performed b e for e a transfer output is 
generated by tho Paramotor Upgrador QA Devic e . Th e so aro as follows: 
40 For th e Pr i ntor QA Dov i co 
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4^ Whether the fiold b e ing upgradcxi is actually present 

2-. Whether the fio l d be i ng upgraded can hold th e chang e d va l u e . 

For th e Parameter Upgrador OA D e vic e : 

4-: Whothor the new op e rating parameter fiold and its assoo l atod count romo i ning is actua ll y present. 

5 2-. Whothor the count remaining fi e ld ha s an upgrad e le ft for the transfer to succeed. 

28.3.1,4 RoUb a ok faciiitation 

To facil i tato a ro ll back, tho Param e t e r Upgrad e QA Devico wi l l etoro a liet of transfer requeete 
proc e ss e d by i t. Th i s list is referred to as th e Xf e r Entry cache. Each rocord i n th e l ist cons i stc of 
the transfer paramotors corrospond i ng to tho transfor roquost. 

10 ReHbaek 

A rol l back request w i ll b e va l idat e d by looking through th e Xf e r Entry cach e of th e Param e t e r 
Upgrad e r OA Dev i c e . Aft e r tho r i ght transfor roquost is found tho Paramotor Upgrade QA Dov i co 
chocks that th e output from th e transfor r e qu e st was not appli e d to tho Print e r OA Devic e by 
comparing tho current Read of tho Pr i nter QA Dev i c e to tho va l ues in the Xfor Entry cach e , and 

15 fina l ly ro l ling back the Param e ter Upgrador QA D e vic e count r e maining fi o ld by increm e nting i t by 
4. 

Tho Paramotor Upgrador QADq\/\cq must bo abso l ut el y sur e that th e Print e r QA D e v i c e d i dn't 
r e ceive tho transf e r. Th i s factor determines th e addit i ona l fi el ds that must b e writt e n along with 
now operating paramotor data, and also th e parameters of tho transf e r r e qu e st that must bo 
20 stor e d I n th e Xfor Entry cach e to faci l itat e a rol l back, to prov e that th e Print e r QA D e vic e didn't 
actually r e c e iv e th e transfor. 

Th o ro l lback process incr e m e nts th e count remain i ng fi e ld bv 1 in th e Parameter Upgrador QA 
D ov i c o . 

28.3.2.1 S e qu e nce fioldc 

25 Th e rollback proc e ss must ensure that th e transf e r output (which was prev i ous l y produc e d) for 
which th e rol l back is be i ng performed, cannot bo appl i ed after the rollback has boon p e rform e d. 
How do w e ach i eve this? Thoro ar e two s e parate dooromont only s e qu e nc e f ie lds {SEQ_1 and 
SEQ_2) i n th e Pr i nter QA Dovico wh i ch can only bo dooromontod by tho Paramotor Upgrader QA 
Device us i ng th e upgrade key. Th e natur e of data to b e wr i tten to tho sequ e nc e f ie lds is such that 

30 e ith e r th e transf e r output or th e pre rol l back output can bo app l ied to th e Print e r QA Dev i co, but 
not both i.o thoy must b e mutually exclus i ve. Refer to Tab l e 285 for deta i ls. 
Th e two s e qu e nc e fie l ds ore in i t i al i s e d to OxFFFFFFFF using s e qu e nc e k e y.Th e s e quence key is 
d i fforont to tho upgrad e key, and has authenticated R e adWr i te permission to both th e s e qu e nc e 
f i elds. 

35 The transf e r output consists of th e n e w data for tho fiold being upgrad e d, fi e ld data of tho two 

sequence f i e l ds, and a signature us i ng th e upgrade key. Tho f i o l d data for SEQ_1 is d e crement e d 
by 2 from th e or i ginal va l ue that was pass e d i n w i th tho transfor roquost. Tho fiold data for SEQ_2 
is dooromontod by 1 from tho or i g i na l va l u e that was passed in w i th the transf e r request. 
Th e pre - rol l back output consists on l y of tho fiold data for tho two soquonoo f i e l ds, and a signature 

40 us i ng th e upgrad e key. Th e fi el d data for SEQ_1 i s decr e m e nted by 1 from th e orig i na l va l u e that 
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was passod i n w i th th e transfer request. Tho fiold dato for SEQ_2 is docrom e nted by 2 from th e 
or i ginal voluo that was passed in with tho tronofor roquost. 

Since tho two sequence f i e l ds are d e cr e ment on l y fie l ds, tho wr i ting of tho transfer output to OA 
Device being upgraded w i l l pr e vent tho writing of tho pre ro ll back output to OA D e vice being 
5 upgraded, s i nce tho soquonc e fi e lds ar e d e cr e m e nt on l y f i elds, and only on e possib l e set can bo 
wr i tten. If tho writ i ng of th e transf e r output fa i ls, thon pro rollback can bo written. However, tho 
transf e r output cannot b e wr i tt e n after tho pro rol l back output has be e n written. 
Before a rol l back i s porformod, tho Param e t e r Upgrader QA D e v i c e must confirm that th e 
sequence fields was succ e ssfully written to th e pr e rollback va l u e s i n th e Printer QA Device. 
10 Booauso th e s e qu e nc e fi el ds aro docromont on l y fie l ds, tho Printer QA Dev i ce wi l l allow pro 
rol l back output to b e writt e n on l y if tho transf e r output has not boon written. 
28.3.2.1.1 F iel d informat i on of th e s e qu e nc e data fiold 

For a device to bo upgradoablo tho device must havo two soquonce f ie lds SEQ_1 and SEQ_2 
which ar e writt e n w i th s e qu e nc e data dur i ng th e transf e r eequonc e . Thus all upgrad i ng QA 
15 D e vic e s, ink QA D e vic e s and printer QA D e v i ces must havo two coquonce fie l ds. The upgrading 
QA Dev i c e s must hav e th e s e fi e lds becaus e th e y can b e upgrad e d as wel l . Tho e e qu e nco fio l d 
i nformation ar e d e fin e d in Table 208. 
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Attr i bute Namo 



Va l ue 



Exp l anation 



TYPE SEQ 1 or TYPE SEQ 2. 



See Appondix A for exact data. 



K e yNum 



Slot numbor of tho soquonco koy. 



Oniy the soquonce key has 
a uthontic a tod 



R o adW ri t e a ccess to this field. 



Non Auth RW 



Non auth e nt i cated R e adWrite 



PGrm^ 



is not al l owed to tho field. 



Auth RW Porm^ 



Authenticat e d (k e y bas e d) RoadWr i te 



acc e ss 



a l lowed to th e fi el d. 



KeyPorm 



K e yPorms[K e yNum] " 0 



K e yNum i s the slot numbor of the 
soquonco key, 



which has RoadWrito porm l es i on to tho 



KoyPormQ[S l ot numbor of upgrade koy] ~ 



Upgrad e liey can d e cr e m e nt th e 
sequ e nc e field. 



K e yP e rms[oth e rs~ 0 .. /(except upgrade 
toy)] - 0 



Al l other k e ys hav e /? e oc/0/7/y access. 



End Pes 



S e t as requ i red. Size i s typical l y 1 word. 



a. This is a sample typ e on l y and Is not i nclud e d i n th e Type Map in App e ndix A. 
5 b. Non auth e nticat e d R e ad Wr i t e p e rmission, 
c. Authenticated R e ad Wr i te permiss i on. 
28.3.3 Upgrade states 

Th e re are thr ee states i n an transf e r s e quence, tho first state Is in i t i ated for every transfer, whi l e 
tho next two states oro i nitiated on l y wh e n the transfer fa il s. Tho states are - Xf e r, StartRol l back, 
10 and Ro ll back. 

28,3.3,1 Upgrade Flow 

Figure 384 shows a typica l upgrade flow. 

Th i s stato indicates th e start of the transf e r proc e ss, and is the on l y state required i f tho transfer is 
15 successfu l . Dur i ng this stat e , th e Parameter Upgrader QA Device adds a n e w record to its Xf e r 
Entry cache, decrements its count remain i ng by 1, produces new operating parameter field, new 
s e qu e nc e data (as described i n Soction 28.3.2.1) and a s i gnature based on tho upgrad e k e y. 
Tho Printer QA Dev i ce wi l l subs e qu e nt l y wr i te th e n e w operating parameter field and n e w 
s e quence data, aftor ver i fying the signature. If th e n e w op e rating parameter field can bo 
20 successful l y wr i tten to tho Printer QA Dev i ce, then th i s w ill finish a succ e ssful transfer. 
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I f th e wr i ting of tho now amount is unsuocessfu i (rosuit roturnod i s BAD S I G ), tho Systom w il l r e- 
transmit tho transf e r output to tho Printor QA Device, by cal l ing tho auth e nticated Writ e function 
on i t aga i n, us i ng tho same transfer output. 

I f retrying to write th e sam e transf e r output fai l s rep e atedly, tho Systom wi ll start tho rol l back 
5 proc e ss on Param e t e r Upgrad e r QA D e v i ce, by ca ll ing th e Read funct i on on tho Pr i ntor QA 
Dov i co, and subs e qu e ntly cal li ng th e StartRo ll Back function on tho Parameter Upgrad e r QA 
Dev i ce. After a successfu l rollback is perform e d, the Systom w i l l i nvoke tho transfer soquonco 

again. 

28.3.3.3 StartRollBGck 

10 Th i s state indicatos tho start of tho rol l back proc e ss. Dur i ng this stat e , th e Param e t e r Upgrad e QA 
D e vioo produces tho next soquonco data and a s i gnature bas e d on th e upgrado koy. This is also 
call e d a pr e- rollback, as d e scr i bed i n Sect i on 26.3.2. 

Th e pr e- ro ll back output can only b e wr i tten to tho Print e r QA D e v i ce, i f the previous transfer 
output has not been wr i tten. The writing of the pro rollback s e qu e nc e data a l so ensur e s, that i f th e 
15 pr e v i ous transfer output was captur e d and not appl ie d, th e n it cannot bo app li ed to th e Print e r QA 
Dovico in tho future. 

If th e writ i ng of the pre rollback output i s unsuccessful (rosuit roturnod Is BAD S I G ), th e Syst e m 
w il l ro transmit tho pro rol l back output to th e Pr i ntor QA Dov i co, by cal l ing the authenticated Write 
function on i t aga i n, using tho sam e pr e rollback output. 
20 If retrying to writ e the same pr e- ro ll back output fails repeat e d l y, th e Syst e m will cal l th e 
StartRollback on the Parameter Upgrade QA Dev i c e aga i n, and subs e qu e ntly call i ng the 
authent i cated Wr i te funct i on on th e Printer QA Dev i ce using this output. 
28.3.3.^ Rollback 

This state indicates a successfu l d e l e tion (compl e t i on) of a transfer sequenc e . During this stat e , 
25 the Param e t e r Upgrader QA D e v i c e v e rifi e s th e s e quence data produced from StartRo ll Back has 
boon correctly written to Pr i nter QA Dev i ce, then ro l ls its count rema i ning fi el d to a previous value 
b e fore tho transfer request was issued. 
28.3. 4 Xf e r Entry cach e 

Th e Xfor Entry data structure must al l ow for th e fo ll owing: 

30 Stores tho tranof o r state and sequenc e data for a giv e n transf e r Gequence. 

Store all data corresponding to a given transfer, to f a ci li tat e a rollback to the pr e vious va l u e 

b e for e th e transf e r output was g e n e rated. 
Th e Xfor Entry caoho depth w il l d e pend on th e QA Chip Log i ca l Interfac e imp le m e ntation. For 
som e imp l em e ntat i ons a s i ngle Xfor Entry vaiuo will bo saved, if the Parameter Upgrader QA 
35 Device has no powersaf e storag e oiXfor Entry cacho, a powor down will caus e th e e rasure of th e 
Xf e r Entry cach e and tho Paramet e r Upgrader QA Devic e wil l not be able to rollback to a pr e 
power down va l u e . 

A datas e t i n the Xfor Entry caoho wi ll cons i st of tho follow i ng: 

Information about tho Pr i ntor QA Dev i ce: 

40 a: Ch i pid of tho dovioo. 

PEA23US 852 



b-. F i o i dNum of tho MO fiold ( i .o what was b ei ng upgradod). 

I nformat i on about th e Param e t e r Upgrad e r QA Dov i co: 

at FioidNum of tho MO f i o l d usod to transfer tho count roma i n i ng from. 

^ Xfor State indicat i ng at which stat e the transf e r Goquonco is. This w ill consist of: 

5 €h state d e fin i t i on which cou l d bo ono of tho fo ll owing: Xfor, 

StartRollBaok and doiotod (comp l otod). 

Th e va l u e of s equonoo data f i e l ds SEQ_1 and SEQ_2. 

T ho Xfor Entry cache stores th e FioidNum of tho count rema i ning fi e ld of th o Paramotor Upgrad er 
Q A Dev i c e . 
10 28.3.4,1 Adding r^ow dotQGOt 

A new dataset is added to Xf e r Entry cach e by the Xf e r function. 

Th e re ar e thr ee m e thods which can b e us e d to add new datas e t to th e Xfor Entry caoho. Tho 
m e thods hav e boon l i st e d b e low i n th e order of thoir pr i ority: 

4. R e p l acing e xisting dataset in Xfor Entry cache with now datas e t bas e d on Ch i p i d and 

15 FioidNum of th e I nk QA Dov i co i n tho now dataset, A matching Chipid and Fi e ldNum 

could bo found because a pr e v i ous frang/er output corr e spond i ng to th e dataset stored in 
th e Xfor Entry cache has boon corr e ctly rec ei ved and proc e ss e d by th e Paramot o r 
Upgrador QA D e vic e , and a n e w transfer requ e st for th e sam e Printer QA Devic e , sam e 
fi el d, has come through to th e Parameter Upgrador QA Dovico. 

20 2-. Rop i aco exist i ng dataset oaoho w i th n e w datas e t based on tho Xfor Stat e , /f th e Xf e r 

Stat e for a dataset indicates d e l e t e d (comp le t e ), then such a datas e t w i ll not b e us e d for 
any furth e r funct i ons, and can b e ov e rwr i tten by a now dataset. 

Add now dataset to tho ond of tho cacho. Th i s will automatically d e l e t e th e o l dest dataset 

from th e cache regardless of th e Xf e r Stat e . 

25 2^ Upgrading the count - remain i nc f i eld 

T his s e ction i s only app l icab le to th e Param e t e r Upgrad e r QA D e v i c e . 

Tho transfer of count - remaining is similar to transfer ink remaining because both involve 
transferring of amounts. Therefore, this transf e r us e s th e XferAmount function. 
Tho XforAmount function performs add i t i onal ch e cks wh e n transf e rr i ng oount - roma i n i ng. Th i s 
30 inc l ud e s checking of th e op e rating param e ter fiold, associated w i th th e count - roma i ning. Thoy 
ar e as fo ll ows: 

Th e op e rat i ng param e t e r va l u e of th e upgrad i ng QA Dov i co and th e QA D e vic e b ei ng 

upgradod must match. 

^ Th e operating paramotor fio l d ( i n both dev i cos) must b e upgradooblo by ono Roy only, and 

35 al l other keys must hav e Readonly acc e ss. Th i s /coy which has auth e nt i cated RoadWr i to 

permission to the operating paramet e r fi e ld, must bo different to tho key that has 
authenticated Read Wr i t e p e rmiss i on to the count - r e maining fie l d. 

Th e data Typo for the operat i ng param e t e r fi e ld in the upgr a d i ng QA D e v i c e must match 

tho data Typo for th e operating param e t e r fi el d in tho QA D e v i ce being upgrad e d. 
40 2Sr§ New opEnAT i NC parameter field i nformat i on 

PEA23US 853 



Th i s soct i on is on l y app li cabl e to tho Paramotor Uoarador QA DoviG er 

Th i s fie l d otoros tho op e rating parameter va l ue that is oopi e d from tho Paramotor Upgrador OA 
Dev i c e to the op e rat i ng param e ter field b e ing updat e d in the Printer QA D e v i c e . 
This fie l d has a single key assoc i ated w i th i t. This key has authent i cated RoadWr i te perm i ssion to 
this field and wil l b e referred to as writo - paramotor koy. 

Table 299 shews the field i nformat i on for th e n e w operat i ng paramotor field in the Parameter 
Upgrad e r QA D e vic e . 



Attribut e Name 



Valu e 



Exp l anat i on 



For e.g 



Typo descr i b i ng th e upgrad e . 



TYPE UPGRADE PR I NTSPEED 15 ^ 



KoyNum 



S l ot number of tho wr i te paramotor koy. 



Only tho writo - param e t e r key has 
authontioatod 



ReadWr i to acGOSS to th is f i e l d* 



Non Auth RW 



9 



Porm 



Non auth e nt i cat e d R e adWrito 



is not a l lowed to tho f i eld. 



Auth RW P e nm^ 



Authenticat e d (k e y based) R e adWr i t e 



access 



is a l low e d to the field. 



KoyPerm 



K e yP e rms[KeyNum] - 0 



KoyNum is the slot number of th e writo - 
paramotor koy which has R e adWrit e 



p e rmission to th e fi el d. 



K e yPerms[oth e rs- Q ..7] - 0 



Al l other keys hav e R e adonly acc e ss. 



End Pos 



S e t as r e qu i red. 



10 a. This is a samp l e typ e only and is not inc l uded i n the Typ e Map in Append i x A. 

b. Non authenticated R e ad Writ e p e rmiss i on. 

c. Authontioatod Road Write permiss i on. 



2%S D i fferent types of transfer 

15 There can be throe typos of transf e r: 

^ Param e t e r Transf e r Th i s is transf e r of an op e rat i ng param e t e r valu e from a Param e t e r 

Upgrador QA Dov i co to a Printer QA Dovico. Th i s is performed wh e n an upgrad e abl e 

op e rat i ng param e t e r is wr i tt e n (for th e first tim e ) or chang e d. 

Hi e rarch i ca l r e f i l l — This i s a transfer of count remaining value from one Parameter Upgrador 

20 Refifl QA Devic e to a Parameter Upgrador QA Device, whore both QA Dev i ces be l ong to 

tho same OEM. This is typical l y performed whon OEM div i des tho number of upgrades 

from on e of i ts Parameter Upgrad e r QA D e v i c e to many of i ts Param e t e r Upgrad e r QA 

D e v i c e s. 
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^ Poor to Poor rof i l l — Th i s i s a transfer of count romaining va l uo from ono Paramotor 

Upgrador Rofili QA Dovloo to Paramotor Upgrad e r R e fill QA D e v i c e , wh e r e th e QA Dovicoo 
b e long to d i fforGnt organisations, say ComCo and OEM. Th i s is typ i cally performod whon ComCo 
div i des numbor of upgrad e s from i ts Paramet e r Upgrad e r QADes/ 'i c e to sev e ral Paramotor 
5 typgratfor QA Dev i c e b el onging to s e vera l OEMs. 

Transf e r of count - r e ma i ning between peers, and hiorarch i oal transfer of count romainino. i s 
s i mi l ar to an i nk transf e r, but add i tional checks on the transfer reou e st i s oerformed whon 
transf o rr i no count r e ma i n i no amounts. This is d e scr i b e d in S e ction 28. 4r-4T 
^npfor of an oDorat i no paramet e r va l u e docromonts tho count romain i no bv 1 . h e nc e i s d i ffer e nt 
10 to a i nk transf e r- 
Figur e 385 is a r e pr e sentation of var i ous author i s e d upgrad e paths in th e pr i nting syst e m. 
28.6.1 Hiorarchical transf e rs 

Roforring to Figur e 385, this transf e r is typ i ca ll y p e rformed wh e n count - r e main i ng amount i s 
transforrod from ComCo's Parameter Upgrader Refi l l QA D e v i c e to OEM's Param e ter Upgrador 
15 R e fi ll QA D e vic e , or from QACo's Param e t e r Upgrad e r R e fil l QA D e vic e to ComCo's Param e t e r 
Upgrader Refill QA Device. 

Thi s transfers ar e mad e using th e Xf e rAmount funct i on (and not w i th th e XferFi e ld d e scr i b e d in 
S ect i on 29.1). b e causo count roma i n i ng transf e r Is similar to f i ll/r e f il ling of i nk amounts, wh e re i nk 
amount is replaced bv count romaining amount. 
20 28. 6.1.1 Koye and acc e ss p e rmiesion 

We w i l l explain this us i ng a transf e r from ComCo to OEM. 

Th e re is a count - r e maining fi e ld associat e d with th e ComCo's Paramet e r Upgrader R e fi ll QA 
Dev i c e . Th i s count r e maining T \e \(i has two k e ys assoc i at e d with: 

^ Th e first k e y transfers count - r e maining to th e d e vice from another Paramotor Upgrador 

25 Rofi ll QA dovico(dov i co is higher in the hoirachy), fiiis/rcfiiis tho device /too/f, 

Th e s e cond to/ transf e rs count - r e maining from i t to oth e r d e v i c e s (wh i ch ar e l ow e r in th e 

hoirachy), fi ll s/r e fills oth e r d e vic e s from it. 
There is a count remaining fi e ld associat e d with th e OEM's Param e ter Upgrad e r Refi ll QA D e v i c e . 
Th i s count remaining f i eld has a singl e /coy assoc i ated with: 

30 This key transfers count - remaining to the device from anof/?or Parameter Upgrader 

Rofil l l QA device (which is higher or at tho same level in the hcir a chy), fiils/rcfiils 
(upgrades) the device itself, and additionally iranQfcrti count rema i n i ng from i t to oth e r 
d e vic e s (which ar e lower i n the h ei rachy), fi ll s/ref i l l s (upgrad e s) oth e r d e v i ces from i t. 
For a successful transfer of count - remaining from ComCo's refiii device to an OEM's rofili 
35 device, the ComCo's refiii device a nd the OEM's refiii device must sh a re a oommon Iroy or 
a variant key. This liey is fil l /rofil i k e y with respect to the OEM's refiii device a nd it is th e 
transfer key with respect to the ComCo's rofili device. 

For a ComCo to successfully fili/refili its refiii device from another refill d e vic e (which is 
higher in the heirachy possibly b e longing to th e QACo), the ComCo's refill device and th e 
40 QACo's r e fiii d e vice must share a common key or a variant k e y. This key is fil l /rofi ll key 
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with rospoct to the ComCo's refill device and it is the transfer koy with respect to the 
QACo'€ refill device. 

28.6.1.1.1 Count - r e ma i ning field i nformation 

Toblo 300 chows tho f i eld i nformat i on for an mq fiold storing log i oal count - r e ma i ning amounts i n tho 
5 ref il l dovic e , which has tho ab il ity to transf e r down th e h ei raohy. 



Attribute Name 


Value 


Explanation 




TYPE_COUNT_REMAINING^ 






Type describes that the field is a count 
romaining fiold. 


KeyNum 


Slot number of tho refill koy. 


Only tho refill key has authenticated 

ff^t?cHJVVt lit? cfC/Otrjo tlJ If flit ffCfCif- 


Non Auth RW 


Q 


Non authenticated ReadWrito 


PerRf)'^ 


is not allowed to the field. 


Auth RW Porm^ 


1- 


AuthonticQtod (koy based) ReadWrite 
aceesG 

IS allowoo to the field. 


KeyPerm 


KeyPerms[KeyNum] - 0 


KeyNum is tho slot number of tho refill 
which has ReadWrito permission to tho 


Rel^T 




KeyPorms[Slot Num of transfer key] ~ 1 






Transfer key can decrement the fiold. 




KoyPorms[others- 0 ..7(excopt transfer 
key)] - 0 


All othor koys have RoadOnly access. 


End Pos 


Set as required. 








Depends on the amount of logical ink the 


dovico can store and storage resolution ■ 
i.e in picolitres or in microlitros. 



a. R e f e r to Typo Map in Appendix A for exact value. 

b. Non authenticated Road Write porm i osion. 
10 c. Authent i cat e d Read Writ e p e rmission. 

28.6.2 Pe e r to Poer transfer 

Roforr i ng to F i gur e 385, this transfer is typ i ca l ly performed wh e n count - remaining amount is 
transferr e d from OEM's Param e t e r Upgrad e r R e fi l l QA D e v i ce to anoth e r Param e t e r Devic e R e fil l 
15 QA D e v i c e b el ong i ng to the sam e OEM. 
28. 6. 2. 1 Keys and acc e eG pormiccion 

Th e r e is an count remaining fiold associatod w i th the r e fi l l dov i ce. Th i s count - r e maining f iel d has a 
singl e key associated w i th: 

This koy transfers count - remaining amount to the device from another refill device 

20 (which Is higher or at tho same level In the h e lr a chy), fills/refills (upgr a des) the 
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device itself, and additionally transfors ink from i t to othor dov i cos (wh i ch aro lower i n th e 

hoiraohy), f il ls/ref i l i s (upgrad e s) othor dovicos from I t. 
This key I s ref e rr e d to as the fi ll /rofi li koy and Ig used for both fi ll /rofi l l and transform H e nc e , 
this key ^^as both RoadWr i to and Dooroment - On l y p e rmission to the count - roma i n i ng field 
in the rofi li dovice. 

28.6.2.1.1 Count romain i ng fioid I nformat i on 

Tabl e 301 shows th e fi e ld informat i on for an mo fie l d stor i ng log i cal count noma i ning amounts in the 
ref i l l dov i ce w i th th e abi l ity to transf e r botwoon poors. 

Tab l e 301. F i e l d information for i nk-rema i n i ng fie l d for refi l l dov i cos transferr i ng betwe e n peers 



10 



Attribut e 



Valu e 



Name 



Explanation 



TYPE COUNT REMA I N I NG^ 



Typ e d e scrib e s that th e fi el d I s a count romaining fie l d. 



K e yNum 



Slot numb e r of th e refi ll k e y. 



Only the r e fi ll key has authentic a t e d RoadWr i t e 



access to this field. 



Non Auth 0 



Non authenticat e d R e adWrite is not a l low e d to th e fi el d> 



RW 
Perm^ 



Auth RW 



P er m^ 



Autfi e nticat e d (l< e y bac e d) R e adWrit e acc e ss 
i s a l low e d to th e fi e ld. 



K e yP e rm 



KeyP e rms[K e yNum] ~ 1 



KoyNum is tho slot number of the refi ll koy, 

wh i ch has RoadWrito and Docr e m e nt p e rm i ssion to th e 



K o yP o rms[othors~ 0 ..7(Gxc e pt 
KoyNum)] - 0 



Al l othor keys have /?oac/On/y acc e ss. 



End Pos S e t as r e quir e d. 



D e p e nds on th e amount of logica l I nk th e d e v i c e can 
and storag e r e solut i on — I . e in picol i tr e s or in microlitr e s. 



15 



20 



a. Rofor to Typo Map I n Append i x A for oxact valuo. 

b. Non auth e nticated Road Writ e perm i ss i on. 

c. Authenticat e d R e ad Wr i t e permission. 



XferField 



: ^OfExtorna l , Ch i p i d, F iel dNumL, 
Fio l dNumE, I nputP a ram e terCh e ck (Optional), R^, S I G^, 



Output: 



RosultFtag, F i eld data, R^ grSIGeut 

AvaHablity: Paramotor Upgrader QA Device 

29.1.1 Funct i on descr i pt i on 
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Th e Xf e rFiold i s sim i lar to tho Xf or Amount iunoXxon i n that it produooo data and signature for 
updating a g i ven mo fioid. Th i s data and oignoturo wh e n app l ied to tho appropr i at e d e vice through 
th e WritoFiofdGAuth function, w ill upgrade th e Fi e ldNumE (mq fie l d) of a dev i oo to tho samo va l uo 
as F i oldNumL of the upgrading device. 
5 Th e system ca ll s th e Xf e rF/ e /d function on the upgrade dev i ce with a certa i n FioldNumL to bo 
transf e rr e d to tho dev i ce being upgraded Tho F'mldNumE i s va li dated by th e XferF/e/d function 
according to various rulos as doscribod i n S e ction 29.1.1. If validat i on suoooodG the XforFioid 
funct i on produces tho data and s i gnature for subsequent passing into th e Writ e Fi e ldeAuth 
function for th e d e vic e boing upgraded. 
10 The transf e r fie l d output consists of the now data for th e fi e ld being upgrad e d, fi el d data of th o two 
sequence fields, and a s i gnature. Whon a transfer output i s produced, tho sequenc e field data i n 
SEQ_1 i s docromontod by 2 from tho previous valuo (qs paesod in with tii e input), and tho 
s e qu e nc e fi el d data in SEQ_2 i s docromentod by 1 from th e prev i ous va l u e (ae paeeod in witii tho 
input). 

15 Additional InputParam e t e rCh e clK va l uo must bo prov i d e d for th e param e t e rs not i nc l uded in tho 
SIGe, i f th e transmiss i on between tho System and Param e t e r Upgrador QA D e v i c e is e rror prone, 
and those errors ar e not correct e d by tho transimission protoco l its e lf. InputParamet e rCh e cl^ is 
SNA Y/F l oldNumL | FieldNumE [ XforValLongth | XforVa i y, and i s requ i red to e nsur e th e 
integr i ty of these param e t e rs, whon those inputs ar e r e c e iv e d by tho Param e t e r Upgrador QA 

20 D e v i c e . 

Th e Xf e rFi e ld funct i on must first ca l culate the SI-iA 7/F i oldNumL | F i e l dNumEy, compar e the 
ca l cu l ated valu e to tho valuo rece i ved (InputParamotorChock) and on l y i f the values match act 
upon th e inputs. 

25 29.1.2 Input param e t e rs 

Tab le 302 doscribos each of tho input parameters for Xf e rFi e ld funct i on. 



Parameter 


Doscription 


KeyRef 


For common key input and output signature: KoyRof.kcyNum ~ Slot number of 


the key to bo used for testing input signature and producing the output signature. 
S/Gb producod.using KKoyRof koyNum by tho QA Device being upgraded. SIGout 
produced using.KKoyRof koyNum for delivery to the QA Device boing upgraded. 
KeyRof.useChipId - 0 




For variant koy input and output eignoturee: KoyRof- koyNum ~ Slot number of 


the key to bo usod for generating tho variant koy. S/G^ produood-using a variant 
g^-KKoyRof.koyNum-by the QA Dovico being upgraded. SIGout produced using,a 

variant of Ki^.oyRof.koyfjum^"'' dftlix/pry to thp OA nnvinn hning iipgrnHnri 


KeyRef.usoChipId ~ 1 KoyRof.chipId - Chipid of the device which genoratod 


g/Gs-and will receive SIGout. 
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— iO woros-ot MQ Of trio vai/v t-/evice peiny upyruucu 


^OfExternai 


All 16 words of of the QA Dovico boing upgradod. 




onipio OT me vja uevioe Being upgrGoeo. 


FieidNumL 


field number of the local (updating) devioe. The dntn atnrfiri in thir. fifiiri will hft 
copied from tho upgrading dovico. 




FieidNumE 


MO field number of the QA Device being upgradod. This field will bo updated to 


tho value stored in Fi&idNumL within tho upgrading device. 


Re 


External random vnlus usGd to vorifv input cion^turo Thif! will bo tho R from thp 
input signature generator (i e device oenoratina SlGcS. ThG inout siansi 


generator in this case, is tho device being upgraded or a translation device. 






Rytf^rnjit mnHnm viliif^ ii*^f*ri to nrnriiipf* oiitniit '^^innntiirf Thl^ will tho R 


obtained by calling \he Random function on tho dovice which will receive the 


SICj * from the ^ferFiBld function — The dovico roceivino the SIG^^in this case~ts 


tho dovice being upgraded or a translation dovico. 






External signature required for authenticating input data. Tho input data in this 


case, is tho output from tho Road function performed on the device being 
upgradod. 


A correct SIG^r SIGKeyReKData | Rs | R^^t 



29. 1. 2. 1 Input signatur e v e rifioation data format 
Refer to Section 27.1 .2.1 . 

20.1.3 Output paramet e rs 

5 Tab l e 303 describ e s e ach of th e output param e t e rs for Xf e rFi e ld function. 



Parameter 



Descript i on 



RoBultFlag 



Ind i cat e s whether th e function complotod successful l y or not. I f i t did 
not comp le te succ e ssfu ll y, tho reason for th e fa il ure is return e d her e . 



S ee S e ction 12.1, Tab l e 202 and Tabl e 303. 



Fl e ldS e l e ot 



S ele ct i on of f i e l ds to be wr i tten 



In th i s cas e tho b i t oorrosponding to SEQ_1 , SEQ_2 and to 



Fi e idNumE are sot to 1 . 



A ll oth o r b i ts are set to 0. 



FioidVal 



Updat e d data words for sequ e nc e data field and F i o l dNumE for QA 



D e v i ce boing upgradod. 
Starts w i th LSW of l ower fio l d. 



This must b e pass e d as i nput to tho Writ e Fi e ldsAuth function of th e QA 
Dovico b e ing upgradod. 



R\jz 



Int e rnal random value r e qu i r e d to g e n e rate output cignaturo This must 
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be passed as input to the WriteFioldeAuth function or Transloto 


function of the QA Dovioo boing upgradod. 




Output signature which must be passod as an input to the 


WhteFioldeAuth function or Tranelato function of the QA Device being 
upgradod. 
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Tabl e 303. Resu l t Flag dofinitions for XforFio l d 



Kouiiriag ueTiniuon 


Description 


CountRomainingFieldlnva 
M 


The count remaining field in Upgrading QA Dovloo is invalid. 


FieldNumEKoyPormlnvali 
d 


The upgrade field in the QA Device being upgraded doesn't havo tho 

correct authonticQted pormission. 


NoUpgradesRemaining 


The count remaining field assocaited with tho upgrade field in the 
Upgrading QA Device doesn't have any more upgrades left. 





29. 1.3. 1 Output signatur e g e n e ration data form a t 
5 R e fer to Sect i on 27.1 .3.1 . 

29.1. 4 Function s e qu e nc e 

Th e XferFiold command is i l lustrated by the fol l owing pseudocode: 
Accept i nput paramotoro KeyRof, MOOfExterna l , MIOfExt e rnal, Chip i d, F i eldNumL, 
F ie ldNumE, Rg, SiGg, 

10 

^Generate maaaaga for paaaing Into Val±datcKcyRcfAnd€ignaturc 
function 

data < — (RWSGnoG | MSclcct | KcyldSGlcat | Chipid | WordSclcct | MO | Ml ) 
# Refer to Figure 302. 

15 



# Validate Kcy^Rcf, — and then vcrify^ aignaturc 
RcoultFlag ■ ValidateKeyRcf AndSignaturo (KeyRef , data.Rg, 

20 If (RcoultFlag ^ Vaaa) 

Output Re Quit Flag 

Return 

Endlf 

25 # Validatatc FieldNumE 

# FieldNumE ia prcacnt in the device being upgraded 
PreoontFlagFicldNumE < GctFicldPreacnt (MlOf External , FieldNumE) 

# Check FieldNumE prcacnt flag 
30 If (rrcoentFlagFieldtmmB ^ 1) 

— ReoultFlag < — F ie ldNumE l nval i d 

Output ReoultFlag 

Return 
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Bndlf 



# Check €cg ficlda cxlat and get their Field Number 

# Get Ceqdata field GEQ_1 for the device being upgraded 
XfQrSEQ_lFiGldNum< GctFicldNumCMlOf External, CBQ_1) 



# Check if the Scqdata field CEQ_1 ia valid 
If (Xf QrSBQ_lFiGld3?Jum invalid) 

— RcoultFlag < — S e q Fi el d Inva li d 

Output RcoultFlag 

Return 

Endlf 

# Get Seqdata field GEQ_2 for the device being upgraded 
Xf crSEQ_2FicldNum< GctFicldNum(M10f External, SBQ_2 ) 

# Check if the Seqdata field CEQ_2 ia valid 
If (Xf crCBQ_2FicldI>Jum invalid) 

— RcoultFlag < — Soq Fie l d I nvalid 

Output RcoultFlag 

Return 

Endlf 



§Check write permiaaion for FieldNumE 

PormOKFieldNumB < ChcekFieldNumEPerm (MlOf External, FieldNumE) 

If (rermOKFieldNumE 1) 

— RcoultFlag < — Fi e ldNumEWrit e P e rm Invalid 

Output RcoultFlag 

Return 

Endlf 



#GhoeJc that both SeqData fielda have Decrement Only permiaaion 
with the aamc jcey 

#thQt: haa write permiaaion on FieldNumE 

rermOiaCferSeqData < — CheGlcCeqDataFicldPermo (MlOf External , 
Xf erCEQ_lFieldNum, Xf erSEQ_2FioldNum, FieldNumE) 
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If (rQrmOKXfQrgcqData ^ 1) 

— RcsultFlag < S e qWritoP e rm I nva l id 

Output RcoultFlag 

Return 

5 Endlf 



# Get CcqData CEQ_1 data from device being upgraded 
10 GotFicldDataWorda (Xf GrSEQ_lFicldI>Tum, 

Xf crSEQ_lDataFromDcviGC , MQQf External , MlQf External ) 

# Get gcqPata SEQ_2 data from device being upgraded 
GetFicldDataWorda (Xf crSBQ_2FicldNum, 

15 Xf orSEQ_2DataFromDcvicc , — MOOf External , MlQf External ) 



# Fie IdNumL (upgrade value) ia a valid field in the upgrading 

20 PrcocntFlagFieldNuniL < — CctFieldPreoent (Ml, FicldlTumL) 

If (rrcoentFlagFicldlJumli 1) 

— RcoultFlag < — FioldNumLlnva l id 

Output ReaultFlag 

Return 

25 Endlf 

#Gct the CountRemaining field aaaociated with the upgrade value 
field 

# The CountRemaining field ia the next higher field from the 
30 upgrade value field 

FieldNumCountReniaining< — FieldNumli — \ — t 

# FicldNujnCountigciTiainingr ia a valid field in the upgrading device 
PreocntFlagFieldNumCountRemaining 

35 < — GetFieldPreaent (Ml, FieldNumCountRemaining) 

If (PreaentFlagFieldNumCountRemaining ^ 1) 

— ReoultFlag < CountRomainingF i e l d l nva l id 

Output RcoultFlag 

Return 

40 Endlf 
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§Chcck pormiaaion for upgrade value field, — Only*^ one key 
(different 

# from KeRef.kcyNum) — hao write pcrmiaaiona to the field and no 
5 key haa decrement permiaaiona , 

ChGclcOK < — ChcakUpgradcKcyForFiGld (FicldNumL, Ml, KcyRcf ) 
If (ChGclcQK ? fe 1) 

— RcoultFlag < Fio l dNumEKoyPorm l nval i d 

Output RcoultFlag 

10 Return 

Endlf 



§Find the type attriiDutc for FicldNumE 
TypoFicldNumB < — FindFioldNumTypo (MlOf External, FioldNumE) 
15 #Find the type attribute for FieldNumL — (upgrade value) 

TypeFieldNumL < — FindFicldNumType (Ml , FieldNumL) 



If (TypcFieldNumE ^ TypeFieldNumL) 
— ReoultFlag < Typ e Mismatch 

20 Output RcoultFlag 

Return 

Endlf 



25 

# Check permiaaiona for Count Remaining field 

# Check upgradca are available in the CountRemaining field of the 

# upgrading device i.o value of CountRemaining io non zero 
poaitive number 

30 Count RemainingOK < CheckCountRcmaining (FieldNumCo\intRcmaining, 

MO, Ml) 

If (CountRcmainingOK ^1} 

— ReoultFlag < — NoUpgradesRemoining 

Output RcoultFlag 

35 Return 

Endlf 



# Cct the aine of the FieldNumL — (upgrade value) 
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If (FicldNumL » 0) 

FicldCiccOf FicldNumL< — McucWordlnM — Ml [FicldNumL] .Endroo 

Eloc 

FicldSigcOf FicldNutnL< — Ml [FicldNumL 1] .EndPoo 

Ml [FicldtTumL] .EndPoo 
Endlf 



#Cct the aisc of the FicldNumE (field Jboiiigr updated) 
If (Ficld^JumL = 0) 

Fi cl dG i E cOf Fi cl dNumE < MaxWordlnM — MlOf External [FicldNumE — 

1] .EndPoo 

FicldCigcOf Ficld])JumE< — MlOf External [FicldNumE 1] .EndPoo 

MlOf External [FicldNumL] .EndPoo 

Endlf 

# Check whether the device being upcfradcd can hold the upgrade 
value from 

If (FicldSizcOf FicldNumE < FicldSizcOf FicldNumL) 
— RcoultFlag < — F ie ldNumES i zolnsuffic ie nt 

Output RcoultFlag 

Return 

Endlf 



§ All oheoha complete 

# Generate Ceqdata for SEQ_1 and SEQ_2 fieldo 

Xf crSEQ_lDataToDcvicc = Xf erCEQ_lDataFromDcvicc 2^ 

Xf erCBQ_2DataToDevicc « Xf crSEQ_2DataFromDcvicc i 

# Add Data£!et to Xfer Entry Cache 

AddDataSctToXf crBntryCachc (Cliipld, FicldNumE , — FicldNumL, 
Xf erSBQ_lDataFromDcvice , Xf crSBQ_2DataFromDcviGc) 

^Decrement Count Remaining field by one 
DcGrcmcntFicld ( FicldNumCountRcmaining , MO ) 
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#Ccfc the upgrade value worda from FicldNumB of the upgrading 
device 

GctFicldDataWordo (FioldtJumL, UpgradcValuG, MO , Ml) 



5 i ^Ccnerate new field data worda for FieldNumE. — The upgrade value 

ia copied to 
FicldDataE 

FicldDataE< — UpgradcValuc 

10 # Generate FicldCclcct and FicldVal for CcqData field DEQ_1, 

GEQ_2 and 
# FioldPatag. . . 
CurrontFicldSGlcGt< — 0- 
FicldVal < — & 

15 GGnGrateFicldSclcctAndFicldVal (FicldNumB, FicldDataE, 

XfcrSEQ^lFicld^Tum, Xf crSBQ_lDataToDcviGG, X£GrSBQ_2FiGldNum, 
Xf GrSEQ_2DataToDQviQG , 
FicldSGlcot, FicldVal) 

20 #Cenejfate maaoagc for paaaing into Generates ignaturc function 

data < — (RWSGnoG|FicldSclGGt|ChipId | FicldVal) # Refer to Figure 
373 . 

§Create output aignature for FieldNumE 

— Generates ignaturc (KeyRef , data , Ri^ -rRs^^ 

25 

RcoultFlag < — Paaa 

Output RCOUltFlag, — FH r> 1 dfln T ont , Fi n1 dVn 1 , T?j^ Mflg^t. 

Return 
Bndlf 

30 29. 1. ^. 1 CountRomainingOK — 

Ch e ckCountRemQiningFioldNumL(FioldNumCountRomQining, M1, MO) 

Th i s functiono chocks porm i ss i ons for CountRoma i n i ng fi el d and also checks 
that upgrad e s are av ai lab l e in th e CountRemaining field of th e upgrad i ng d e v i c e . 

AuthRW < — Ml [FicldMumCountRcmaining] .AuthRW 
35 MonAuthRW < — Ml [FiGldl^TumCountRcmaining] .NonAuthRW 

DOForKeyo < — m^, [FicldNumCountRQmaining] . DOForKeyo [KcyNum] 
T^^c < — [Fie Idl^JumCount Remaining] .T>^c 

If (AuthRW = 1 ANonAuthRW ^ 0 a (DOForKeyo = 1a (Type ° 
TYrB_COUMT REMAINING) 
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PcrmOK < 1 

ElOC 

PcrmOK < — & 

Return PcrmOK 

5 Bndlf 

#Got the count remaining value from the upgrading device 
GctFicldDataWordo (FicldNumCoixntRcmaining, CountHcmainingValuc^ MO , M 

If (Count RcmainingValuG < ■ 0) 

10 PcrmOK < 0 

Return PcrmOK 

Endlf 

PcrmOK < — i 
Return PcrmO K 

15 
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29:2 RollBackFicld 

Input: KoyRof, MoOfExtorna l , M 4 ^0fExtoma l . Ch i p i d, F l oldNumL, 

F i o l dNumE, inputParamoterCh e ok (optional), R^, S I G^ 

Output: Rosu l tF l ag 

5 Chang e s: mo a nd Rt , 

Availablity: Paramotor Upgrader QA Devico 

29.2.1 Function dosor i ption 

Th e RollBackFioid funct i on is v e ry sim i lar to th e /?o//Bac/c/\ff70i/n/ function, th e on l y d i fforonco 
b e ing that the RoflBackFi e ld function adjusts the va l ue of the count - romaining fiold assoc i ated 
10 w i th tho upgrade va i uo fi el d of the upgrad i ng dovico, instead of the upgrodo valuo fio l d itsolf. A 
suocesofu l rollback, inoromonts the count - rema i n i ng by 1. 

Tho Paramoter Upgrader QA Devic e ch e cks that th e Print e r QA D e v i c e d i dn't actually r e c ei v e th e 
transfer m e ssag e corr e ct l y, by compar i ng th e sequ e nc e data f i old va l ues road from the d e vice 
w i th tho values stored in tho Xfor Entry cacho. The sequence data f i e l d values read must match 
15 what was previously wr i tt e n using th e Sto/t/?o//Bac/c funct i on. Aft e r a l l ch e cks aro fulf ille d, th e 
Parameter Upgrader QA Dovico adjusts itS-F i o l dNumL. 

Additional fnputParamet e rCh e ck valuo must b e provid e d for th e parameters not inc l ud e d i n th e 
S I Gfe, i f th e transmiss i on botwoon tho System and Paramotor Upgrad e r QA D e v i c e is error pron e , 
and th e s e e rrors are not corroctod by th e translmisslon protocol itself. InputParam e t e rCh e ck Is 
20 SHA ^/FioldNumL | F i oldNumE ], and is r e qu i red to onsuro tho i ntegrity of th e s e paramet e rs, 
when those inputs aro received by the Param e t e r Upgrader QA Device. 

Tho RollBackFiold funct i on must first ca l culate the SHA f/FioldNumL | F i e l dNumE7, compare the 
ca l culated valu e to th e va l u e recoivod (InputParam e terCh e ck) and on l y If the va l u e s match act 
upon the inputs. 

25 29.2.2 I nput parameters 

Tab l o 305 describes each of the i nput poramotero for RollBackFiold function. 



Parameter 


Description 


KeyRef 


For common koy input signature: KoyRof. koyNum ~ Slot number of 
the key to bo usod for testing input signature. S/G^ produoed-using 


l^oyRof koyNum by the QA Dovico being upgraded. KoyRof.usoChipid 


9 




For variant koy input eignaturo: KoyRof.koyNum - Slot number of 


the key to be used for generating tho variant key. SIG^ produced 


using a variant of-KKoyRof.koyNum by the QA Device being upgraded. 
KoyRof.usoChipid ~ 1 KoyRof.chipId ~ Chlpid of the device which 


generated SIG^ 


mOfExtornai 


16 words of of tho QA Devico being upgraded which failed to 
upgrade. 
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P4j. KjTCzxiornui 


ID woiQs OT {44. OT ino uevice Doing upgrQaeci wniGn Taiieo to 
upgrodo. 




unipiQ OT iriQ vjA uevioe Being upgraoeo wnion Toiieo to iipgrsQB. 


FioidNumL 


MO field number of tho local (upgrading) dovico whoso valuo could not 


be copied to tho dovico being upgraded. 


FieldNumE 


LAiL field nunnbor of tho QA Dovico being uparndod to which tho 
Upgrade value in FieldNumL couldn't be copied. 




Re 


Extornj] random vnluc ucod to vorifv input cionaturo Thifi will bo the 
R from the innut ^ionnttjre oenerntor (\ e ripvice nf^nprntinn ^l(^t=\ 


The input signal generator In this case, is tho dovico which failed 


to upgrade or a translation device. 






External signature required for authenticating input data. The input 


data in this case, is tho output from the Road function performed on 


the device which failed to upgrade. A correct SIG^- SIGKeyReKPata | 



29.2.2. 1 Input signature g e n e ration data format 

R e f e r to S e ction 27.1 .2.1 for deta i ls. 

29.2.3 Output param e t e rs 

5 Tab le 306 d e scrib e s e ach of tho output paramet e rs for RollBackF i eld. 



Parameter 


Description 


ResultFlag 






Indicates whether tho function completed successfully or not. If it did 
not complete successfully, the reason for the failure is returned 


here. See Section 12.1 , Table 292, Table 30^ and Table 295. 





29.2. ^ 1 Funct i on sequence 

10 The RollBackFi e ld command i s i ll ustrat e d by tho fol l owing ps e udocod e : 

Accept input paramctcro KcyRof , — MOOf External , — MlOf External - 
Chip Id, — FieldNumL, — FieldNumE, — R ^, SIGg 

^Generate mcaaagc for paaalng- into CcncratcSignaturc function 
15 data < — (RWScnoc | MGclcct | KcyldSclcct | Chipid | WordSclcGt | MO | Ml ) 
# Refer to Figure 382. 



# Validate KcyRcf, — and then verify aignaturc 
20 ReoultFlag ^ ValidatcKcyRef AndSignaturc (KeyRcf , data, R^^, R^ .-)- 

— (ReoultFlag ^ Paoo) 
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Output RcoultFlag 

Return 

Endlf 



# Check Ccq fxclda cxiat and get their Field Number 

# Get Beqdata field GEQ_1 num for the device being upgraded 
XfGrSEQ_lFicldNum< GctFiGldNum (MlOf External , CEQ_1) 



10 # check if the Gcqdata field GEQ_1 ia valid 

If (XferSBQ_lFicldMum invalid) 

— ReoultFlag < — S e qField l nval i d 

Output RcoultFlag 

Return 

15 Endlf 

# Get Ceqdata field GEQ_2 num for the device being upgraded 
Xf erSEQ_2FieldNum< GctFicldNum (MlOf External , SEQ_2) 

# Check if the Ceqdata field CEQ_2 ia valid 
20 If (XfGrSEQ__2FicldNum invalid) 

RcoultFlag < — SoqF i old l nval i d 

Output RcoultFlag 

Return 



25 



30 



Endlf 



# Get CeqData GEQ_1 data from device being upgraded 
GetFieldDataWordo (Xf crSEQ_lFicldNum, 

Xf erSBQ_lDataFromDevice , MOOf External , MlOf Extcmal ) 

§ Get GeqData SEQ_2 data from device being upgraded 
GetFieldDataWordo (Xf erSBQ_2FieldNutn, 

Xf erSEQ_2DataFromDeviGe , — MOOf External , MlOf External ) 

35 # Generate Gcqdata for €EQ_1 and CEQ_2 ficldo with the data that 

ia read 

Xf crSBQ_lData « Xf crSEQ^lDataFromDcviee — i — i 
XferSEQ_2Data ° Xf crGBQ_2DataFromDcviGO — i — 2- 

40 
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# Check Xfcr Entry in cache ia correct dataoet axiata. Field 

data 

# and acgucncc field data matchca and Xfcr gtate ia correct 
XfcrEntryOK < — ChQcIcEntry (Chipid, — FicldNumE, FicldNumL, 

5 XfGrCEQ_lData, Xf crSEQ_aData) 

If( XfcrBntr>OK = 0) 

RcDultFlag < — RollBacklnvalid 

Output RcoultFlag 

10 Return 

Bndlf 

# Increment aaaociated CountRemaining Jby 1 
IncrGmontCountRcmaining ( FicldNumCountRGmaining) 

15 # Update X.fcjrgtato in DataCet to complete/deleted 

UpdatGXf QrStatcToComplQtG (Chipid, FiGldlTumE) 
RcoultFlag < — Paoo 
Output RcoultFlag 
Return 

20 Example sequence of OPERATtoNS 
30 Concopts 

The OA Ch i p Logical I nt e rfac e i nt e rfac e d e vic e s do not in i t i ate any act i viti e s thomsolvos. I nstoad 
the System r e ads data and s i gnatur e from various untrustod devic e s, and sends the data and 
s i gnature to a trust e d dovico for va li dat i on of s i gnatur e , and th e n us e s tho data to perform 
25 op e rations roquirod for print i ng, rofil l ing, upgrad i ng and koy roplacoment The system will 

thoroforo bo respons i b l e for perform i ng th e functiona l s e qu e nces requ i red for print i ng, r e fill i ng, 
upgrad i ng and k e y r e placomont. It formats a l l I nput param e t e rs r e quir e d for a particu l ar function, 
th e n ca ll s tho funct i on with tho i nput paramotors on tho appropriate QA Chip Log i ca l I nt e rfac e 
i nstance, and thon proc e ss e s/stores tho output parameters from th e funct i on appropr i ate l y. 
30 Val i dat i on of signatures i s ach ie v e d by e i th e r of tho fo ll ow i ng schem e s: 

Diroct tho signatur e producod by an untrustod dovico is dirootiy passed in for validation to 

tho trusted dov i ce. Tho dir e ct validation requ i r e s th e untrust e d d e vic e to share a common 
key or a variant key with th e trust e d dovico. Ref e r to S e ct i on 7 for furth e r d e tails on 
common and variant k e ys. 

35 -* Tranelation - th e signature producod by an untrustod is first validatod by tho translat i ng 

devic e , and a now s i gnatur e of tho road data is produc e d by the trans l ation dev i c e for 
va li dation by the trusted dovico. Several trans l at i on dov i co may bo cha i ned togothor tho 
first translat i on dovico val i dates tho signatur e from th e untrust e d dev i ce, and tho l ast 
translat i on dovice produces tho fina l signatur e for va li dat i on by th e trusted dov i co. Tho 
40 translat i on dovico must sharo a common k e y or a variant k e y with the trustod/untrust e d 
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d e vic e and among th e mselvos, if s e v e ral trans l ation devices ar e chained togothor for 
s i gnaturo val i dat i on. 
30t4 Representat i on 

Each functiona l s e qu e nc e consists of th e follow i ng d e v i c e s (rofor to Soot i on 4 .3): 
5 ^ System. 

^ A truGtod QA Dovico wh i ch may bo a cyctom tructod QA Device, or on Paramotor 

Upgrader QA D e vice, or a ink R e fill QA D e vic e , or a K e y Programm e r QA D e vice 
depending on th e funct i on performed. This device is ref o rr o d to as d e vic e A. 

An untruGt e d QA Devic e - wh i ch may bo a Print e r QA Devic e , or an Ink QA D e vic e . This 

10 d e vice is r e f e rred to as dev i ce B. 

^ A translation QA Dovico w i ll bo used i f a translation sch e m e is us e d to validate signatures. 

T h is devic e i s r e f e rr e d to as d e v i ce C. 
The command sequence produced by th e system for further s e qu e nces w i l l b e docum e nt e d as 
shown I n Tab l e 307. 
15 Tablo 307. Command sequenc e r e pr e s e ntat i on 



Sequenco 
No 


Function 


Parameters 


Soquonoe order 


Device. FunctienNamo 








Input Parameters and their 
values. 


Output paramotors and their 


dojscription. - ^ 



Therefore, a typ i cal direct signatur e validat i on s e qu e nc e can be r e pr e s e nt e d by 
F i gur e 386 and Tabl e 308. 

For a d i rect signaturo to bo used, A and B must share a common or a variant key 
i . e B.Ktf i . - A.Kp a ,or B.K^' FormK e yVar i ant(A.Kfl a ., B.Ch i p I d). 



Tabl e 308. Command sequ e nce for direct signature val i dation 



25 



Sequence 
Ne 



A. Random 



Function 



None 



B.Rood 



Param e t e rs 



KeyRef - n1 , S i gOn l y - 0. MSeloct - Any one M, Key l dSeloct ■ 
0, WordSolectForDosiredM " Any on e word in th e s e lected M, 



If RcsultFlag - Pass then MWords = ^ 
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SeicGtQcfWordsOfSeloctodMG as per i nput [MS e lect] and 
[WbrdSa^ Rb " Rl, SIGb.= SiGout Rofor to 



S e ct i on 15.3.1. 



A.Toet KoyRcf- n2, DataLength - L e ngth of MWords in words 



Pr e formatt e d as p e r S e ction 16.1, Data - MWords prcformattcd 



as por Sect i on 16.1, RE-Rh, S/Gg - S I Gb 



R c sultFlag - Pass/Fai l 
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A typical signature validation using tranelation can bo r e pr e sent e d by 

Figure 387 and Tab l o 30 9 . 

For val i dating signatures us i ng tranclat i on: 

^ — A and C must shar e a common or a variant key 

1 .0 C.Kfl^ - A.K^or C.K^- FormKeyVar l ant(A.KH a ., C.Chip I d). 
^ — B and C must shar e a common or a variant koy 

i .e C.Krt^ - B.Kft^ or B.K^ ' FormKoyVar l ant(C.Kna, B.Ch i p I d). 



Tab l o 300. Command s e qu e nc e for signatur e val i dation using translat i on 



Sequence 
Ne 


Function 


Parameters 


1- 


C. Random 






2 


B.Read 


KeyRof~ n1 , SigOnly ~ 1 or 0, MSclcct ~ any, KoyldSeiect ~ 
any, WordSoioctForDosirodM ~ any, RE-' Rq 




If ResultFlag - Pass thon MWords " 
SoiccttKfWordsOfSclcctcdMQ as per input [MSoioct] and 
[WordSolootForDesiredM], - R^, SIGb-= SiGout Rofor to 


Section 15.3.1. 


3 


A. Random 


None 




4 


CTranelato 


inputKcyRcf -n2, DotaLcngth - Length of MWords in words 




Preformatted as per Section 1 7.1 , Data - MWords preformattcd 


as per Section 1 7.1 , RE- R^. SIGE - SIGr, OutputKcyRcf - 


n3, RE2 - Ra 


If ResultFlag " Pass thon RG4^=-Rfc2, SIGg"" SIGOi/t Rofdr to 
Section 15.3.1 - 




ATeet 






KcyRof" n2, DataLongth ~ Length of MWords in words 


Preformatted as per Section 16.1 , Data " MWords preformattcd 

as per Soction 1 6.1 , RE.=Rq^, SIGE - SIGq 




ResultFlag - Pass/Fail 



31 I n field us e 

This s e ction cov e rs funct i ona l sequences for pr i nt e r and i nk QA Dev i c e s, as they p e rform thoir 
usua l function of printing. 
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Startup sequence 

At startup of any op e ration (a pr i nter startup or an upgrade otartup), tho syst e m d e t e rmines tho 

properties of e ach QA Devlo e it i s go i ng to communicat e w i th. Those proport l os are: 

^ Softwar e v e rs i on of tho QA Dov i o e . Th i s i nc l udes SoftwaroRol e ae e ldhAajor and Soft 

war e R e i e aeoMMinor. Tho SoftwaroReieaGofdMajor i d e nt i fies the functions avai l ab l e i n tho 

QA Dovico. R e fer to Soct i on 13.2 for deta il s. 

Th e numb e r of m e mory vectors In the QA D e vic e . 

Th e numb e r of keys in tho QA Dovico. 

Th e Ch i pid of th e QA Dov i co. 

Th e propGrt i os allow tho syst e m to detormino wh i ch functions ar e avai l abl e i n a g i ven QA Dovico, 
as well as th e value of input paramotors roquirod to communicate w i th th e QA Dev i ce. 
Table 310 shows tho startup s e quence. 

Tab l e 310. Startup command s e quence 



Sequence No 


Function 


Command 


1- 


B.Getinfo 




Major roieaso idoatifior of the QA Device = 
SofiwaroReieaseidMaJor, Minor release identifier of the QA 




Device- SoftwareRefeaseldMinor, Number of memory 
vectors in tite QA Device^ NumVectors, Number of keys in 


the QA Device- NumKeys, Id of ttie QA Device - Ciiipid 0 




- VarDataLen No VarData in case of an ink or printer QA 
Device - ~ ■ - ' ' ' 



31.1.1 Cl e ar i ng th e pr e authorisat i on f i eld 

Pr e authorisat i on of ink i s one of tho schemes that a pr i nter may us e to decrem e nt l og i cal i nk as 
physica l i nk i s used. This i s d i scuss e d i n details in S e ct i on 31. 4 .3. 

If tho print e r usos preauthorisat i on, tho system must r e ad the pr e authorisation fie l d at startup. I f 
tho preauthor i sat i on f ie ld is not cloar, th e n tho syst e m must apply (d e cr e m e nt) the proauth 
amount to tho correspond i ng i nk field, by p e rforming a non authenticated wr i to of tho 
d e cr e mented amount to tho approprlato i nk fi e ld, and then c l oar tho pr e authorisation fie l d by 
p e rform i ng an auth e nt i cated write to th e pr e authorisat i on fie l d. 
34^2 Presence Only authentication 

Th e purpos e of prosonco only authenticat i on i s to d e termine whothor tho printer should or 
shou l dn't work with th e i nk cartridge. 
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31.2.1 W i thout data interpretation 

Th i s Goquonce i o porform e d whon the pr i nter outhont i catos th e ink oortr i dgo. Tho auth e nticat i on 
cons i sts of verifying a signature g e n e rat e d by the untrustod ink OA Dovioo (in tho ink cartr i dg e ) 
using tho systom's trusted QA Dov i oo. 
5 For signature to be va l id, the trust e d QA D e v i c e (A) and th e untrustod i nk QA Dev i ce (B) must 
share a common or a variant koy i.e B. \ (^ '-==-AzKf^&F-B7Kt ^= FormK e yVariant(A.Kn a -, B.Ch i p I d). 
A single word of a sing l e M is read b e cause the system is only i nterested in tho validity of 
s i gnature for a giv e n data. 

I f th e print e r wants to v e rify th e signatur e and do e sn't r e qu i re any data from the i nk cartridg e 
10 (b e cause I t is cach e d in th e pr i nt e r), th e n the pr i nter calls the Read function with SigOnlys e t to 1. 
Th e R e ad returns only the s i gnature of tho data as r e quested by the input parameters. The print e r 
th e n s e nds its cached data and signature (from the Road function) to its trust e d QA Device for 
verification. Th e pr i nt e r may use this signature verification sch e me if it has r e ad the data 
pr e viously from the ink QA Device, and the pr i nter knows that tho data i n tho ink QA Devic e has 
15 not changed from va l u e that was r e ad e arl i er by tho print e r. 

Tab le 31 1 shows the command sequence for perform i ng pr e s e nc e on l y authentication requ i ring 
both data and signature. 



Ne 


Function 


Parameters 


A- 


A.Random 






2 


BrRead 






KeyRef - n1 , SigOnly - 0, MSelect - Any one M, KeyldSelect - 0, 
WordSolectForDesiredM - Any one word in the selected M, RE- Ra 




If RosuitFiag - Pass then MWerds = ScicGtcdWordGOfSoi€fGtcdMo 


as per inpiit [MSolect] and [WordSolectForDosirodM], Rb^=-Rw> SIGB-g^ 




S/Goi/( Ffefer to Section 15.3.1. 


3 


AToGt 


KeyRef- n2, DataLength - Length of MWerds in words profermattod 




as per Section 1 6.1 , Data - MWerds preformattcd as per Section 1 6.1 , 


R^~^^B, SiGE ~ SIGg 








RcsuitFlajg^ Pass/Fail - 



31 .2.2 W i th data i nterpretation 

This sequenc e i s perform e d wh e n th e pr i nter r e ads th e r ele vant data from th e untrust o d QA 
D e v i c e in th e i nk cartridg e . Th e syst e m val i dat e s th e signatur e from the externa l i nk QA Device, 
and then uses this data for furth e r processing. 
25 For s i gnatur e to be valid, the trusted QA Dev i ce (A) and the untrustod QA Device (B) must chare 
a common or a variant key i.e B^^ -^-M^e^-^^ ^-- FormK e yVariant(A.KB a -, B.Chip I d). 
The data road ass i sts th e printer to determ i ne tho fo l low i ng b e for e print i ng can commence: 
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Which fields in mo stor e l og i ca l Ink omounts in th e i nk OA DovIgo« 

^ Th e siz e of th e i nk fi el ds In th e ink OA Dev i oo, R e f e r to Soction 8.1 .1 .1 . 

Tho typo of ink. 

Th e amount of i nk I n th e fi el d. 

5 Tab le 312 shows th e command sequoncofor porform i ng prosonoo only authent i cation (w i th data 
i nt e rpr e tat i on). 



No 



Funct i on 



Param e t e rs 



A.Random 



None 



B.Road 



KoyRcf- n1, SigOnfy-Q, /WSo/ccf - 0x03(ind i cat e s MO and M1), 



KoyidScicct - OxFf (R e ad al l Key l ds) , WordS e i e ctForDosircdM (for 



m)" OxFFFF (Road all I64 
OxFFFF(R e ad a ll 16M»words). RE- Ra 



^ l e ctForDesircdM (for m ^)= 



I f RcGuitFiag - Pass th e n MWords ScicctcdWordsOfSoicotcdi y kji 
as por input [MSolect] and (WordSo l dctForD e sirodM], A ll 16 words of 



^4o,afld-^^ ^ R^^ - RL S I Gb-= SIGout R e fer to Section 1 5.3.1 



3 A, Tost Input Key - n2, DataLcngth - L e ngth of MWords i n words 



Preformatt e d as p e r S e ction 16.1 , Data ~ MWords preformattcd as p e r 



Soction 16.1, RE j=Rq , S/GE" S I Gb 



R e sultFSag - Pass/Fail 



10 31.2.2. 1 Locating ink fi e lds and d e t e rmining ink amounts romaining 

B e for e pr i nting can commonco, th e pr i nter must determine th e i nk fi e lds i n th e i nk cartridg e so that 
i t can docroment th e s e fie l ds with th e physica l use of i nk. Th e print e r must also v e rify that th e i nk 
i n tho i nk cartr i dg e i s su i tab le for us e by th e pr i nt e r. 

Th i s proc e ss roquiros read i ng data from tho ink QA Dovico and thon compar i ng tho data to what 
15 is requir e d. To p e rform tho comparison th e pr i nter must storo a li st for e ach ink it uses. 
Th e ink l ist must cons i st of tho following: 

-* Ink Id — A id e ntifier for tho ink 

K e y l d - The Keyld of tho koy used to fi ll /rofi ll th i s i nk. 



20 



^ Typo Th i s is tho typo attr i bute of tho ink. 

Tho ink l i st stored in tho pr i nter i s shown in Tabl e 313. 



1 - r e pr e sents b l ack i nk 



Koyld Type 
1 roproQonts Koy l d of Ox§§ 
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Network OEM InkFill/Refill 


TYPE REGULAR BLACK INK^ 








1 represents Keyld of 


Ox8F 

TYPE HIGHQUALITY CYAN INK 


2 roprosonts cyan ink 


Notwork OEM InkFill/Refill 


■ 


a 




1 roprosonts Koyld of 


rWQA 

TYPE_HIGHQUALITY_MAGENTA 


3 represonto magonta 


Notwork OEM InkFill/Rofill 


Key^ 


[[^11^ 




1 roprosonts Koyld of 


0x8C 


4 represents yellow 


Notwork OEM InkFill/Rofill 


TYPE HIGHQUALITY YELLOW 1 


Key^ 





a. Thoso Typos oro only usod as an oxamplo. 

b. Those K e ylds aro on l y usod as an oxamp l o. 

Tho printer wil l perform a Read of tho ink OA Dov i oo's MO, M1 and K e y l ds to d e t e rmin e th e 
5 fol l owing: 

Tho correct ink field {m fiold) in tho ink OA Dov i co. 

^ Tho amount of ink rema i ning in th e fi el d. 

Th e i nk QA D e vic e 's M1 and K e yld h el ps th e print e r d e t e rm i n e th e location of th e ink fi e ld and ink 
QA Device's MO and M1 h e lps d e t e rmine tho amount of ink r o maining in tho f ie ld. 

10 31.2.2.2 Fi e ldNum FindFi e ldNum(keyldR e quir e cl, typ e R e quir e d) 

This funct i on returns a FioldNum of an MO fie l d, whos e authenticat e d R e adWrit e acc e ss k e y' s 
K e yld is k e yldR e quir e d, and whose Typ e attribut e match e s typoR o quir o d. I f no matching fie l d i s 
found it returns a FioldNum ~ 255. Th i s function must be ava i lab l e i n the printer syst e m so that i t 
can dotormino th e i nk f ie ld requ i r e d by it. 

15 Th e function sequenc e i s descr i b e d b e low. 

# Get total nutnbor of f iolda in tho inlc QA Dovico 

FicldSiEG [16] < — 0 # Array to hold FioldSigc aoauming thoro arc 16 
f ioldo 

NumFioldo< — FindNumbcrOf FicldoInMO (Ml^FioldSieo) — # Rofcr to 
20 Soction 19.4.1. 

# Loop through Kcyldo read aaaumlng all Kcy^Ida have been read 
from ink QA Dcvioe 

For i < — 0 to 7 

§Chcck if Keyld read matchca 

25 

If (KGyId t-= kcyldRcquircd — # Matching Keyld found 

KcyNum < — i # Get the KcyNum of the matching Keyld 
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# Now look through the field to check which field haa 

^writc pcrmiaoiona with thia KcyNum 

For j — < — 0 to NumOf Ficldo 

5 AuthRW < M4[j] .AutliRW # loolatc AuthRW for field 

# Check authenticated write ia allowed to the field 

If (AuthRW = 1) 

KcyNun^ .^ — u ^ljl .KcyNum # loolatc KcyNum of the field 

Typcj < M j ^[j] .T>i)o # Iolotatc Type attribute of the field 

10 # Check if Key ia write key for the field and type of InJz 

1 f ( KcyNum = KcyNum j.-^ A — (TypCj. = typeRecruired) 

FicldNum < j 

return FicldNum 

15 Endlf 

Endlf 

BndFor # Loop through to next field 

FicldNum < — 255 # Error no field found 

return FicldNum 

20 Endlf 

EndFor # Loop through to next Keyld 

For e .g i f th e print e r wanto to find an ink fio l d that match e s Ink i d#2 (from Tab l o 
313) i n th e i nk QA Dovico, it must ca ll the function FindFioidNum with 
keyldRoquirod " Koy l d of Notwork_OEM_ i nkF il i/Ref i i l K e y and typeR e quir e d ~ 
25 TYPE H I GHQUALITY CYAN I NK. 
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31.2.2.3 ink romaining amount 

Th i s can bo dotorm i n e d by using th e funct i on GotFioldDQtQWordG(FioidNum,Fi e idDatQ[l, M0,M1) 
desor i bod i n Sect i on 27.1 . 4 .1 4 . Fi e idNum must bo sot to the valu e r e turned from function in 
Section 31.2.2.2. Fio l dData roturns tho i nk roma i n i ng amount. 
5 Tho function G e tFf B idDQtQWord6(FieldNum,Fi0fdDatQO, M0,M1) must b e i mp le mented i n the 
pr i nter system. 

34t3 Presence Only authenticat i on t h rough the Translate function 

Th i s sequence is p e rform e d wh e n th e printer roads th e data from th e untrust e d ink OA Devico in 
th e ink ca rtridge but us e s a translating QA Dovico to i ndir e ctly validat e tho road data. Tho 
10 trans l at i ng QA Dovice va li dates the signature us i ng the key i t shares with tho untrust e d QA 

Dovico, and then signs tho data using the key i t shares with the trust e d QA Dov i co. Th e trust e d 
QA D e v i c e then va l idates tho s i gnature produc e d by th e trans l at i ng QA D e vico. 
For val i dating s i gnatur e s us i ng trans l at i on: 

^* — A and C must shar e a common or a variant k e y 
15 i .o C.Kh^ - A.Kn 2 -or CKi^- FormKoyVar i ant(A.K|^, C.Chip I d). 

^* — B and C must shar e a common or a variant k o y 

i .o C.K^ - B,K^ or B.K^ - FormKoyVoriant(C.KB^, B.ChipId). 

Tab l e 31 4 shows a command s e qu e nc e for pr e s e nc e only auth e ntication using translation 

20 



Ne 


Function 


Parameters 


4- 


C. Random 


None 


.Rg=^ ^: ; z . . V 


2 






KcyRof- n1 , SigOnly - 1 or 0, MSoioGt - any M, KoyldSoioct - 0, 
WordSeioctForDosiredM ~ any, RE" Rq 




If ResultFlag - Pass then MWords - ScicctcdWordsOfSolcGtcdMG 


as per input [MSoleot] one/ [VVordlSelectForDesiredM], Rg " R^, SIG6-= 
Sqption 1 6,3,1 gf|B'^f#S|S^'»: 


3 


A.Random 


None 


-R^-^RL ' ^ : . - ~ 


4 


C. Trandato 


InputKcyRcf "n2, DataLongth - Length of MWords in words 




Preformatted as per Section 1 7.1 , Data ~ MWords prcformattcd as per 


Section 1 7.1 , RE- R^, SIGE " SIGb. OutputKcyRcf - n3, RE2 - Ra 




If ResultFlag - Pass then RgTRLI, SIGc'- S/GOuf Refer to Section ^ 
15.3.1 . .^ I i ^ — n-^ " 




A.ToGt 


KcyRcf" n2, DataLongth ~ Length of MWords in words proformatted 






as per Section 1 6.1 , Data " MWords preformatted as per Section 1 6.1 , 
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I I p^^if^gr-f^"^ ^ 

34t^ Updat i ng t h e ink - rema i ning 

This soquonc e i s p e rformcKl whon the pr i nter is pr i nt i ng. Th e ink QA D e vic e ho l ds th e l og i ca l 
amount of i nk - r e ma i ning corr e sponding to th e phys i ca l i nk l e ft i n th e cartridg e . This l og i ca l i n l < 
5 amount must decrease, as phys i ca l ink from the ink cartridge i s us e d for pr i nting. 

31. 4 .1 S e qu e nce of updat e 

The pr i mary quest i on i s wh e n to d e duct th e logical I nk amount — boforo or after tho physica l ink i s 

used 

eh Print first (use physical ink) and then update th o logical ink. If tho pow e r is cut off aft e r 

10 a phys i cal print and b o foro a logica l update, then tho l og i cal update i s not p o rform o d. 

Thoroforo, tho l og i cal ink remaining Is moro than tho physical i nk rema i ning. Perform i ng 
ropootod power outs w il l increase the differontial amount, and fina ll y any phys i ca l i nk cou l d 
b e us e d to r e fil l th e QA D e v i ce. 
Update tho logical i nk and th e n print (use physica l i nk). Th i s i s bettor than 

15 (a) bocauso other physica l i nks cannot be us e d. However, if a prob l em occurs during 

print i ng, after tho l og i cal amount has alr e ady been deduct e d, th e r e w i l l be a dispar i ty 
betw ee n l ogica l and physical amounts. Th i s m i ght result in th e printer net printing e v e n if 
physica l i nk is pres e nt in the ink cartridg e . Th e amount of d i spar i ty can bo r e duc e d by 
i ncreas i ng th o fr e qu e ncy of updating logical ink i. e updat e aft e r e ach lin e inst e ad of aft e r 

20 e ach page. 

Prcauthoriso l og i ca l i nk. Pr e author i se certain amount of ink (depends on the frequency of 

logical updat e s) boforo pr i nt and clear it at the end of printing. If pow e r is cut off aft e r a 
page i s pr i nted, th e n on start up, th e pr i nt e r r e ads the preauthorisation f ie ld, if i t has not 
boon c l eared, i t appl i es tho proauth amount to tho i nk remaining amount, and th e n clear s 

25 th e pr e authorisation fie l d. 

31. 4 .2 Bas i c update 

Some pr i nters may use one of m e thods d e scr i b e d in S e ction 31 .4.1 (a) or (b) to updat e logica l ink 
amounts in the i nk QA D e v i c e . Th i s method of updating the ink i s term e d as a bas i c updat e . Th e 
decr e m e nt e d amount i s writt e n to the appropriate ink field (which has been pr e v i ously determined 
30 us i ng S e ction 31 .2.2) i n m q - Th e pr i nt e r v e r i f ie s th e wr i t e , by r e ad i ng th e signature of th e wr i tt e n 
data, th e n passing i t to th e TosMunction of the trusted QA Device. 

For signature to b e va li d, the trust e d QA Dev i c e (A) and i nk QA D e v i ce (B) must share a common 
or a variant k e y i.o B.K^^ - A.Kfl a .or B.K^- FormK e yVar i ant(A.Kft a -, B.Ch i pId). 



35 Tabl e 315. Command soquonc e for updating th e ink r e ma i ning (bas i c) 



Ne 


Fu notion 


Parameter 


4- 


B.WriteFioldc 


VoctNum = 0, FieldSelect "Select bits corresponding to the Ink fields, The ink 
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field locations should have boon determined before by using the method in 


Section ^31,2,2,1 FieldVal" Decrementod ink remaining amount 


RosultFlag ~ PaGQ/Fail .4 '--rcJ^-r-^^ \ % P 






A.Random 


None 


RA.=-«t 1 V . C ■ 1 ; 




3 


B.Road 






KoyRof- n1 , SigOnly - 1 , (Wo only nood tho oignature because we already 


Gorrosponds to tho Ink fiolds written in Seq No 1 , RE^ Ra 






If ResultFlag"" Pass then So/octodlVbrc/sOfSo/ocfed/lfe not returned becouGO 


[SigOnly] - 1 in Seq 3, - F^, SIG^^- S/Goi/f Bpf of to Section 15.3.1 . , . ; ^ 




4 


A.Toct 






KeyRef- n2, DataLongth - length in words as per Soq No 1 [MVal] 


as per Soction 16.1. RE-R&, SIGE - SIGb 






RosultFlag ~ Pass/Fail , ^ , , 





31 . 4 .3 Pr e author i sation 

This ooot i on doGorlboo tho updato of logical i nk amounts us i ng proauthorisot i on. 
Th e bas i c pr e author i sat i on s e quonco is as follows: 
5 €h Proauthorioo befor e th e first print. Pr e authorisat i on amount doponds on tho pr i ntor mode l . 

Exampl e amounts could b e th e ink r e quir e d for an fu l ly cov e red A 4 pag e or an A3 pag e . 

Valu e corr e spond i ng to the preauth amount i s wr i tt e n to th e pr e auth fie l d in th e i nk QA 

Devic e . 

Note: Tho pr e auth va l u e must b e correct l y i nt e rpreted on diffor o nt pr i nter models i.o i f a 
10 pr e author i sat i ori amount of A 4 pago i s sot i n tho ink cartridgo in pr i ntorl(modoll), and l ator 
tho ink cartridg e i s placed i n printor2(modo l 2) with i ts proauth st ill sot, prlntor2 must 
deduct an A4 pago worth of Ink fronn i nk - r e nnaln i ng amount 

b: Print th e pag e . 

Writo tho doduGtod l ogical amount to tho i nk fio l d of tho i nk QA D e vic e and va li date the writo by rcxiding tho 

1 5 Gig nature of tho i nk f i o l d. 

4-. Ropoat b to c t il l the l ast pago has b ee n pr i nt e d. 

e: Cloar tho proauth amount. 

f: I f the power i s out off before tho proauth i s app l iod. on otartup apply tho pr e auth amount to th e corre s pond i ng i nk 

fiold. by perform i ng a non authont i oatod writo of tho docromontod amount and oloar tho proauth amount by p e r 
20 fbmi i ng an auth e nticated writ e of the proauth fiold. 

31, ^. 3. 1 S e t up of the proauth fioid 
Only a single preauth gi e ld must e xist i n an I nk QA Dev i c e . 
Preauth fie l d w ill consist of a s i ngl e mo word but can b e optiona ll y e xt e nded to two mq words by 
us i ng a differ e nt va l u e of typo attr i but e . F i gur e 388 shows th e setup of proauth fie l d's attributes 
25 ¥(^. 

. Th e pr e auth fi el d has authentioatod RoadWrito acooso us i ng tho INK_USAGE_KEY i.o 
I NK_USAGE_KEY can perform authenticated writes to this fi e ld. Th i s k e y or i ts variant is 
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shar e d betwe e n th e i nk QA D e vice and tho printer QA D e v i c e to validato any data read from th e 
i nk oartr i dgo. For s i gnatur e to b e va li d, B.Kb ^ . - A.K^^or B.Kfl 4 .- Form K e y Varlant(A.Kn 2-7 
B.ChipId), whore Kb ^ . " iNK_USAGE_KEY. Th e syst e m perform s a Writ e Auth to th e pr e auth fi e ld 
using th i s key, to sot up tho proauth amount, and to door tho preauth amount. 
5 Th e pr e auth f ie ld i s id e ntif ie d by two attributes: 

Typo attribut e TYPE_PREAUTH . Rofor to Append i x A. 

^ Koy l d of KoyNum attributo must b e th e sam e as th e Koy l d of th e 

INK_USAGE_KEY which tho printer uses to va l idato tho any data road from tho ink QA 
Dov i oo. 

10 Th e Pr e auth fi el d can b e applied to a s i ngle i nk fi e ld or multipl e Ink fi e lds. 

31.^.3.2 Pr e auth appli e d to a singl o ink fi o ld 

In th i s cas e th e e nt i r e pr e auth fi el d is us e d to stor e th e pr e auth amount and Is on l y link e d to on e 
i nk fi e ld. 

31.4.3.3 Pr ea uth applied to multipio ink fiolde 

15 Mu l tip le pr e auth fi e lds can b e accommodat e d in a singl e mo fi e ld by a scheme shown i n Figure 
388A. 

This sch e m e supports a maximum of 8 i nk fie l ds b e ing pres e nt i n th e I nk QA Dovico. 
Tho fiold in m q i s divid e d into two parts pr e auth fi el d select and pr e auth amount. Each bit i n 
pr e auth fiold s ele ct corr e sponds to a single ink fiold, and th e pr e auth amount for each i nk fie l d is 
20 th e sam e . 

If an Ink oartridg o us e s multip le inks which ar e pr e authoris e d, th e n e ach of th e i nks wil l hav e a 
correspond i ng proauth fie l d b i t. Boforo a part i cu l ar ink is us e d for printing the corresponding 
pr e auth field b i t is sot. Th e pr e auth amount fiold i s also sot i f tho previous amount is zero. At 
fin i sh, tho proauth fio l d bit i s c l oarod. I f more than one ink is us e d, th e pr e auth bit for e ach ink fiold 
25 is s e t, and at finish e ach bit i s c le ar e d with last b i t c l ear i ng tho proauth amount as w el l. 

31. 4. 3. 4 Locating preauth fields a nd d e termining preauth fi e ld value 

Th e pr e auth fi el d can be l ocated in tho same manner as tho ink fio l d. I f tho printer wants to find 
th e pr e auth fi e ld in the i nk QA D e vic e , I t must call th e function FindFi e ldNum (s ee Section 
31 .2.2.2) w i th koyldRoquirod ~ Key l d of N e twork_OEM_lnk_Usag e _K e y and typeR e quired " 
30 TYPE_PREAUTH. 

Th e proauth f i old valu e can b e read in the same manner as tho Ink remaining amount. Th i s 
r e qu i r e s us i ng of tho funct i on G e tFi e ldDataWordG(FiQidNum,FioldDQtQ[J, M0,M1) described i n 
S e ct i on 27.1 . 4 .1 4 . Fi e ldNum must b e s e t to th e valu e returned from funct i on FindFieldNum, wh i ch 
In this case is the fiold numb e r of the proauth fiold. Fie l dData r e turns the valu e of the pr e auth 

31. 4. 3. 5 Command eoquonco 

Th e command s e quenc e can bo brok e n up Into thr ee ports: 

^ Start of print soquonco. 

^ During print soquonco. 

40 End of print sequence. 
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31. 4 .3.5.1 Start of print sequ e nc e 

This sets up the pr e auth amount b e for e th e start of pr i nt i ng. 

Tablo 316 shows tho commQnd ooquonco for start of pr i nt ooquonc e . Th e f i rst Random R e ad 
T e at soquonco dotorm i nes the pr e auth f i e l d in th e i n l < QA Dov i c e and its va l u e . Th e Random 
5 SignM Writ e Fi e ldsAuth se qu e nc e , th e n writ e s to the preauth fio l d the new proauth valuo. 

Tabl e 316. Updating the consumable remaining (preauth) start of print soquonco 



Ne 


Function 


Paromotors 


Random Road Toet eoquonce to determine the location of tho proauOi fiold in tho ink QA Dovioo and 




^- 


A, Random 


None 


Ra^-RL : - - - : ^ 


2 


B.Read 


KeyRef - n1 , SIgOnly - 0, WordSelcctForDcsircdM (for - all 16 words of 






MO and all 16 words of M1 MScicct - 0x03(lndicates MO and Ml ), 
KoyidSoioGt - OxFF (Read all Keylds), WordSoioctForDosirodM (for M&i= 






" M+7— 


OxFFFF(Read all 16 M4^words), RE- Ra 


If RcsultFfag ~ Pass then MWords = SoioctcdWordsOfSolCGtcdMs as por . 




input [MSelect] and [WordSoloctForDesirodM], Rb ~ R|., S!Gb-= SIGout Refer 
to Sootion 15.3.1 -/^ ~: ~/\ >^-X^ ~ , ; 






3 




KcyRcf- n2, DataLcngth ~ length of MWords in words preformatted as per 






Sootion 16.1, Data ^ MWords as per Seq No 2 preformatted as per Section 
1fi 1 Pg-Ro j?/fiF~j^in.- 




















Random SignM- WriteFieldsAuth sequence to write the new preauth value 


4 


B, Random 


None 






§ 


A.SignM 






KcyRcf - n2, FMdSolect = Soioct bit corrosponding to tho Preauth field. 


FleldVal - new proauth value, Chlpid - Chlpid ofB, R^" Rb4 


\f ResultFlag - Paos thon Ra^^/^SIGa= SIGout Refer to Section 27.1 .3.1 - 




6 


B.WritoFioldGAuth 


KeyKof = nt, F§cldScloGt= same as Seq 5 [FieldSoloct 
Seq 5 [FioldValL RE" Ra4. SIGE - SIGa 


, FioldVal- same as 




RcsultFlag ~ Pass /Fail $ i ^ ^ %ii::riSr:rii£ 



10 31. 1 .3.5.2 

During pr i nt s e quenco 
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Th i s sot of commands ar e r e p e at e d at e qua l int e rvals to update l ogical i nk amounts to the ink QA 
Dovico during pr i nt i ng. 

Tablo 317 shows tho command soquonco for tho pr i nt soquonoo. Th e Writ e Fi e lde writos tho 
updated va l ue to the ink field. Random R e ad T e st reads back tho va l u e writt e n and tests whothor 
5 the value r e ad match e s th e valu e wr i tt e n. 

Tab le 317. Updating tho consumabl e r e maining (pr e auth) dur i ng print sequence 



Ne 



Function 



r 



aram e t e rs 



Writ e the decremont e d ink - r e maining account 



B.WritoFioldG 



F iel dS e l e ct " S e l e ct b i ts correspond i ng to th e Ink f ie lds. 
Fi e ldVal- D e cr e m e nt e d ink rema i ning amount for a sing l e ink or 



mu l tipl e ink fi e lds as p e r F ie ldSe le ct. 



R e su l tF j ag =Pass /Fail 



Random R e ad T e st soquonce to read and verify th e ink remaining amount writt e n 



8 



A.Random 



Non e 



9 



B.Road 



KcyRcf' n1 , SigOn/y ~ 1 - (We on l y nood tho s i gnatur e 



b e cause we already know tho data), MSeioct -0x01 (on l y M &h 
KcyldScl e ct ~ 0, WordS e iectForDosirodM ~ corr e sponds to 



th e i nk fields vw i tten in Soq No 7, RE- Ra 



If RcGultFlag - Pqog ihQa ScicctecWordsOfS e icctcdl^^ not n 



r e turn e d b e caus e [SigOnly] - 1 in Soq 9 R^^ - R^, SIG^j," SiGout 
R e f e r to Sect i on 1 5.3^1 . V 



4^ A.ToGt 



K e yR e f - n2, D a t a Lcngth ~ length in words as p e r S e q No 7 
[MVa l ] proformattod as per S e ct i on 16,1 , D a ta " as p e r S e q No 



7 [MVal] Pr e formatt e d as per Section 16.1 , RE. =R Bf SiGE - SIG^ 



RcsuitFIag ~ Pass/Fa il 



31 .4.3.5.3 End of print soquonco 

10 This sequ e nce clears pr e auth amount b e fore the pr i nt sequ e nc e is comp le t e d. 
Tab l o 31 8 shows tho command soquonco for the end of print soquonco. 

Th e pr e auth fie l d i s r e ad using th e Random R e ad Tost soquonco. And th e preauth fi e ld is c le ar e d 
using tho Random SignM WritoFioldeAuth sequence. 

Tabl e 318. Updat i ng th e consumab le remaining (pr e auth) e nd of print s e qu e nc e 

15 



Ne 



Funct i on 



Param e t e rs 



Random - R e ad - T e st e e quonco to road tho proauth field and vorify tho proauth data 
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44 


A. Random 


None 




42 




rvcyfcor — n i , %>ig%jniy — i , fwoe/ccc — uxunoniy iviuj, Aeyiqooiocr^ u. 


WordSolQctForDcsirodM (for mo)~ Words corresponding to tho Preauthfield 


that has been written to in Seq 5 [FieldSelect] in Table 31 7, RE" Ra 


\f RcsultFisa ~ Pcic.^ ih^n MWotdf: ^ ScfcctcdWQriJ*t nnr 
Seq No 12 [MSolect] and [WordSeloctF6fPeslredM]; Rg^^ 




Refer to Section .15.3.1 . - ^ 


43 




KcyRcf- n2, DataLcngth - length of IVIWords in words as per Seq No 12 




Preformatted as per Section 16.1 , Data - MWords as por Soq No 12 


Preformatted as per Section 16.1, /?E.=Rb, S/GE - SIGh 




RosuitFiag - Pass/Fail ,1 




Random SignM WritoFioldGAuth eequonco clears the preauth fiold 




44 


B.Random 


None 


Rb+ — Rt 


4S 


A.SignM 


KcyRcf - n2, FicldSclcct =Select bit corresponding to Pro auth field, 
FIcldVal = Clear the preauth field, Chipid = Chipid ofB, R^- Rb4 




If ResultFlag - Pass thon RM=-RyS\Gfi^-SIGout Refer to Soction 27.1,3.1 




4€ 


B.WhteFiefdsAuth 


KcyRcf = ni, FicldNum = same as Seq 5 [FieldSelect], FleldData = same 




as Seq 5 [FioldVai], RE- R^, SIGE - SIGa 






ResultFlag - Pass /Fail :: : „ > ?c ' 



31.4.^ Preauthorisation through tho Translate funct i on 

This is p e rform e d wh e n the system trusted QA D e vic e do e sn't shar e a l< e y w i th th e i nk QA 
Devico, and uses a translating QA Dovico to Translat e a Read from tho I nk CSA Dov i co, and to 
5 Translat e a SignM to th e i nk QA D e v i c e . 

Th e bas i c translat e pr i ncip l e i nvolves trans l at i ng tho Rooof data from tho untrustod QA Dev i c e , to 
th e T e st data of th o trust e d QA D e vice, and trans l ating th e SignM data from the trusted QA 
Dev i c e , to th e WritoFioldsAuth data of the untrustod QA D e v i co. 
For validating signatur e s using trans l ation: 

10 Th e trust e d QA Devic e (A) and th e trans l ating QA D e vic e (C) must shar e a common or a 

variant key l .o CKr^ " A.Kfl a -or CK^- FormK e yVariont(A.Kft a ., C.Ch i p I d). 

^ Th e i nk QA D e v i c e (B) and th e trans l ating QA D e v i ce (C) must sharo a common or a 

variant koyi.o C.K^ - B.K^ ^ . or B.K^^ - FormK e yVar l ant(C.Kfta, B.ChipId). 
On l y tho start of print s e qu e nce is describ e d using Translato. Tho rost of tho sequences I n 
15 preauthor i sation can be modifi e d to app l y translation using this oxamplo. 

Toblo 310 shows tho command soquonco for preauth (st a rt of print s e qu e nce) us i ng trans l at i on. 
Tab l e 319. Pr e auth(start of print s e quenc e ) us i ng trans l at e command 
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No 


Function 


Parameter 


\Random Road Random Translate Test Goquence reads the looation of the preauth field and its value 


\using the translating QA Dovice C 




4- 


C, Random 


None 




2 


B^Read 


KcyRof- n1, SigOniy-Q, iVySo/ecg - 0x03(indicates MO and M1), 
KcylaSoiOGt OxFF (Ksad all Key Ids), WordSclcctForDosiroaM (for mr^ 




uxFFFF (Read all 16.Mo-Words), UyoraSo/ectrorPosirooyw (for ^4.)= 


OxFFFF(Road all 16 M4^words), RE- Ra 


IT Kcsuitriag Kass tnen Mworos — ^eiecteovworosut^Biecteains as per : 


inpul [ivioeiecij ano [vvorooeiocirorijesiregmj, rvg ^ rx^i oivjg,— oiigoc/r Keier 
to oection i D.O.I . _ - . . ^ " - - . 


3 


A. Random 


None 




4 


C. Translate 


inputKcyRof -r\2, DataLongth (in words) - length of MWords in words as 
per Seq No 2 preformatted as per Section n 1 7.1, Data = MWords as returned 




from Soq No 2 proformattod as por Soction 1 7.1 , ffg- R^, SIGE - SIGb 
OutputKcyRof = n3, /?£2 = 


If i|tes£i/tF^g - Fags then R^- SI(3g>= S/GQi/^ R^fer to Figure 1^.3.1 g 






AToot 


KeyRef- n2, DataLcrtgth length of MWords in words as por Soq No 2 






Preformatted as por Soction 16.1, Data ~ MWords as returned from Seq No 2 


poramotor proformatted as por Soction 16.1, RE=Rg^, SiGE ~ SIGg 


RqsuitFlog - Pass/Fajl t ..^ - , . .>^., ^ /..c?^ ^ 


]Random SignM-Random-Translate WriteFieldAuth sequence to write the new preauth value using the translating 




6 


C.Random 






? 


ASignM 


KcyRcf - n2, FicldSelect =Select bit corresponding to Pre authficid, 




FieidVal = new value of preauth field, Chipid = Chipid ofB, Rs~ Rgz 






If ResultFlag 7 Pass theri RA^RyS^A- SIGoutRefft p Section 27.1.3.1 


% 


B.Random 


1 t\Ji 




9 


C. Translate 






InpiifKoyWof -n3, DataLongth (in words) ~ length in words as per Seq 7 


FieldSoloct] preformatted as por Section 1 7.1, Pate " samo as Soq 7 
Field Vol] proformattod as por Soction 17.1, RE- R^, SIGE - SIGat 


OutputKcyRof - n2, RE2 = /?b4 




KRosuftFipg -^oss^^ep Rg^f^^ ja F^ure; J.6,3^ill 
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4« B.Wnt e FieldGAuth 



KcyRof-nl, FicidNum = same as Scq 7 [FieldSel e ot], FicldData - sam e a s 



Scq 7 [F i oldVa l ], RE- Rq^, SIGE " S I Gq 



ResuitFiag =^ jpass/Fan, 



34t5 Upgrad i ng t h e pr i nter parameters 

This s e qu e nc e is p e rform e d wh e n a pr i nt e r's operating param e t e r i s upgradod. 
The Parametor Upgrador QA Dovico stores the upgrade valuo which I s copied to th e op e rating 
param e t e r f i eld of the Printer QA Dovico, and tho count romaining associat e d w i th upgrado valuo 
is docrom e nt e d by 1 in the Parametor Upgrad e r QA Dovico. 

Th e Param e tor Upgrador QA Dovioo output the data and s i gnature only aft e r comploting a l l 
n e oossary chocko for tho upgrado. 



10 
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31.5.1 Basic 

Th e bas i c upgrad e is used whon the Param e t e r Upgrador OA Dov i oo and Pr i nter OA Dov i co 
being upgrad e d share a common k e y or a variant key i .o B.K^ - A.Kf^or B.Kft 4_= 
FormKoyVar i ant(A.Kn a -, B.Ch i p I d), whoro B i s tho Printer OA Devic e and A is the Parameter 
5 Upgrader OA Device. Th e r e for e , th e messages and th e ir s i gnatur e s, gen e rated by e ach of th e m 
can be corr e ctly int e rpr e t e d by th e other. 

The transfer soquonco i s porformod us i ng Random Read Random Xf e rFiold WritoFi e fdeAuth . 
Table 320 shows the command s e qu e nce for a bas i c upgrade- 
Table 320. Basic upgrade command soquonco 

10 



Ne 


Function 


Paramotor 




Random-Read- Random XferFieid WritoFioldGAuth roado MO and Mioftho QA Dovioo being upgraded, 
Paramotor Upgrador QA Device producoe tho upgrade value for FioldNumE and Soquonco data fielde 


SEQ_1 and SEQ_2, then those values aro writton to the Printer QA Device. 




4- 


A.Random 


hJono 




2 


B.Read 


KcyRof- n1 , SIgOnly - 0, MSclwt ~ 3 (indicates mq and m^), KcyidSclcct - 
0x00 (no Keylds required), WordSoioctForDcsirodM (for m)" OxFFFF (Read all 


i^words), WordSoioctForDosirodM (for m^)- OxFFFF(Road all M4.words), RE- 


Ra 


If RcsuitFiag " Pass then MWords = ScicctcdWordsOfSeioctcdMG, as per 
input [MSelect] and [WordSelectForDesirodM], Rh ~ RL,. SIGb-"" S/Gouf Rofor 


to Section 15.3.1 \ = 


3 


B. Random 


None 


Rg4."~ Rj^ 


4 


A.XforFiold 


KoyRcf- n2, y^QOfExternal = First ^6 words of-MWords, i^OfExtcrnal- Last 
1 6 words of MWords, Chipid " Chipid ofB, FicldNumL-- The field storing 


tho upgrade value in the Parameter Upgrader QA Device, The value of this 


field will bo copied to FioldNumE. FioldNumE= Tho field which will be 




upgraded in tho Printer QA Dovico. REi=~R&rf^rJ^, S/G^- SIGg 


If ResultFlag - Pass then FieldSeieotBI " FieldSelect - Select bits for 


FioldNumE and Soq data fiolds SEQ^I and SEQ_2 fiold, FioldValBI ' 




FicldVal New Value for FioldNumE (Copied from FioldNumL of the 
Paramotor Upgrador QA Device) and sequence data fields Raa-^-R^^t-^^a^^ 


SIGout - Refer to Section 27.1 .3.1 . 




5 


B.WritoFioldeAuth 


KcyRof -n1, FicldSclccf FioidSoloctBI , FieldData - FicldValBI, RE - Ra^j 




S/GE "SIGa 




Result^g = Pass/Fail 
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31.5.2 Us i ng th e Translato funct i on 

The upgrade through tli e Tranelato function i s UQod wlion the Paramot e r Upgrad e r QA Dov i oo 
a nd th e Print e r QA D e v i c e don't shar e a key b e tw e en them. The translating OA Dev i c e shares a 
5 l < e y with th e Paramotor Upgrad e r QA Dov i co and a second l ^ey w i th tho Pr i nter QA D e v i c e . 

Thoroforo th e messages and their signatures, generat e d by the Paramotor Upgrader QA D e v i ce 
and tho Print e r QA Device aro translated appropriately by the translat i ng QA Device Tho 
translat i ng QA Dovico va l idatos th e Read from th e Print e r QA D e vice, and trans l ates i t for input to 
tho XforFiold function. The trans l ating QA D e vice w ill validato tho output from tho XforFiold 
10 funct i on, and thon trans l ato i t for input to WritoFioldsAuth messag e of tho Printer QA Dovico. 
For va li dating signatur e s us i ng translat i on: 

-* Th e Parameter Upgrader QA Device (A) and tho trans l at i ng QA Dovico (C) must shar e a 

common or a variant k e y i . e C.Kf ^3^==^^^tA^ef^GA ^- FormKeyVar i ant(A.Kn a ., C.Chip I d). 

The Printer QA Device (B) and th e trans l at i ng QA Dovico (C) must share a common or a 

15 variant koy i .e CKna - B.K»4 or B.K^^ - FormKoyVariant(C.Kfta, B.ChipId). 

Tabl e 321 shows th e command s e quence for a bas i c refi ll us i ng translat i on. 
Table 321 . An upgrade with translato command sequence 



Ne 


Function 


Command 


Random Read Random Trandato Random XforFiold Random Tranolato Random WritoFioldeAuth 


readG MO and Mioftho Printer QA Dovice using the translating QA Dovico C and thon doos a write of 


the upgrade valuo to FioldNumE and now sequence data to the seq data fields SEQ_1 and SEQ_2 field 


of the Printer QA Dovice using the translating QA Device C. 




1- 


C. Random 


None 




2 




KeyRof - nl, SigOnly - 0, MSoloct-0x03(indicatos Mo-aH^-Mj-), KoyldSelect - 0x00 
(no Keylds roquirod), WordSeloctForDosiredM (for OxFFFF (Road all ^gweFd^ 


WordSelectForDosirodM (for m^)- OxFFFF(Road oil M<-Words)> Rg- Re 




If RcsultFlag - Pass thon MWords - So/octecfWorrfsOfSe/cKytocfyigs as per 
input [MSeleot] anc# [WordSelectForDosirodM], " RL, SIGb-= SiGout Refer to 


Section 15.3.1 


3 


A. Random 


t\\r\nn 




4 


C. Translate 






InputKcyRcf -r\2, DataLcngth - MWords length in words as per Seq No 2 
Preformatted as por Section 17.1, Data = MWords as returnod from Soq No 2 


Preformatted as per Section 17.1, RE- Rb, S/GE" SIGb, OutputKoyRcf ^ n3. 


RE2-Ra 


\f RcsuitFiag - Pass thon Rei-- RL2, SIGg"" SiGOut Refer to Section 1 7.3.1 
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§ 


C. Random 


Mono 




s 


A.XforFiold 


KovRcf = n2 LMLOfExtcrnai *" First 1 6 words of MWord'^^ Of^yctarn^l" Ln-^t 1 fi 
words of M Words. Chioid ~ Ohioid ofB. FioidNumL— The ffdd fitorina the 


upgrade valuo in the Parameter Uporador OA Device FiddNum^— ThG field 






if ResuliFlag - Pass then FieldSelectBt - FioldSoloct Soloct bits for 


FieldNumE and sequence fields, FicldVaiBI = FicldVai -Now Value for 


FicldNumE (Copied from FicldNutnL of the Parameter Upgrader QA Device) 


and sequence fields SEQ^I and SEQ^2, RM^-fii^, SIGa-'^ SiGout Refer to > 


Soction 27.1.3.1 


? 


B. Random 


None 


Kb* — r<t 


8 


C.Tranelate 






InputKcyRcf ~n3, DataLength ~ FieldValBI length In words as per Seq No 6 
proformatted as per Section 17.1, Data - FioldValBI as roturnod from Soq No 6 




Preformatted as per Soction 1 7.1 , RE- R^., SIGE - SIGa, OutputKoyRof~ n2, 
RE2 = f?B4 


If RcsuftFlag - Pass then R^s-^=^-R^^, SIGg" SIGOut Refer to Soction 1 7.3.1 


4d 


B.WritoFioldeA 


KeyRef-ni, FioldSoloct - FioldSolootBI, FioldVal - FicldVaiBI, RE - Rc^y 




SIGE = SIGg 




RosultFlag = Pass/Fail 



Recovering from a fa i led upgrade 

Th i s s e quence is performed if the upgrade failed (for o.g Printer QA Dev i co didn't r e c ei v e th o 
upgrade messag e corr e ct l y and h e nc e d i dn't upgrade succossful l y). The Paramet e r Upgrad e r QA 
5 Devic e therefore needs to b e ro l l e d back to tho previous valu e before the upgrade. I n th i s case, 
tho count rema i ning assoc i ated with the upgrade va l u e I n th e Paramet e r Upgrad e r QA D e vic e i s 
I ncr e as e d by one. 

Tho Paramet e r Upgrader QA Dovico chocks that tho Printer QA D e vic e d i dn't actual l y r e ceiv e th e 
m e ssag e corr e ct l y us i ng tho StartRoHBack funct i on. The RoHBackFi e ld performs further 
10 comparisons on e e quonco fields and Fi e ldNumE of the Printer QA D e v i ce to valu e s stored in tho 
Xf o rEntry cache. Aft e r p e rform i ng al l ch e cks, th e Parameter Upgrader QA Devic e i ncr e m e nts the 
count romaining field assoc i at e d w i th the upgrade valu e fi e ld by one. Rofor to Soction 26 and 
Section 28 for d e ta i ls. 

Tho ro l lback is started us i ng tho Random Road - Random StartRoHBack - Writ e FieldsAuth and th e 
15 ro l lback of th e Param e t e r Upgrad e r QA Dev i ce is perform e d us i ng Random - R e ad - RollBackField 
s e qu e nc e . 

Tob l o 322 shows tho command sequence for a rollback upgrade. 
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Ne 


Function 


Command 


Viandom Road Random-StartRollBaok WriteFieldsAuth starts the rollbaok and updates data for tho 


asequonoe fields. 


A- 






-ihr^ \ - -; . ■ , - 


2 


B.Road 






ixeyKeT — ni, oiguniy o> Moeioct ^xUo(inaicates MQ-cffift-\tt), Koyiosoiect ~ 0x00 


(no Keylds required), WoraSeleotrorDosireclM (for j^) OxF^» (Read all Mowords), 


WoraSeleotrorDesiredM (for m^)- Oxl'FFF(Read all j^words), R^— Ra 


if RcsuitFiag ~ Pass thon MWordc " So/octodlVordsO/So/ocrtodMs q per 


input [Moeiectj ana [WordooioctrorDesiredMj, Re^ SiG^^ SiGout Refer to 
oeotion lo.o.i .7 , '^'V-*^ ^ : — • N''^^>.v. . - ^ , ^ . ^-j. i'-v^'.. 


3 


B. Random 




Kg4. — Kt 


4 


A.StortRoll 
B3ck 


KcyRof = n2, ^OfExternal = F/rsf 1 6 words of M Words, ^OfExtcrnal^ Last 1 6 
words of MWords, Chlpid = Chlpid ofB, FioldNumE- The fieid which was not 




upgraded in tho Printer 04 Device, FMdNumL = The upgrade value in the 


Parameter Upgrador QA Device which couldn't be copied to FioidNumE of the 
Printer QA Device, R£=-Rb, fR^s S/Ge" SIGb 




if ResuitFiag - Pass then FieldSeiectB FieldSeleot Soioct iDits for soquonco 


data fiolds SEQ_1 and SEQ_2, FieidVaiB - FieldVal ■ New values fdr SEQjt 


and SEEQ_2 fields Ra4-jM^S|Ga-= S/Go</^ Rofor to Soction 27. 1 .3. 1 . 






B.WriteFiof 


KeyRcf-nl, FieldSeiectr FioldSoiectB, FieidData - FieidVaiB, RE - R^j 


dsAuth 


SiGE - SIGa 


ResuitFiag - Pass/Faii Vi: 


Random -Read RollBackFiold performs a road of the QA Dovico tming upgraded, checks its values are ae 


perXfor Entry cacho, and thon adjusts its count remaining fiold. 




@ 


A. Random 




^Ras^^ 


7 


B.Read 


KoyRof - nl, SigOnly - 0> IVISoloGt -Qx03(indicates ^4Q-aHd-M4■), KeyldSolQCt - 0x00 




(no KoyId{3 required), WordSoleotForDesiredM (for mq)- OxFFFF (Read all M^words), 


WordSoioctForDosirodM (for ^i)- OxFFFF(Read all Mj.words), Rs=-Ra2 






If ResuitFiag Pass thon MWords = SeioctedWordsOfScioctedi^ as per 
input [MSolect] and [WordSelectForDesiredlVI]. R^ - RL, SIGe." SiGout Rofor to 


Soction 15.^.1 ~ „ ^ " 


8 


A.RollBaok 


KoyRof n2, ui^OfExtemai " First ^ 6 words of MWords, mOKxternai-^ Loot 16 




words of MWords, Chipid = Chipid ofB, FieidNumE- Tho ffeid which was not 


upgraded in the Printer QA Device, FieidNumL = The upgrade value in the 


Parameter Upgrador QA Dovico which couldn't be copied to FioidNumE of the 
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Printer QA Dovicc, Rb^-Rq^, SiG^- SIGb 


ResultFlag ^ Pass/Fall ^ " - - - 



34-r7 Re/f i ll i ng the consumable (ink) 

Th i s s e qu e nce i s porformed whon an i nk cartr i dg e i s first manufacturod or oftor al l th e physical i nk 
has boon used, it can be fil l ed or r e f i ll e d. The r e /fil l protoco l is us e d to transfer the logical ink from 
5 th e Ink R e fil l QA Devic e to the I nk QA Device in the ink cartridge. 

Th e I nk R e fill QA Dovico stores th e amount of logical i nk corr e sponding to the physica l i nk in the 
r e fi l l station. During tho ref ill , tho required logical amount (correspond i ng to the physical transfer 
amount) is transferred from the Ink R e fil l QA Dovico to the Ink QA Dev i ce. 
Th e Ink Refil l QA D e vice output tho transfer data only after compl e ting a l l nocoosary checks to 
10 e nsur e that corr e ct logica l ink type i s being transferred e.g Notwork_OEM1_infrarod i nk i s not 
transf e rr e d to N e twork_OEM2_cyan i nk. Refer to the XforAmount command in Section 27.1 . 
31.7.1 Bas i c refil l 

Th e basic refil l is used when tho Ink Refil l QA Dev i ce and tho I nk QA Dev i ce share a common key 
or a variant key i .e B, \ <^ -^==-AK^ef^^A ^= FormK e yVar i ant(A.Kfl a ., B.ChipId) wh e r e B is the Ink 
15 QA D e v i c e and A is th e I nk R e fil l QA Dovico. Therefore, th e messages and their signatures, 
generated by e ach of th e m can b e correctly int e rpreted by the other. 

Th e Xf e r Soquonco i s start e d using Random Read Random StartXfer WritoAuth and the tho Xfer 
Amount i s writt e n to the QA D e vic e be i ng refilled us i ng Random Read Random XferAmount 
WhtoFioldGAuth sequence. 

20 
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Toblo 323 the oommand soquonco for a bas i c refi ll 



Seq 


Function 


Paramotor 


Ne 








Random Read Random XforAmount WriteFieldeAuth roadG MO and Ml of the Ink QA Device being 
refilled, produce updated amount for FioldNumE and eoquonco datat fiold by calling XferAmount on inl< 


Refill QA Device, and finally writing the updated valuo to Ink QA Device using WriteFieldsAuth. 




4- 


A. Random 






2 


BrRead 


MyRcf — m , SigOmy 0, MScicct 0x03(indicatos Mo-afw-M^.), KoyidSoiOGt 
0x00 (no Keylds required), WordSoiectForDcsircdM (for m&)^ OxFFFF (Read all 




ft^worusj, vworo^CiCcirOfiJcsifcaM {jor ^^.j — uxrrrr(Keao an M4.worQSj, f\c — Ka 




IT fKcsuitriag — Pass then MWords = ScfectedWorasOfSelcctcaMG as per 


input [Mooiectj ana [WoraoOioctroruesiredivlj, kl, oivj^^= SiGout Refer to 
bection lo.o. 1 . i , 


3 


B. Random 


NeFie 




4 


AxferAmount 


KeyRof^ n2, mOfExtomal = F/rsf 16 words of,M Words, mOKxtcmal" Last 16 




words of MWords, Chipid " Chipid ofB, FieidNumL= ink-remaining field of 


the Ink Refill QA Device, FioldNumE- ink remaining field of the Ink QA 


Device, XferValLength - length in words of XferVal XferVal = Value to be 


transferred from Ink Refill QA Device to Ink QA Device being refilled, We^Rb? 
Re2-=-Rb4i SIGs~ SIGa 






If RosultFlag - Pass then FieldSelectBI - FieldSelect Select bits for 


FioldNumE and soquonce data fiold SEQ_1 and SEQ_2, FicldValBI = FieldVal 


'New Valuo for FioldNumE (transferred from FicldNumL of the Ink Refill QA 




Device) and sequence data fields SEQ_1 and SEQ_2, RA^-=-f^, SIGa— 
SIGout Rofer to Section 27.1 .3.1 . 


5 


B.WriteFieldsAut 


KeyRef" n1, FieldSelecf FioldSoloctB, FieldData ' FieidValB, RE - Ra4j 


h 


S/GE -SIGa 


ResultFlag = Pass/Fail 



5 31,7.2 Using th e Translate funct i on 

Th e r e f i l l through tho Trandato function is used whon the I nk R e fi ll QA D e vice and the Ink QA 
D e vic e don't share a key botwoon thorn. Th e translat i ng QA Devic e shar e s a key with th e Ink 
Refi l l QA Device and a s e cond key w i th th e I nk QA D e vic e . Th e r e for e th e m e ssages and th e ir 
signatur e s, g e nerated by tho Ink Refill QA Dov i co and tho I nk QA D e vice, are translated 
10 appropr i ately by tho trans l at i ng QA Dov i co. Tho translating QA Dov i co va l idates tho Road irom 
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tho Ink OA Dovico, and trans l at e s i t for input to the XfeM/not/n^ function. Th e translating QA 
Dov i co w ill va l idate the output from th e XfeMmot/n^ funct i on, and th e n trans l ate It for i nput to 
Writ e Fi e ldsAuth mossag e of tho Ink QA D e v i c e . 
For validating s i gnatures us i ng trans l ation: 

5 Th e I nk R e f ill QA D e vic e (A) and tho trans l ating QA Dev i ce (C) must shar e a common or 

a variant key i .o C.Kn^ ~ A-Kn a -or C.Kn a -- FormKoyVar i ant(A.K,^, C.Ch i pId). 

^ The Ink Refill QA Dev i ce being r e fi l l e d (B) and the translating QA D e vic e (C) must sharo a 

common or a variant k e y i. e C.Kf^ ~ B.Kf^ or B.K^ ~ FormKeyVariant(C.Kna, B.ChipId). 
Tabl e 32 4 . A basic refill using translat i on command soquonco 

10 



Ne 




Command 




Random Read Random Translate Random XforAmount-Random-Translate-Random-WriteFieldsAuth 
VoadG MO and M1 of the lnl< QA Device being refilled using tfie translating QA Device C , produce 


\updatod amount for FioldNumE and soquonco data field by calling XforAmount on Ink Rofill QA Dovico, 


^nd finally writing the updated value to ink QA Device using the translating QA Device. 




4 C.Random 


None 






Rg"" ' \/ ■[ ' 


2 


BrRead 


KoyRof - nl, SigOnly - 0, MSelect -0x03(indicates mo and ^i), KeyldSelect - 0x00 
(no Keylds required), WordSelectForDesiredM (for mo)- OxFFFF (Read oil M&words), 


WordSelectForDesiredM (forj^)- OxFFFF(Read all Mj.words), R^- 






IfRcsultFiag - Pass then MWords " So/ccfodWorc/sQfSo/octed/lfe as por 


input [MSelect] and [WordSeleotForDesirediyi], R^ " R^. SIGb-- S/GcHie Rofor to 
Section 15.3.1 


3 


A.Random 


None 


-Ra — Rt 


4 


C. Translato 


InputKeyRef -n2, DataLength ~ MWords length in words as per Seq No 2 






Preformatted as per Section 1 7.1^ Data = MWords as returned from Soq No 2 


proformattod as por Section 17.1 , RE" Rb, SIGE" SIGb, OutputKoyRcf ^ n3, 
RE2-Ra 




If ResultFiag - Pass then %v=-Ri^SIGg" SIGOut Rofer to Section 1 7,3.1 


& 


C.Random 






6 


A.XforAmount 


KeyRcf=n2, mOfExternai = F/rsf 16 words of.MWords, mOfExtornai= Last 16 




words of MWords, Chipld = Chipid ofB, FioidNumL- ink-remaining field of 


the ink Refiii QA Device, FieidNumE- ink remaining fieid of the Ink QA 


Device, XferVaiLength - length in words ofXferVai XferVai = Value to be 


transferred from Ink Refill QA Device to ink QA Device being refilled, R^- 


Rg4^7-/?&2-=-Rg2, S/Gg^ SIGg 
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If RcsultFlag - Pass then FieldSolectBI - FieldSeloot - Select bits for 




FieldNumE and soquonco data field SEQ^1 and SEQJ>;/%?/dV^/gf = 


^New Value for FieldNumE (transfcncd ^f^^ 

Devico) and sequence data Holds SEQ 1 and SEQ 2, Ra^^^-^^t-S^a-^ 


siGout Refer to Soction 27.1 .3.1 /t: 




B. Random 




r-> r-y 


o 

© 


C. TrsnGtste 


InputKoyRof 'n3, DataLongtn - FieldValB length in words as por Seq No 6 




Preformatted as per Soction 17.1, Data - FicldValB as returned from Seq No 6 




Preformatted as per Soction 1 7.1 , RE- R^, SIGE - SlGA^OutputKeyRef^ n2, 
RE2-R^ 


If ResultFlag - Pass thon R^=RL2, SIGc- SIGOut Refer to Soction 17.3.1 


9 


B.WriteFieidsAuth 


KeyRof-ni, FieldSelcctr' FioldSolectB, FicldData - FicldValB, RE - Rear 
SIGE = SIGg 




RcsultFlag r Pass/Fail 



34tS Recovering from a fa i led ref i ll 

Th i s s e qu e nc e is p e rform e d if th e r e fi ll fai le d (for e.g I nk OA D e vic e d i dn't r e c e iv e th e r e fill 
m e ssag e corr e ct l y and h e nc e didn't r e fil l succ e ssfu l ly). Tho I nk Rofil l QA Devic e th e r e fore n e eds 
5 to b e rolled back to tho previous va l u e b e for e tho rof ill . 

Tho Ink R e fill QA Dev i c e ch e cks that tho Ink QA Dovico didn't actua ll y r e c e iv e th e m e ssag e 
corroctly us i ng th e SterfRo//Bac/c function. The RoUBackAmount p e rforms further comparisons on 
s e quencQ data fi el d and Fi e ldNumE of tho I nk QA D o vic e . to va l u e s stored in th e Xf e rEntry cach e . 
After performing all chocks, tho Ink Refil l QA D e v i c e adjusts its i nk ftold to a prev i ous value before 
10 th e transfer r e qu e st was processed by i t. Refer to S e ction 26 and Section 28 for d e tails. 

The rollback Is started using th e R a ndom - R e ad Random StartRollBack - WriteFi e ldsAuth and tho 
ro l lback of the I nk R e f il l QA Dov i c e i s p e rformed using Random - R e ad RoUBackAmount s e qu e nc e . 
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Table 325. Ro l lback amount command sequonco 



Me 


jFunotion 


Command 


Random Read-Random-StartRoHBack WriteAuth etartG the rollbaok and updatoG data for tho eoquoncQ 


data fioidG SEQ_1 and SEQ_2 . 




4- 


A.Random 






2 


BrRead 


KeyRef - nl, SigOnly - 0, MSelect -0x03(lndicates mo and m^), KoyldSoloct - 0x00 


\yso K.oyias roquirod), woruoeiGCtroruesiroalvl (tor ft4o)~ UxrFFF (Read all Mgwords), 


vv era oeiectr oruesi reel M (tor — uxrrrr (Read all j^j-words), K^^^-Ra 


If ResultFlag Pass then MWords = SeicctcaWordsOfSeiectedMs as per 




input [MSelect] and [WordSelectForDesirodM], - RL, SIGb-= SiGout Refor to 
oection jo,c).l 


3 


B.Random 


None 


Rb4."t~R|_ 


4 


A.StartRoiiBack 


KoyRof " ii2, MoOfExtcmai " First 1 6 words of-MWords, M^OfExtcrnai- Last 1 6 




words of MWords, Chipid = Chipid ofB, FicldNumL- ink-remaining field of 


the Ink Refill QA Device wftioh will be adjusted to the value before the failed 


refill, FieldNumE- ink-remaining field of the ink QA Device which failed to 


refill, Ry" R^i R^z-^J^b^SIG^" SIGg 


If ResultFlag - Pass then FieldSelectB - FloldSelect - Select bits for sequonco 


data fiolds SEQ_1 and SEQ_2. FieldValB - FicldVal ■ Now value for 




sequence data fields SEQ_1 and SEQ_2 Ra4^-=-^, SIGa— -S/Gouf Refer to 

Section 27.1.3.1. 


40 


B.WriteFieldGAuth 


KeyRef =n1, FieldSolect- FioldSoloctB in Seq No 4, FieldData - FieldValB in 




Seq No 4 RE' R^^, SIGE " SIGa 


RfSpltFiag ? PasjSi/Fa// 


Random Read RollBaokAmount perforrriG a read of tho ink QA Device, chockG its values aro og perXfor 




Entry cache, and then adjuGts its ink-remaining fioid. 


44- 


A.Random 


l^one 


■Rfm^ • 


4^ 


B.Road 






KoyRof - nl, SigOnly - 0, MSoloct -Ox03(lndicates mo and m^), KoyldRoq - 0 (not 
required), KeyldSelect ~ 0x00 (no Keylds required), WordSelectForDesiredM (for 
mo)- OxFFFF (Read all Mowords), WordSoloctForDesirodM (for m^)~ OxFFFF(Read all 


M^wordo), RE- R^a 


\f ResultFlag ~ Pass thon MWords t SelectcdWordsOfSelcctcdiykj as per 




input [lyi Select] and |WordSolQCt|or^ Refer to 
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Section 15.3.1. ' 




A.RollBaokAmount 


KcyRcf" n2, MoOfExtornai = First ^6 words of-M Words, M^OfExtcrnai- Last 16 
words of M Words, Chipid " Chipid ofB, FicldNumL" ink remaining field of 




Ink Refill QA Device witich will be adjusted to tiie value before the failed 


refill, FieldNumE- ink-remaining field of Ink QA Device which failed to refill. 


RcsultFlag ~ Pass/Fail 



Upgrad i nc/Ref i llinc/f i ll i nc t h e upcrader 

This soquonco is porformod when a count romaining T\q \ 6 i n tho Parametor QA Dovico must be 
updat e d or wh e n th e ink remaining f\e\d in th e Ink R e fi l l QA Dovico roqu i ros ro/fil l ing. 
5 In cas e of th e Param e t e r QA D e vic e , anoth e r Param e t e r Upgrad e r R e f ill QA D e vice t r an sfers its 
count r e maining valu e to th e Param e t e r QA D e vic e using tho transfer eoquonoo doscribod in 
S e ction 31 . 4 . Also rofor to Soction 28.6. This m e ans th e count remaining in th e Paramator 
Upgrad e r R e f i l l QA D e vic e must b e docrom e nt e d by th e sam e amount that Param e t e r Upgrad e r 
QA Dov i co i s i ncremented by i .e a cred i t transfor occurs. 

10 In case of th e lnl< R e fil l QA D e vic e , another Ink Roflll QA D e v i c e tran s f e rs i ts ink - r e maining valu e 
to th e I nk Ref i l l QA D e v i c e using th e ^ansf e r sequ e nc e doscr i bod i n S e ct i on 31.^. Also rofor to 
S e ction 26.4. This m e ans th e l og i cal ink - r e maining i n th e ink Refil l QA Dev i c e must b e 
decremented by tho sam e amount that QA D e v i ce b e ing rofi l lod is incr e mented by i .e a cred i t 
transf e r oocurs. 

15 32 S e tting up for fi e ld use 

This s e ct i on consists of s e tting up th e data structur e s i n the QA D e vic e corr e ctly for f iel d us e . AH 
data structur e s are first programm e d to factory valu e s. Som e of th e data structur e s can th e n b e 
chang e d to applicat i on specific va l ues at tho ComCo or tho OEM, whi l e others are sot to fixed 
va l ues. 

20 3iA Instantiating t h e QA C hi p Logical I nterface 

Th i s soquonco is porformod wh e n the QA Dev i ce is first creat e d. Tab le 326 shows the data 
structure on fina l program l oad. 



PEA23US 



898 



Tab l e 326. Data otruoturo sot up during final program load 



Data Structur e 



Va i uo Set to 



F i x e d or Updatab l e 



Chip i d 



Un i qu e Id e ntifier for QA D e vic e 



NumKoy 



Number of koys tho QA Dovico can hold 



AM-KB-^=-Kbai6 fr. Th e K b ate h i s un i qu e for a 
production batch% 



Updateab l e if prov i ous valuo I s 



kriewn 



A ll K e ylds ~ K e yld of Kb ateh- 



Updat e ab le along with K^ t 



K e yLock 



All K e yLock ~ un l ocked 



Updatoab l o 



NumV e ctors 



Number of m e mory v e ctors i n th e QA D e vic e . 



m 



Sot to zoros 



Updat e abl e 



MO 



S e t to z e ros 



Updat e abl e 



S e t to z e ros 



Updato a b lo 



Sot to on e s 



Updat e ab le 



Sot to an in i tial random valuo 



Updat e abl e 



Each koy slot has tho samo K ^g ^. I f oach koy slot had a dIfForont Kb aten -, and any ono of tho 
5 Kbatefr ^was comprom i s e d th e n th e e nt i r e batch wou l d b e comprom i s e d til l the Kb ate n was r e p l aced 
to another koy. Honco, oach koy slot having a d i fforont Kb aieh -dQOsn't havo any soourity 
advantag e s but r e quir e s mor e k e ys to b e manag e d. 
3272 Sett i ng up appl i cat i on spec i f i c data 

Tho s e ct i on def i n e s tho ooquonces for configuring the data structures i n th e QA D e v i ce to 
10 applicat i on specif i c data. 
32.2.1 — R e plac i ng k e ys 

The QA Dovlcos aro programmed with production batch keys at f i nal program load. Th e 
COMCO koys replac e th e product i on batch keys befor e the QA Devic e s ar e shipped to the 
ComCo. Tho ComCo rep l aces tho COMCO keys to COMCOlOEM whon sh i pping QA D e v i c e s 
15 to its OEMs. Tho OEM rop l acos tho COMCOJOEM to COMCOjOEM_Qpp as tho QA Dovioos 
aro plac e d i n ink cartridges or print e rs. 
Tho rop l aoomont occurs w i thout tho ComCo or tho OEM knowing tho actua l valuo of tho koy. Tho 
actua l va l u e of th e k e ys i s on l y to known to QACo. Tho ComCo or tho OEM i s ab l e to perform 
those rep l ac e m e nts b e caus e th e QACo prov i des th e m w i th a koy programm i ng QA D e vic e with 
20 koys appropr i at e ly s e t wh i ch can generat e th e n e c e ssary m e ssag e s and signatur e s to replace tho 
o l d koy w i th th e new k e y. 

Tab l e 327 shows the command s e quence for Rop l ac e K e y. Tho GotProgramKey gets tho new 
encrypted koy from th e k e y programm i ng QA D e v i ce, and th e encrypt e d n e w k e y is passed into 
tho QA Dovico whoso koy i s boing rep l aced through th e R e p/aoeK i gy function. D e pending on the 
25 OldK e yR e f and A/ e wK e y/?ef obj e cts a common e ncrypted k e y or a variant e ncrypt e d k e y can b e 
produced for the Rep/ac e Key function 
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Tab l o 327. R e p l aceKoy command soquono e 



Ne 


Function 


Command 


4- 


B.Random 






2 


A. GotProgramKo 

u 
T 






Sof depending on whether the new key is the final key for the key siot or it 


wili bo replaced further. NewKeyRef = Key Nam of the new key. This key 


will change the OldKeyRefin the QA Device whose key is being replaced. 




If ResultFlag - PaoQ thon Rp^L, Keyld^- KoyldOfNowKoy ; 




EncryptedNewKey 7 Encrypted Key ^SIGA - SIGdut Refer to Section 22.2.1 . , 


3 


B.RopfaooKQy 


KeyNumToBoRoplacod = Old key number, the old key could be a common 






key or a variant key, Keyld = Keyld^, EncryptodKoy EnoryptodNowKoy, RE 
'RA^SIGE'SIGA 


ResultiFlag- Pass/Fail ■V'y^' ^ ..vw^^^^^^.^^^.-^^^ ^ _ 



32.2.2 S e tt i ng up R e adOn l y data 

5 This sets the p e rman e nt funct i ona l param e t e rs of the application whoro the QA D e v i c e has boon 
p l ac e d. Th e s e param e t e rs r e main unchang e d for th e l i f e t i mo of the QA D e vic e . In case of the i nk 
cartridg e such paramotors or o colour and v i scos i ty of tho ink. Th e s e valu e s aro wr i tten to 
m e mory v e ctors us i ng the Wrtf 0 M^+ funct i on, and i ts permiss i ons aro s e t to ReadOn l y by 
S e tPorm funct i on. Th e s e valu e s ar e typically s e t at the OEM. 
10 Tab le 328 shows tho command s e qu e nc e for s e tt i ng up R e adOn l y data. 

Tab l o 328. RoadOnly data sotup command soquonco 



Ne 


Function 


Command 




B.WritoMI* 


VoctNum = 2or3, WordSoioct " the selected words to be 






written, MVal ~ words corresponding to word select 
starting from LSW 


ResultFlag = Pass/Fail 1 ^ 


2 


B.SotPorm 


(VoctNum =same as Seq No 1 parameter [VectNum], 




PormVal -samo as Soq No 1 parameter [WordSelect]) 




If RosultFlag "Pass tfion CurrPorm = NowPorm Current 
permission value after applying PermVaL 
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in caso of tho SBR 4 320, tho values wr i tt e n to Mz^m e mory voctors is wr i t e- onc e only i .o thoy aro 
oot to RoadOn l y as soon as thoy aro wr i tten to onc e , thorofor e th e command soqu e noe consists 
oniy of S e q No 1 in Tab l o 329. 

32.2.3 Defining f iel ds i n m o 

5 The QACo must det e rm i n e th e field def i nitions for IVIO depend i ng on the app l icat i on of tlio OA 
D e v i ce. Th e s e f ie ld d e f i nitions will consist of tho following: 
Number of fields and tho size of each fio l d. 

Th e Typ e attribut e of each field. 

The access permission for each f i eld. 

10 Fo ll owing fi e lds have b e en presently defined in an ink OA Devic e : 



15 



20 



ink remain i ng fie l d. See Sect i on 26 for dotailo. 
Pr e authorisation fi e ld. See S e ction 31 .^1.3 for details- 
S e qu e nc e data fi e lds SEQ_1 and SEQ_2. S ee Section 26 for details. 



Fo l lowing fie l ds hav e b ee n pr e s e ntly d e fined i n a pr i nt e r QA Device: 

Op e rating param e t e r fi e ld.See Soction 28 for details. 

Sequence data fields SEQ_1 and SEQ__2. S ee S e ct i on 26 for detai l s. 

Aft e r the field def i nitions are d e termined, th e y are formatted as,por.Soction 8.1 .1 .A. Thoso 
formatted valuos ar e th e n writt e n to M i -us i ng a WritsMI* funct i on. 
Tab l e 320. Defining MO fi e lds command s e quence 



S e qu e nce 



Ne 



B.Wr i toM1-» 



Funct i on 



Command 



VoctNum - 1, WordSoloct = The scicctcd words corresponding 
to tho a ttribute ficld/ficfds of mo> MVa i ~ words corresponding to 



word select st a rting from LSW) 



Rosu l tFiag ~ Pass/Fail 



32.2.4 Writ i ng valuos to fie l ds 

The wr i t i ng of M fr -fi e lds for an Ink QA Device w ill typ i ca ll y occur when th e i nk cartridgo is f i ll e d w i th 
phys i cal i nk for tho first t i mo, and the e quival e nt l og i ca l i nk is writt e n to the Ink QA D e v i oo. R e f e r 

25 to S e ct i on 31 .7 for detai l s. 

Th e wr i ting of M o -fi e lds for a Pr i nt e r QA Dev i c e wi l l typ i ca l ly occur wh e n tho print e r parameters ar e 
writt e n for th e first t i m e . Tho proc e dure for wr i ting of a printer parameter for tho first timo or 
upgrading a pr i nt e r parameters is exact l y the same. Refer to Section 31.5 for d e ta i ls. 
Before any value /c writton to a fiold, the koy Glot containing tfie i<oy whicli fias autti e nticat e d 

30 ReadWrit e accoee to tho fiold must be lock e d. 

Both I nk QA Device and Printer QA Device has a s e qu e nce data fi el ds SEQ_1 and SEQ_2 as 
dosor i bod in S e ct i on 27. Those two fie l ds must be i nit i al i sed to OxFFFFFFFF, r e f e r to S e ct i on 27 
for d e tai l s. 
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Tho Ink OA D e v i co/Printor QA D e vic e and th e trustod QA D e vico writing to i t, sharo tho soquonco 
koy or a variant soquonco k e y b e tw ee n th e m I . e B.K^ - A.Kfl a ,or B.Ka ^ -- FormKeyVariant(A.Kfl a7 
B.ChipId), wh e r e B is th e I nk QA Dev i ce/Pr i ntor QA Dovic e and A is th e trust e d QA Devic e . Th e 
command s e qu e nc e us e d i s d e scr i bed i n Tab le 330. 
5 Tab l e 330. Command sequence for writing s e qu e nc e data fi e lds to the QA 

Dev i c e s. 





Function 


Paramotors 




Soquonco 
Ne 






4- 


B.Random 






2 


A.SignM 








SEQjt and SEQ 2 FicldVal " both fields set OxFFFFFFFF. 


Refer to Section 31.4.3,3 Chlpid - Chipid ofB, Rb=-Rb 




\f ResuitFiag ^ Pass then RAr-R^-S\G/^-SiGout Refer to 


O^^f 0"7 -1 -O 4 ~ ~ r 






3 


B.WriteFieldsAuth 


KeyRof- n1, FioidScioct = same as Scq 2[FieldSeleot], 




FieldVal - same as Seq 2[FioldValL RE- Ra, SiGE - SIGa 




ResultFlag = Pass /Fail 



32t3 Sett i ng up t h e upgrading QA Device 

10 Th e upgrading QA D e v i c e must bo oct up o i thor as an Ink Refil l QA Dovice or as a Parameter 
Upgrad e r QA Dev i c e - 
Each upgrad i ng QA Dovico must go through tho fo ll owing sot up: 

The upgrad i ng QA D e vic e must b e s e t to factory d e fau l ts. Refer to Section 32.1 . At tho end 

of th i s process tho upgrading QA D e vice I s e i ther an Ink R e fi ll QA D e vic e or a Param e ter 
15 Upgrader QA Device w i th production batch k e ys and MO fi e lds s e t to d e afult. 

^ Tho upgrad i ng QA D e v i c e must b e programm e d with th e appropr i ate k e ys and upgrad e 

data b e for e i t can start upgrad i ng oth e r QA D e v i c e s. Follow i ng must b e p e rform e d on e ach 
upgrade QA Dev i co: 

a. Tho upgrading QA Dov i co muot b e programmed with tho appropriato keys requ i red to upgrad e othor QA Dov i oes and 
20 to Upgrad e i ts e lf wh e n necossary. 

b. Tho m fields must bo correctly def i n e d and set i n M1 . 

For a Ink Refi ll QA D e v i ce th e i nk remain i ng f i e l d must be def i ned and s e t. For a pr i nter 
upgrade QA Dovic e th e upgrade value f i eld and tho count romaining fie l d must bo dofinod and 

25 A l l upgrad e QA Dev i ces must a l so have a soquonco datat fie l ds SEQ_1 and SEQ_2 wh i ch are 
used to upgrade tho upgrading QA Dov i c e i tse l f, 
o. Fina l ly. MO fields defined i n b must be wr i tt e n w i th appropr i ate valu e s so that th e upgrad e QA 
D e v i ce can perform upgrades. 
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An Ink Ref ill QA Dovioo wi ll typ i ca l ly storo tho log i cal ink oquival e nt to th e physica l ink i n a r e fi i i 
stat i on, h e nce th e I nk R e fill QA Dovioo's ink remaining f i eld must be written with th e e quiva le nt 
log i cal i nk amount. 

For a Paramotor Upgrador QA Dev i ce the upgrade value field and tho count remain i ng f iel d 
5 must bo writt e n. Th e upgrade va l ue d e pends en the typo of upgrade the Paramet e r Upgrader 
QA D e vice can perform i .e on e Paramotor Upgrador QA Dov i ce can upgrade to 10 ppm 
(pages p e r minute) wh i le another Param e t e r Upgrad e r QA Dov i co can upgrad e to 5ppm. Th e 
count romaining i s tho number of times tho Parameter Upgrader QA Dovico is p e rm i tt e d to 
wr i t e th e associated upgrade valu e to other QA D e vic e s. Th e count r e maining f i eld must b e 
10 writt e n to a posit i ve non zero va l ue for th e Param e t e r Upgrad e r QA Dovice to p e rform 
succ e ssful upgrades. 

R e f e r to S e ct i on 32.3.1 and S e ction 32.3.2 for d e tails. 
32.3.1 Sett i ng up tho Ink Refi ll QA Dev i ce 

32.3.1.1 S e tting up th e keys 

15 Th e I nk R e fill QA D e v i coQA Dovico could be transferring ink between peers or transferring i nk 
down th e h e irachy, accordingly th e peer to p e er I nk R e fil l QA D e vic e has two keys (fill/refiil k e y 
and soquonco key ) as described in Section 27, and a Ink R e fill QA D e vic e transferring down the 
h ei rachy has three koys {fill/r e fill key. transf e r k e y and eoquonc e k e y). Th e se keys must b e 
programmed into th e I nk R e fill QA Device us i ng tho sequence descr i bed in Sect i on 32.2.1. 

20 Th o Key Programm i ng QA Dev i c e must b e programm e d with the appropriate production batch 
keys . and th e fi l l/r e fil l , transfer key and sequence koy 

Th e GetProgramK e y funct i on i s called on the Key Programming QA Device w i th OldKeyRof 
(OldK e yRef r e f e r to S e ct i on 32.2.1 ) po i nt i ng to a product i on batch key, and th e N e wKeyRef 
(N e wK e yR e f rofer to Section 32.2.1 ) po i nt i ng to e i ther a fi l l/ref i ll k e y or a transf e r key or a 
25 s e qu e nc e key. The outputs from the GetProgramK e y (s i gnatur e and e ncrypted N e w K e y) is 
pass e d in to R e placoK e y function of the Ink Refil l QA Dev i ce. 

The G e tProgramKey funct i on must b o cal le d (on tho Key Programming QA Devic e ) for r e p l acing 
e ach of tho production batch koys i n the I nk Refi l l QA D e v i c e . Tho output of th e G e tProgramKey 
wi ll bo passed in to th e R e p l acoKey function cal l ed on tho I nk R e fi ll QA D e v i ce. The successful 
30 proc e ssing of the R e placoK e y funct i on will rep l ace an o l d key(product i on koys ) to a 
corr e spond i ng now koy ( ei th e r a fi l l/refi ll key or a transfer koy or a sequence koy). 

32.3. 1.2 Sotting up the MO fioid information in m 

Th e ink - r e maining f\o \ 6 and the soquonco data fie l ds SEQ_1 and SEQ_2 must be defined and set 
i n th e I nk R e fil l QA Device using th e s e qu e nce described i n Section 32.2.3. 
35 32.3. 1.3 Transferring ink amountc 

Fina l ly, the l og i cal ink amounts ar e transferred to the ink r e maining field u si ng th e s e quence 
d e scrib e d in Sect i on 31 .7. 

Tho QACo wi ll transfer to the ComCo Ink Refill QA Dev i ce at th e top of the he i rachy us i ng the 
command sequence in Table 331 . 
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For a successful transf e r from QACo to ComCo, ComCo a nd QACo must shar e a common 
key or a variant key bo i.e ComCo.Kn^ - QACo.Kfl a -or ComCo.K^- FormKeyVariant(Q/\Co.Kn 2 
,ComCo.Ch i pld)K« 4 -iG tho fiH/rofiU koy for tho ComCo refill QA Dcvicc. r 

Tab le 331 . Command s e quenco for writing ink remaining amounts to th e h i ghest 
5 QA Dovioo i n tho ho i roohy. 



Sequonco 
No 


Function 


Paramotors 


+ 


B. Random 






2 


A.SignM 






KcyRcf - n2, FiefdSclcct ^Select bit correponding to the 
ink-remaining field, FicldVal ~ Ink amount to bo 


transferred, Refer to Section 31.4.3.3 Chipid = Chipid of 






\f ResultFlag - Pass thon RA==-^-^^A.~:SIGout RefQr to 
Sectjon ,27.1.3.1 ^'^"^ 75"X/i\ -^^ ^ 


3 


B.WritoFioldcAuth 


KeyRof~ n1, FieldSeloct = same as Soq 2[FioldSeiect], 




FioldVal = same as Seq 2[FieidValL RE= Ra, SIGE " SIGa 




ResujjtFlag ~ Pass /Fail 



32.3. 1. ^ Sotting up sequonco data fields 

The I nk Refill QA D e v i ce has sequ e nc e data fi e lds SEQ_1 and SEQ_2 (as d e scr i b e d i n Section 
10 27) b e caus e i ts i nk r e ma i ning f i e l ds can bo rof ill od as we l l. Those two fi e lds must b e in i tialised to 
OxFFFFFFFF, r e f e r to S e ct i on 27 for d e ta i ls. 

Tho Ink Ref i ll QA Device and the trusted QA D e v i c e writing to i t, share the sequence key or a 
variant sequonco koy betw ee n th e m i.e B.K^ - A.K^ a -or B.K^- FormK e yVariant(A.Kfla, B.Ch i p I d), 
whore B i s tho Ink Ref i l l QA Device and A i s the trusted QA Device. Th e command s e qu e nce 
15 u se d is d e scribed i n Tabl e 331 . 

32.3.2 S e tting up th e Parameter Upgrador QA Dev i ce 

32.3.2.1 S e tting up tho koys 

The Parameter Upgrad e r QA Devic e cou l d b e transf e rr i ng upgrad e s b e tw ee n p e ers or transferring 
upgrades down th e h e lrachy, accord i ngly th e p ee r to poor Param e t e r Upgrad e r QA D e vic e has 
20 thr ee k e ys (write param e t e r k e y, fill/refill k o y and s e quonco k e y) as d e scr i b e d i n S e ct i on 28.6 and 
Section 26, and a Param e t e r Upgrad e r QA Devic e transferring down th e h ei rachy has four keys 
{writ e param e ter key, fill/rofili koy, transfer k e y and soquonco K e y ). Th e s e k e ys must b e 
programmed i nto the Parameter Upgrad e r QA Device using tho sequence descr i bed in Section 
32.2.1. 

25 Th e K e y Programm i ng QA Device must bo programm e d with tho appropr i at e production batch 
k e ys , and write paramoter koy, fill/refil l key, transf e r key and sequonco koy 
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Tho GotProgramK e y funct i on i s OQ l lod on th e Koy Programm i ng OA Dovic© with O l dKeyRef 
(OldKoyRof rofor to Sootion 32.2.1) po i nting to a product i on batch koy, and tho NowKeyR e f 
(NowKoyRof r e f e r to S e ction 32.2.1 ) point i ng to e i ther a write parameter key, or a fili/rofi l l key, or 
a transfer k e y, or a s e quenc e key. Tho outputs from tho GotProgramKey (oignaturo and oncryptod 
5 New Key) i s passed in to Rop l acoKoy funct i on of th e Parameter Upgrador QA D e v i ce. 

32.3.2.2 Sotting up tho MO fi e ld in ^ m- 

Tho upgrado valuo fi el d and th e count r e maining fie l d must bo defined and s e t i n th e upgrad e QA 
Dov i co using th e sequ e nc e doscribod In Soctlon 32.2.3. 

32.3.2.3 Writing upgrado valuo to tfi e upgrade fi e ld 

10 Th e upgrad e valu e i s wr i tt e n to upgrade fi e ld using the wr i to - paramotor koy. Tho upgrado QA 

D e v i c e and th e trust e d QA D e vice writing to it, share th e wr i to - paramotor k e y or a variant writo - 
paramotor koy botwoon thom i .o B.Kft 4 . - A.Kn^or B.Ki ^ -- FormK e yVar i ant(A.Kfta, B.Ch i pId), where 
B i s tho upgrado QA Dov i co and A is tho taistod QA Devic e . Th e command s e quence usod is 
describ e d i n Tabl e 331 . 

15 32. 3. 2. 4 Transferring count - r e maining amounts 

F i na ll y, the logica l count - remain i ng amounts are transferred to th e count - rema i ning fi e ld us i ng th e 
soquonoo dosorlbed in Sect i on 31.7. 

Th e QACo w il l also transfer to tho ComCo's upgrado QA Devic e us i ng th e command s e qu e nce in 

Table 331. 

20 For a succcssfut transfer from QACo to ComCo, ComCo and QACo must sttaro a common 
/roy or a var i ant k e y be i .e ComCo.Kft ^ . ~ QACo.Kfi a -or ComCo. } <^= Form K e yVariant( QjA Co. K^ ^ 
,ConiCo.Ch i pld). K ^t - i s tho fill/rofilf key for the ComCo upgrado QA Device. 
32.3.2.5 S e tting up s e qu e nc e data fields 

Tho Parameter Upgrador QA Dov i co has soquonoo data fields SEQ_1 and SEQ_2 (as d e scribed 
25 i n S e ct i on 27) becaus e i ts count r e main i ng fi el ds can be r e fi l led as wel l . Thos e two fi e lds must b e 
i n i tialis e d to OxFFFFFFFF, rofor to Section 27 for details. 

The Paramotor Upgrader QA Dovico and tho trusted QA Dov i co writ i ng to it, shar e th e sequence 
koy or a variant sequence koy botwoon thom i .o B.K^^ " A.Kf >g .or B.K^~ FormKoyVar i ant(A.Kfl g7 
B.Ch i p I d), wh e re B is tho Param e t e r Upgrad e r QA Dovico and A i s tho trusted QA Dovico. Tho 
30 command soquonce us e d is doscr i bod I n Tabl e 331. 
SizA Sett i ng up the key programmer 

Th e koy programming QA D e vic e is sot up to rep l ace keys i n oth e r QA Dev i c e s. 
Each koy programming QA Dovico must go through tho fol l ow i ng sot up: 

Th e k e y programming QA Devic e must b e i nstant i ated to factory d e fau l ts. Ref e r to S e ct i on 

35 32.1. At th e e nd of instantiation tho k e y programming QA D e vice has product i on batch k e ys 

and no k e y r e placomont data. 

^ Tho key programming QA Dovico must bo programm e d w i th th e appropr i at e k e ys and k e y 

r e plac e ment map boforo it can start to rep l ac e keys i n oth e r QA D e vic e s. 
32. 4 .1 Setting up the keys 
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Tho koy programming QA D e vico must bo programm e d with tho koy ropiacoment map k e y. The 
koy ropiacem e nt map koy i s d e soribod in details in Soction 24. 

The key programm i ng QA Dov l co must programmod with tho o l d and now k e ys for th e QA 
D e vices it i s going to p e rform k e y r e p l ac e m e nt on. 
5 Each of tho koys is s e t I n th e key programm i ng QA D e vic e using tho sequonco d e scr i b e d in 
S e ction 32.2.1. 

32. 4 .2 S e tt i ng up koy roplac e ment map f iel d Information 

F i rst tho key ropiacoment map fie l d information is work e d out as p e r Soction 2^.1 . This fi e ld 
i nformat i on is s e t in M1 a s p o r tho sequ e nc e doscr i bod Soction 32.2.3. 

10 32.^.3 Sett i ng up koy rop i ac e mont map 

F i nal l y, tho k e y rcp l acomont map fi el d must bo wr i tt e n with the valid mapping using tho koy 
repiacemont map koy. Tho koy programm i ng QA Dev i co and th e trusted QA Dov l co wr i ting to it 
must shar e tho koy roplac e mer)t map koy or a variant of tho koy ropiacom e nt map key b e tween 
th e m. 

1 5 For a succossfui write of tho koy ropiaGcmont map B.Kf ^-^^^-Ank^e^^^TK ^'- FormKey - 

Variant(A.Kfet, B.Chip I d), wher e B is the koy r e piac e m e nt QA Dovioe and A is tho trust e d QA 
Dovlco. Tho command s e qu e nc e used is d e scr i b e d i n Table 331 . 
Appendix A: Flold Typos 

Tab l e 332 lists th e fi e ld types that ar e specifioally requ i red by tho QA Chip Logical Interface and 
20 therefore apply across al l app l ications. Additiona l field typ e s ar e app li cation spoc i fic, and are 
defined in th e r e l e vant app l ication documentation. 

Tab le 332. Predofinod Fie l d Typos 



Valuo 


^Fype 


Description 


9x0000 


9 






Non initialised (default valuo after final program load) 


0x0001 


TYPE PREAUTH 


Defines a proauth fiold in an Ink QA Dovico 


9x0002 


TYPE COUNT REMAININ 


Defines a countRomalning field in on Parameter 




6 


Upgrador QA Device 


9x0003 


TYPE SEQ 1 








Defines a sequonco data fiold SEQ_1 in an Ink QA 
Device 

or in a Printer QA Device or in an upgrader QA Device 




0x0001 


TYPE SEQ 2 








Defines a sequence data fields SEQ_2 in an Ink QA 
Device 

or in a Printer QA Dovico or in an upgrador QA Devico 




9xOOO§ 


TYPE KEY MAP 








Defines a key replacement map in a Key Programmer 
QA Dovico 


0x0006 


reserved 


reserved for future use 


and" 
Etbove 
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Appendix B: Koy and f i o l d dofin i t i on for difforont QA Dov i coo 

Bri Parameter UPCRADca QA Dev i ce 

B.1.1 Poor to poor QA Dovico 

Tab l o 333. K e y d e fin i t i ons for a p ee r to poor Paromotor Upgrador QA Dovioo 

5 



I4ey 
Name 


Purpose 


Fili/rofill Koy 


Tills koy has is usod for upgrading count-remaining values whon the 
upgrade QA Device is upgraded by another upgrade QA Device and is also 


used to decrement the count remaining when upgrading othor QA Devices. 




Sequence Key 


This key is used to initialise sequence data fields SEQ_1 and SEQ_2 to 
OxFFFFFFF. 


Writo Parameter 


This key is used to write the upgrade value to the Parameter Upgrader QA 




Dovioo. 



Tab le 33 4 . Fi e ld defin i t i ons for a p ee r to p e er Param e t e r Upgrad e r QA D e vic e 



10 



Purpo s e 



Field Attrinut e s 



Type 



K e yNum 



RW 



RW 



E nd P o i y 



(Size) 



Count 



Th e fi e ld stor e s 



TYPE COUNT REMiMNI 



Rcmainin 



th e numb e r of 



KP e rms[K D e p e nyi 
NT-=4 on th e 



tim es th e 



Rest are 0 maxim itfft 



Param e t e r 



numbo 



Upgrad e r QA 



ef 



D e vic e is 



p e rmitt ed-te 



upgrad e a printer 
QA D e vic e . 



upgradps 
that 
can bo 



stored. 



SN^v 
key 



Upgrade 
Value 



This stor e s th e 



value that is 



Must define the typ e of th e 
upgrad e value 



0 



copied fi-om the i. e TYPE_PRINT_SPEED^ 



KP e rms[K 
R e st are 0 



S e t as 



upgrad 



5er 



va l ue. 



Paramotor 



as well 



Upgrad e r QA 
D e vic e to th e 



field being 
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upgrad e d on th e 



print e r QA 
Devic e during th e 



upgrade 



SN^ 's e qu e nce key 



This fi e ld holds 



rYPE_SEQ_l 



the data for 



s e qu e nc e data 
field SEQ_1 



KPormo[K 
KPomis[fill 



Typicaify 



when th e 



R e st ar e 0 



Param e t ef 



as w e ll. 



Upgrader QA 
D e vic e is b e ing 



upgrad e d by 
anoth e r 



Param e t e r 



Upgrad e r R e fill 

QA D e vic e . 



SEQ_2 



This fi e ld holds 



TYPE_SEQ_2 



di e data for 



s e qu e nc e data 
fioldsSEQ_2 



KPenns[K 
KP e rms[fill 



Typ i cal iy 



wh e n th e 



/rp- fi ll ^ — 1 
' 1 v^urx J J. 

R es t ar e 0 



Param e t e r 



as well. 



Upgmder QA 
D e vic e is b e ing 



upgraded by 



Paramet er 



Upgrader R e fill 



QA D e vic e . 



a. Auth e nticat e d R e adWr i te porm i ssion 

b. Non - auth e nticated ReadWr i to pormiosion 
o. KoyPormo 

d. Th i s i s a sample typ e on l y 
o. KoyNum 

f. Key Slot Numbor 

g. F i l l /R e f lll k e y has authont i catod dooromont on l y p e rm i ss i on to the soquonoo data fi e lds 



10 BA^ 



H e irarchical Transfer QA Dev i c e 
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K e y dofinitionc 



Tab l o 335. K e y dofinitions for a Paromotor Upgrad e r OA Dov i co (transforring 
down th e heirachy) 







Transfer Key 


This key is used to docromont the count remaining whon upgrading othor 
QA Devices. 


Fill/rofill Koy 


This koy has is used for upgrading count romalning values whon tho 


Parameter Upgrador QA Dovice is upgraded by another Parameter 

Upgrader QA Dovico Refill QA Devico. 




Sequence Key 


This koy is used to Initialiso sequence data fiolds SEQ_1 and SEQ_2 to 
OxFFFFFFF. 


Write Parameter 
Key 


This key is usod to write tho upgrade vaiuo to tho Paramotor Upgrader QA 
Device. 



Fi e fd d e finitions 



Tab le 336. F ie ld d e f i nit i ons for Param e t e r Upgrad e r QA D e vico transf e rr i ng down 
tho hiorachy 



Puipos e 



Fi e ld Attrinut es 



Type 



KeyNum 



RW 



RW 



KPenns^ 



EndPo 



s(Siz e 



CoUTlt 

Remaining 



Th e fi e ld storcQ tho 



TYPE COUNT REMAINI 



\J1. 1 XXIU IVl-U-I 



9 



Qumbor of timos 



KPenns[KN^ ^^ei 
d ds on 



the Paramotor 



Upgrad e r QA 
D e vice is pormitto d 



fer K e y] ~ 1 ma?» 



R e st ar e 0 Emm 



to upgrad e a printer 
QA Dovico. 



upgra 



Upgrado 



Th i s stores th o 



Must defin e th e typ e of SN*"wHte- 1- 0 K e yPerms[K Set 
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Valu e 



copiod from tho 



Parameter 



Upgrad e r QA 
D e v i ce to th e 
fi el d being 



va l u e that i s 



(he 

upgrad e valu e 



upgraded on tho 
printer QA 



D e vic e dur i ng tho 
upgrad e 



be 



TYPE PRINT SPEED^ 



param e ter 



RoQt aro 0 



as 



upgfi 
Efe 

vakie 



SEQ 1 



This f i eld ho l ds 



TYPE SEQ 1 



th e data for 



SN soquonco 



KP e rms[KNT Typie 



ciii y 



soquono e data 
fie l ds SEQ 1 



wh e n th e 



Param e t e r 



Upgrader QA 
D e vice is bo i ng 



upgraded by 



anoth e r 



Param e t e r 



Upgrad e r Refi l l 



QA Dovioo. 



KPorms[fii l /ro 32^r 



Rost aro 0 as 



SEQ 2 



This fie l d holds 



TYPE SEQ 2 



SN ' sequ e nce 



0 



KPorms[KNT Typie 



th e data for 



aUy 



s e quenc e data 
fields SEQ 2 



KPorms[fil l /ro 32-ba: 



when tho 



Rost ar e 0 as 



Param e ter 



Upgrad e r QA 



Device is b oi ng 
upgraded by 



anoth e r 



Parameter 



Upgrad e r Refi ll 



QA Dov i oo. 



a. Auth e nticated R e adWrito perm i ssion 

b. Non - auth e nticated Road Wr i te pormiss i on 

c. KoyPorms 
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d. Th i s is a samp l e typo on l y 

e . K e yNum 

f. Key S l ot Numb e r 

g. Fill/R e fi ll k e y has auth e ntloatod dooromont only perm i ssion to tho s e quenco data fi el ds 
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B:3 Ink Ref i ll CiA Device 

Brfirl Poor to poor QA Dovioo 

K e y dofinltionB 

Tab l e 337. Key dofinit i ons for a poor to po e r Ink R e fil l QA Dovico 



Name 


Purpose 


Fill/roflll Koy 


This koy has is usod for filling/refilling ink-remaining values when tho Ink 
Refill QA Dovico is upgraded by another Ink Rofiil QA Dovico and is also 


used to decremont from the ink remaining when transforring ink to other 




QA Dovicos (typically Ink QA Device). 


Soquonco Koy 


This key is usod to initialise sequence data fields SEQ_1 and SEQ_2 to 
OxFFFFFFF. 



Field dofinitione 



Tablo 338. F ie ld d e finitions for a p ee r to poor Ink Refil l QA Dovico 



Purpose 



Type 



Fi e ld AttH BHtes 



Key 



SN^ fill/refilf 



RW 



RW 



K e yPerms ^ 



EndPos(Size) 



Rcmainin 



Th e fi e ld stores the 



Must defin e th e 



amount of 



typ e of In k 



logical in leH 
&e 

inlc r e fill QA D e vice. 



erg 

TYPE_HIGHQUA 



K e yP e rms[K 
R e st ore 0 



Depends on 



maximum 



amount 



LITY BLACK IN 



of inlcdiat 



can b e stor e d 



and 

th e storag e 



r e solution 



i. e m pico 
litres or 



m micro 



This field holds tho data[rYPE_SEQ_l 
sequence data field 



SN^sequesee 



9 



KPorms[KN* Typically 32 
3 Q bit* 
KPennfl[fill/r 
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when the Tnlc Refill OA 














9eviee 
by another 

Fnlc Refill OA Device 




SEQ 2 


This field holds the data 








9 








sequence data field 


TYPE_SEQ_2 


KPormfl[K>r 


Typioally 32 
bitr 


SEQ_2 

when the Inlc Refill Q A 


KPomiG[fill/r 

p.f:iin — 1 

Cl-lll J 1 

Rest aro 0 as 


Device 

is being fiUed/rofiUod 
by another 

Inlc Refill QA Devioo. 


\vell. 



a. Authont i catod RoadWr i to pormission 

b. Non auth e nt i catod R e adWrite pormlss i on 
0. D e cr e m e nt - Only For Koys 

5 d- This is a sampio typo on l y 

e . K e yNum 

f. K e y Slot Numbor 

g. F il i/Rofill k e y has authenticated d e cremont on l y permission to tho s e qu e nce data fie l ds 
B.2.2 Heirarchical Transfer QA Dov i co 

10 K e y d e finitions 

Table 330. Koy d e fin i t i ons for a i nk ref i l l QA D e vioo (transf e rring down tho 
h e irachy) 



Nafwe 


Purpose 


Transfer Koy 






This koy is used to decrement from the ink remaining when transferring ink 
to othor QA Devices . 


Ftll/rofill Koy 


This koy has Is used for filling/rofiiling ink remaining values when the Ink 




Refill QA Device is upgraded by another Ink Refill QA Dovico. 




Soquonco Key 






This koy is used to initialise sequence data fields SEQ_1 and SEQ_2 to 
OxFFFFFFF. 



15 Fioid d e finitions 

Table 340. F i eld d e fin i tions for a I nk R e f il l QA Dev i oo (transf e rr i ng down tho 
h ei rachy) 
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Purpos e 



Fi e ld Attrinut e g 



K e yNum 



A.* 



KcyPorms ^ 



EndPos( 



rvCTTTwTTTm 



Th e fi e ld stores tho 



O yv^ ✓■v-l ■■■y^ 4- 

of logical ink 



Must d e fin e th e t:> ^ 



\Jx 1 1111/ IWAJlll' 



9 



Depends 



KP e rms[TrQnsfor 



r e maining in th e 
Inlc RofiU QA 



rYPE_HIGHQUALI 
TY BLACK INK^ 



R e st are 0 



Dovico. 



SN^seq uenco 



moxunu 



m 



amount 



of ink 



that can 



be 



storage 
r e solutic 



litr e s or 



lU llllWl \-7 



litres? 



This fi e ld holds tho 



TYPE_SEQ_1 



data for 



s e quence data fi e ld 



KPormo[fill/rofill^ 



R e st are 0. 



Typicall 
y32 bit. 



when th e Ink R e fill 



QA Device 
is b e ing 



fillod/rofiU e d by 
anoth e r 



Inlc Refill QA 



D e vice. 



s5? 

key 



This fi e ld holds tho 



TYPE_SEQ_2 



9 



data for 



KPonns[filVrofill^ y 32 bit 



e qu e no e data field 



SEQ_2 

wh e n th e Inlc Refill 



R e st ar e 0. 



QA Device 
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is boing 

fiUcdyrcfillodby 

InlcRefiU QA 
D e vic e . 



a. Auth e nt i cated R e adWr i t e p e rmission 

b. Non auth e nt i cated RoadWrit e p e mri i ssion 

c. KoyPerms 

5 d. This is a oamp i o typo only 

e . KeyNum 

f. K e y S l ot Numbor 

g. F i l l /R e fi ll k e y has auth e nticated decr e m e nt only perm i ss i on to the soquonco data f iel ds 
B73 Key programming QA Device 

10 K e y d e f i nitions 

Table 3 4 1 . Key def i n i tions for a K e y Programming QA D e v i c e 



Nam e 

Koy r e plac e ment map 



Purpos e 



Th i s k e y is us e d to wr i t e th e k e y rep l acomont map. 



O l d Koys 



Th e s e ar e th e old k e ys of tho QA Dovico whoso keys w i l l bo roplacod by 
the Koy Programming QA Dovice. 



Now Koys 



Those aro tho now koys of the QA Dev i c e whose old koys w ill bo roplacod 
by th e K e y Programm i ng QA D e v i c e . 



B^diS F i old defin i tions 
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Tablo 3d2. Fiold dof i n i tions for a koy rQp l ac e mont QA Dovico 



Nam e 



Purpos e 



Ho l d Attr i nutOG 



KoyNum 



RW 



RW 



KPerms^ 



& 

(S i z e ) 



Key 

rep l aoomont 



This defines tho 



TYPE KEY M 



mapp i ng 
botwoon the old 



AP 



Key Roplacomont 
Map koy 



KPormQ[KN^ 



2 

words 



Root are 0 



k e y and tho now 
k e y for th e QA 



(©4 



Dovico whos e old 



k e y w il l bo 



r e p l ac e d by th e 
now koy. 



10 



a. Auth e nttcatod R e adWrite porm i ssion 

b. Non auth e nticat e d ReadWr i to pormission 

c. K e yP e rms 

d. KoyNum 

8r4 I nk QA Dev i ce 

B. 4 .1 Key d e fin i tions 

Tabl e 3^3. Koy def i nitions for a I nk QA Dov i co 



Key 
Name 


Purpose 


Fill/rofill Koy 


This key is used for fiil/refilling ink remaining amount in the ink QA Dovico. 






Ink usage Koy 


This key is verifying the data read from tho ink QA Dovico and for writing 
preauth data. 


Sequence Koy 


This koy is used to initialiso soquonoo data fields SEQ_1 and SEQ_2 to 
OxFFFFFFF. 
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B. 4 .2 Fio l d defin i t i ons 

Tab le 34 4 . F iel d dofinitions for a I nk QA Dovico 



Fi e ld Attrinut e s 



RW 



RW 



EndPos 



( S ize) 



kik Th e amovint of logical 

Remaining ink r e maining in the 



Must d e fin e th e ty pe 



ef^fik 



filVrofiU 



inlc QA D e vic e . 



he 



key 



R e st ore 0 



Mor e than o n e ink - 



TYPE_HQ_BLACK 



r e maining field may bo 



pr e s e nt dep e nding on 
th e numb e r of physical 



inks stored in the m k 



cortridg er 



SN ^inlc 
usag e k e y 



on the 



maxmiuH ^ 



amount 



of ink tha t 



can be 



3 MAJM. \J\Jk 



th e storag e 



resolution 



i. e m pico 
in micro 



Preauth 



This fi e ld d e fin e s th e 



TYPE PREAUTH 



pr e auth value. 



0 

R e st ar e 0 



on preauth 
amount. 



Typically 
32 bits. 



may b e 61 
bits to 
acoomodat 



larger 
pr e auth 



amounts. - 



This fi e ld holds the 



TYPE_SEQ_1 



data for 



s e qu e nc e data field 



s e quence 
key 



9 



SECLl 

wh e n th e Ink QA 



KP e rms[fill/r e fil 
1«]-M- 
R e st or e 0. 



D e vic e 
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is b e ing fill e d/refill e d 
byalnlcR e fiUQA 



Devic e . 



SEQ^ 



This field holds th e 



data for 



soquonoe data field 
SEQ_2 



wh e n th e Ink Q A 



D e vic e 



is b e ing fill e d^refiUod 
by another 



Inlc R e fill QA Device. 



rYPE_SEQ_2 



s e qu e nce 



9 



KPonnfl[K>n — 
9 



Typically 



KP e rms[fill/refil 
R e st ar e 0. 



a. Authenticatod R e adWrito p e rmission 

b. Non authonticat e d ReadWrito porm i ss i on 

c. K e yP e rms 

d. Th i s is a samp i o typo on l y 

e . K e yNum 

f. K e y Slot Number 

g. F III /R e flil key has autii e nticat e d deorom e nt only pormission to the sequ e nc e data fie l ds 



10 



Printer QA Device 



B.5.1 K e y d e finit i on 



Tabl e 3 4 5. Key d e f i n i t i ons for a Printer QA Dovico 



Key 
NafRe 


Purpose 


Upgrade koy 


This koy is used for writing / upgrading the functional parameter. 


(fill/rofill koy) 




Ink usage Koy 


This koy is verifying the data read from the Ink QA Device. 






Sequence Key 


This koy is usod to initialise ooquenco data fields SEQ_1 and SEQ_2 to 
OxFFFFFFF. 


PECID/SOPECID 


This koy is usod to verify tho data road from the printer QA Dovioo. This 




key is unique to each printer. Also usod to translate data from the ink QA 


Devico to the trusted printer system QA Device. 





BS^ F iel d d e f i nit i on 

Tablo 316. Field defin i tions for a Printer QA Dov i co 



PEA23US 



918 



I. IVIU 



Purpos e 



Field Attrinutes 



EndPo 



( Size) 



Functional Th e fi e ld stores on 



parameter 



upgradoabl e functional 



Must dofino the typo of 
print sp ee d 



s5? 

fiiyrofiU 



9 



KPennfl[KN^S e t as 



parom e tor t 
Mor e than one 



he 



R e st or e 0 



Funct i o 



TYPE PRINT SPEED^ 



functional paramctor 
can b e stor e d in the 



param e 
tefr 



print e r QA D e vice. 



This fi e ld holds th e 



TYPE_SEQ_1 



9 



KPerms[KN^ Typ i ca l ! 



data for 



s e qu e nc e data field 



se qu e nce 



KPerms[fill/r bit 



SEQ_1 

when th e Printer QA 



R e st are 0. 



Deviee 



is b e ing fill e d/r e fill e d 
by a Parameter 



Upgradcr QA D e vice. 



Thi s field holds the 



TYPE_SEQ_2 



s5F 



9 



data for 



s e quenc e data field 



e quence 
key 



KP e rmG[K>r Typ i ca l l 



SEQ_^2 



wh e n the Printer Q A 
D e vice 



KP e rms[fill/r |bfe 
e fi ll ^ — I 
R e st ar e 0. 



is being fill e d/refilled 
by another 



Parameter Upgrad e r 
QA Device. 



a. Authonticat e d ReadWrit e permission 

b. Non authonticatQd RoadWr i te permission 

c. K e yP e rms » 

d. Th i s i s a samp le typo only 

e. KeyNum 

f. K e y S l ot Numbor 

g. F i l l /Refi l l k e y has authont i oatod docremont on l y perm i ss i on to th e soquonoe data flo l ds 
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BS Trusted pr i nter sy s tem QA Dev i ce 

BStA Koy d e f i n i t i on 



TQb l o 3^7. 



Ndfne 



Purpose 



PEC I D/SQPEC I D 
Key 



This key is us e d to v e rify th e data road from 
tho printer QA Devic e . 



This koy is unique to e ach pr i nter. 

This key i s a l so us e d for ver i fying translated 

data from th e ink QA Dev i ce. 



I ntroduction 

A Background 

10 

This document doscribos o The QA Chip that-can be used to hold conta i n s a uthentication keys 
together with circuitry specially designed to prevent copying. The chip is manufactured using a 
standard Flash memory manufacturing process, and is low cost enough to be included in 
consumables such as ink and toner cartridges. The implementation is approximately 1mm^ in a 
1 5 0.25 micron flash process, and has an expected die manufacturing cost of approximately 10 cents 
in 2003. 

Once programmed, the QA Chips as described here are compliant with the NSA export guidelines 
since they do not constitute a strong encryption device. They can therefore be practically 
manufactured in the USA (and exported) or anywhere else in the world. 
20 Note that although the QA Chip is designed for use in authentication systems, it is microcoded, 
and can therefore be programmed for a variety of applications. 
2 Nomenclature 

The following symbolic nomenclature is used throughout this document: 
Tab l e 3 4 8 Table 8 . Summary of symbolic nomenclature 

25 



Symbol 


Description 


F[X] 


Function F, taking a single parameterX 


F[X,Y] 


Function F, tailing two parameters, X and Y 


X| Y 


X concatenated witli Y 


XaY 


Bitwise X ANDY 


XvY 


Bitwise X OR Y (Inclusive-OR) 


X® Y 


Bitwise X XOR Y (exclusive-OR) 
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— lA 


Rit\A/ico M(^T y ^r'omr4lomont\ 


A <— T 




A <— |T, 


Homsiin of aQQinnm^nt inmitQ tn X ic Y sinH 7 
1 1 vj wi 1 laii 1 ^1 ciooi^i II 1 ici 11 II ipuio i\j y\ id T di lu ^ 


Y — V 
A — T 


A IS 6C]Uai lO T 


Y _t V 
A ^ Y 


A IS noi equal lo y 


Ux 


Decrement X by 1 (floor 0) 


IrX 


Increment X by 1 (modulo register length) 


Erase X 


Erase Flash memory register X 


SetBits[X, Y] 


Set the bits of the Flash memory register X based on Y 


Z <- ShiftRight[X, 
Y] 


Shift register X right one bit position, taking Input bit 
from Y and placing the output bit In Z 



2 Pseudocode 

3r1 Asynchronous 

Tho following psoudooodo: 
5 var = oxprcooion 

m e ans tho var signa l or output Is e qual to tho evaluation of the e xpr e ss i on. 

SynohronouG 

Th e fol l ow i ng ps e udocodo: 
var < — cxprcsaion 

10 means th e var r e g i st e r i s assigned th e result of evaluating th e e xpr e ss i on during 

th i s oyc l o. 

^ Expr e ss i on 

Expr e ss i ons ar e d e f i n e d us i ng th e nomenc l ature in Tab le 3 4 8 abov e . Th e r e for e : 
var = — (a = b) 

15 is i ntorpretod as tho var s i gnal i s 1 i f a is e qual to b, and 0 oth e rw i se. 

A Diagrams 

Black l i nos aro used to donoto data, while rod l i nes are used to denote 1 bit contro l s i gna l l i nos. 
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Logical Interface 
5 I ntroduction 

The OA Chip has a physical and a logical external interface. The physical interface defines how 
the OA Chip can be connected to a physical System, while the logical interface determines how 
5 that System can communicate with the QA Chip. This section deals with the logical interface. 
^ Operating Modes 

The QA Chip has four operating modes - Idie Mode, Program Mode, Trim Mode and Active Mode. 
Active Mode is entered on power-on Reset when the fuse has been blown, and whenever a 
specific authentication command arrives from the System. Program code is only executed 
10 in Active Mode. When the reset program code has finished, or the results of the command 

have been returned to the System, the chip enters idie Mode to wait for the next Instruction. 

• idle Mode is used to allow the chip to wait for the next instruction from the System. 
Trim Mode is used to determine the clock speed of the chip and to trim the frequency 
during the initial programming stage of the chip (when Flash memory is garbage). The clock 

1 5 frequency must be trimmed via Trim Mode before Program Mode is used to store the 

program code. 

Program Mode is used to load up the operating program code, and is required because the 
operating program code is stored in Flash memory instead of ROM (for security reasons). 
Apart from while the QA Chip is executing Reset program code, it is always possible to interrupt 
20 the QA Chip and change from one mode to another. 

&tA-A ^Active Mode 

Active Mode is entered in any of the following three situations: 

• power-on Reset when the fuse has been blown 

• receiving a command consisting of a global id write byte 
25 (0x00) followed by the ActiveMode command byte (0x06) 

• receiving a command consisting of a local id byte write 
followed by some number of bytes representing opcode and 
data. 

In all cases, Active Mode causes execution of program code previously stored in the flash 

30 memory via Program Mode. 

If Active Mode is entered by power-on Reset or the global id mechanism, the QA Chip executes 
specific reset startup code, typically setting up the local id and other lO specific data. The reset 
startup code cannot be interrupted except by a power-down condition. The power-on reset startup 
mechanism cannot be used before the fuse has been blown since the QA Chip cannot tell 

35 whether the flash memory is valid or not. In this case the globalid mechanism must be used 
instead. 

If Active Mode is entered by the local id mechanism, the QA Chip executes specific code 
depending on the following bytes, which function as opcode plus data. The interpretation of the 
following bytes depends on whatever software happens to be stored in the QA Chip. 
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-Idle Mode 



The QA Chip starts up In idle Mode when the fuse has not yet been blown, and returns to Idle 
Mode after the completion of another mode. When the QA Chip is in Idle Mode, it waits for a 
command from the master by watching the low speed serial line for an id that matches either the 
global id (0x00), or the chip's local id. 

If the primary id matches the global id (0x00, common to all 
QA Chips) , and the following byte from the master is the Trim 
Mode id byte, and the fuse has not yet been blown, the QA 
Chip enters Trim Mode and starts counting the number of internal clock cycles until 
the next byte is received. Trim Mode cannot be entered if the fuse has been blown. 

• If the primary id matches the global id (0x00, common to all 
QA Chips) , and the following byte from the master is the 
Program Mode id byte, and the fuse has not yet been blown, 
the QA Chip enters Program Mode. Program Mode cannot be entered if the fuse 
has been blown. 

If the primary id matches the global id (0x00, common to all 
QA Chips) , and the following byte from the master is the 
Active Mode id bytes, the QA Chip enters >Acf/Ve Mode and executes 
startup code, allowing the chip to set itself into a state to subsequently receive 
authentication commands (includes setting a local id and a trim value). 

• If the primary id matches the chip's local id, the QA Chip 
enters Active Mode, allowing the subsequent command to be executed. 

The valid 8-bit serial mode values sent after a global id are as shown in Tab l o 
34 9Table 9 : 

Toblo 3 4 9T able 9 . Command byte values to place chip in specific mode 



Value 


Interpretation 


10101011 
(OxAB) 


Trim Mode (only functions when the fuse has not been blown) 


10001101 
(OxAD) 


Program Mode (only functions when the fuse has not been blown) 


00000110 
(0x06) 


Active Mode (resets the chip & loads the localld) 



-Trim Mode 



Trim Mode is enabled by sending a global id byte (0x00) followed by the Trim Mode command 
byte (OxAB). Trim Mode can only be entered while the fuse has not yet been blown. 
The purpose of Trim Mode is to set the trim value (an internal register setting) of the internal ring 
oscillator so that Flash erasures and writes are of the correct duration. This is necessary due to 
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the 2:1 variation of the clock speed due to process variations. If writes an erasures are too long, 
the Flash memory will wear out faster than desired, and In some cases can even be damaged. 
Note that the 2:1 variation due to temperature still remains, so the effective operating speed of the 
chip is 7-14 MHz around a nominal lOMHz. 
5 Trim Mode works by measuring the number of system clock cycles that occur inside the chip from 
the receipt of the Trim Mode command byte until the receipt of a data byte. When the data byte Is 
received, the data byte Is copied to the trim register and the current value of the count is 
transmitted to the outside world. 

Once the count has been transmitted, the QA Chip returns to Idle Mode. 
10 At reset, the internal trim register setting is set to a known value r. The external user can now 
perform the following operations: 

send the global id+write followed by the Trim Mode command 

byte 

• send the 8 -bit value \^ over a specified time f 
15 • send a stop bit to signify no more data 

send the global id+read followed by the Trim Mode, command 
byte 

receive the count c 

send a stop bit to signify no more data 
20 At the end of this procedure, the trim register will be v, and the external user will know the 
relationship between external time t and internal time c. Therefore a new value for vcan be 
calculated. 

The Trim Mode procedure can be repeated a number of times, varying both t and v in known 
ways, measuring the resultant c. At the end of the process, the final value for v is established (and 
25 stored in the trim register for subsequent use in Program Mode). This value v must also be written 
to the flash for later use (every time the chip is placed in Active Mode for the first time after power- 
up). 

For mor e informat i on about the internal work i ngs of Trim Mode and the accuracy of tr i m in the QA 
Chip, soo Sect i on 1 1 .2 on pago 1 . 

30 §rM Program Mode 

Program Mode is enabled by sending a global Id byte (0x00) followed by the Program Mode 
command byte. 

If the QA Chip knows already that the fuse has been blown, it simply does not enter Program 
Mode. If the QA Chip does not know the state of the fuse, it determines whether or not the internal 
35 fuse has been blown by reading 32-bit word 0 of the information block of flash memory. If the fuse 
has been blown the remainder of data from the Program Mode command is ignored, and the QA 
Chip returns to Idle Mode. 

If the fuse is still intact, the chip enters Program Mode and erases the entire contents of Flash 
memory. The QA Chip then validates the erasure. If the erasure was successful, the QA Chip 
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receives up to 4096 bytes of data corresponding to the new program code and variable data. The 
bytes are transferred In order byteo to byte4095. 

Once all bytes of data have been loaded into Flash, the OA Chip returns to idle Mode. 
Note that Trim Mode functionality must be performed before a chip enters Program Mode for the 
5 first time. Otherwise the erasure and write durations could be incorrect. 

Once the desired number of bytes have been downloaded in Program Mode, the LSS Master 
must wait for 80ns (the time taken to write two bytes to flash at nybble rates) before sending the 
new transaction (e.g. Active Mode). Otherwise the last nybbles may not be written to flash. 
5.1.5 ^After Manufacture 

1 0 Directly after manufacture the flash memory will be invalid and the fuse will not have been blown. 
Therefore power-on-reset will not cause Active Mode. Trim Mode must therefore be entered first, 
and only after a suitable trim value is found, should Program Mode be entered to store a program. 
Active Mode can be entered if the program is known to be valid. 
Logical View of CPU 

15 € I ntroduction 

The OA Chip is a 32-bit microprocessor with on-board RAM for scratch storage, on-board flash for 
program storage, a serial interface, and specific security enhancements. 

The high lievel commands that a user of an OA Chip sees are all implemented as small programs 
written in the CPU instruction set. 
20 The following sections describe the memory model, the various registers, and the instruction set 
of the CPU. 

7 Memory Model 

The OA Chip has its own internal memory, broken into the following conceptual regions: 

RAM variables (3Kbits = 96 entries at 32-bits wide), used for scratch storage (e.g. HMAC- 

25 SHA1 processing). 

Flash memory (SKbytes main block + 128 bytes info block) used to hold the non-volatile 
authentication variables (including program keys etc), and program code. Only 4 KBytes + 
64 bytes Is visible to the program addressing space due to shadowing. Shadowing is where 
half of each byte is used to validate and verify the other half, thus protecting against certain 

30 forms of physical and logical attacks. As a result, two bytes are read to obtain a single byte 

of data (this happens transparently). 
7.1 RAM 

The RAM region consists of 96 x 32-bit words required for the general functioning of the OA Chip, 
but only during the operation of the chip. RAM is volatile memory: once power is removed, the 
35 values are lost. Note that in actual fact memory retains its value for some period of time after 
power-down, but cannot be considered to be available upon power-up. This has issues for 
security that are addressed in other sections of this document. 

RAM Is typically used for temporary storage of variables during chip operation. Short programs 
can also be stored and executed from the RAM. 
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RAM is addressed from 0 to 5F. Since RAM is in an unknown state upon a RESET (RstL), 
program code should not assume the contents to be 0. Program code can, however, set the RAM 
to be a particular known state during execution of the reset command (guaranteed to be received 
before any other commands). 

5 7t2 Flash variables 

The flash memory region contains the non-volatile information in the OA Chip. Flash memory 
retains its value after a RESET or if power Is removed, and can be expected to be unchanged 
when the power is next turned on. 

Byte 0 of main memory is the first byte of the program run for the command dispatcher. Note that 
1 0 the command dispatcher is always run with shadows enabled. 

Bytes 0-7 of the information block flash memory is reserved as follows: 

byte 0-3 = fuse. A value of 0x5555AAAA indicates that the 
fuse has been blown (think of a physical fuse whose wire is 
no longer intact) . 
15 • bytes 4-7 = random number used to XOR all data for RAM and 
flash memory accesses 
After power-on reset (when the fuse is blown) or upon receipt of a globalld Active command, the 
32-bit data from bytes 4-7 in the information block of Flash memory Is loaded into an internal 
ChipMask register. In Active Mode (the chip is executing program code), all data read from the flash 
20 and RAM is XORed with the ChipMask register, and alt data written to the flash and RAM Is XORed 
with the ChipMask register before being written out. This XORing happens completely transparently 
to the program code. Main flash memory byte 0 onward is the start of program code. Note that 
byte 0 onward needs to be valid after being XORed with the appropriate bytes of ChipMask. 
Even though CPU access is in 8-bit and 32-bit quantities, the data is actually stored in flash a 
25 nybble-at-a-time. Each nybble write is written as a byte containing 4 sets of b/— ib pairs. Thus 

every byte write to flash is writing a nybble to real and shadow. A write mask allows the individual 
targetting of nybble-at-a-time writes . 

The checking of flash vs shadow flash is automatically carried out each read (each byte contains 
both flash and shadow flash). If all 8 bits are 1 , the byte is considered to be in its erased form^, 
30 and returns 0 as the nybble. Otherwise, the value returned for the nybble depends on the size of the overall 
access and the setting of bit 0 of the 8-bit WriteMask. 

• All 8-bit accesses (i.e. instruction and program code 

fetches) are checked to ensure that each byte read from flash 
is 4 sets of b/-ib pairs. If the data is not of this form, the chip hangs until a new 
35 command is Issued over the serial interface. 



^h'SMC's flash memory has an erased state of all 1s 
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• with 32-bit accesses (i.e. data used by program code), each 
byte read from flash is checked to ensure that it is 4 sets 
of b/-nb pairs. A setting of WriteMasko = 0 means that if the data is not valid, then the 
chip will hang until a new command is issued over the serial interface. A setting of 
5 WriteMasI^ = 1 means that each invalid nybble is replaced by the upper nybble of the 

WriteMask- This allows recovery after a write or erasure is interrupted by a power-down. 
8 Registers 

A number of registers are defined for use by the CPU. They are used for control, temporary 
storage, arithmetic functions, counting and indexing, and for I/O. 
1 0 These registers do not need to be kept in non-volatile (Flash) memory. They can be read or 

written without the need for an erase cycle (unlike Flash memory). Temporary storage registers 
that contain secret information still need to be protected from physical attack by Tamper 
Prevention and Detection circuitry and parity checks. 

All registers are cleared to 0 on a RESET. However, program code should not assume any RAM 
1 5 contents have any particular state, and should set up register values appropriately. In particular, 
at the startup entry point, the various address registers need to be set up from unknown states. 
%A GO 

A 1-bit GO register is 1 when the program is executing, and 0 when it is not. Programs can clear 
the GO register to halt execution of program code once the command has finished executing. 

20 ^Accumulator and Z flag 

The Accumulator Is a 32-bit general-purpose register that can be thought of as the single data 
register. It is used as one of the inputs to all arithmetic operations, and is the register used for 
transferring information between memory registers. 

The z register is a 1 -bit flag, and is updated each time the Accumulator is written to. The z register 
25 contains the zero-ness of the Accumulator, z = 1 if the last value written to the Accumulator was 0, and 
0 if the last value written was non-0. 

Both the Accumulator and z registers are directly accessible from the instruction set. 

873 ^Address registers 

StStI Program Counter Array and Stack Pointer 

30 A 12-level deep 12-bit Program Counter Array (pca) Is defined. It is indexed by a 4-bit Stack 

Pointer (sp). The current Program Counter (pc), containing the address of the currently executing 
instruction, is effectively pca[SP]. A single register bit, PCRamSel determines whether the program is 
executing from flash or RAM (0 = flash, 1 = RAM). 

The PC is affected by calling subroutines or returning from them, and by executing branching 
35 instructions. The sp is affected by calling subroutines or returning from them. There is no bounds 
checking on calling too many subroutines: the oldest entry in the execution stack will be lost. 
The entry point for program code Is defined to be address 0 In Flash. This entry point is used 
whenever the master signals a new transaction. 

40 
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^A0-A3 

There are 4 8-bit address registers Each register has an associated memory mode bit designating 
the address as In Flash (0) or RAM (1 ). 

When an An register is pointing to an address In RAM, It holds the word number. When it Is 
pointing to an address In Flash, It points to a set of 32-bit words that start at a 128-blt (16 byte) 
alignment. 

The AO register has a special use of direct offset e.g. access Is possible to (A0),0-7 which is the 
32-bit word pointed to by AO offset by the specified number of words. 
SrarS WriteMask 

The WriteMask register is used to determine how many nybbles will be written during a 32-bit 
write to Flash, and whether or not an invalid nybbie will be replaced during a read from Flash. 
During writes to flash, bit n (of 8) determines whether nybbie n is written. The unit of writing is a 
nybbie since half of each byte Is used for shadow data. A setting of OxFF means that all 32-blts 
will be written to flash (as 8 sets of nybbie writes). 

During 32-blt reads from flash (occurs as 8 reads), the value of WrIteMasko Is used to determine 
whether a read of Invalid data Is replaced by the upper nybbie of WriteMask. If 0, a read of Invalid 
data is not replaced, and the chip hangs until a new command is Issued over the serial Interface. 
If 1, a read of invalid data is replaced by the upper nybbie of the WriteMask. 
Thus a WriteMask setting of 0 (reset setting) means that no writes will occur to flash, and all reads 
are not replaced (causing the program to hang If an invalid value Is encountered). 

Counters 

A number of special purpose counters/index registers are defined: 

Tab l o 350 T able 10 . Counter/Index registers 



Name 


Register 
Size 


Bits 


Description 


C1 


1 x3 


3 


Counter used to index arrays and general 
purpose counter 


C2 


1 x6 


6 


General purpose counter and can be used to 
Index arrays 



All these counter registers are directly accessible from the instruction set Special instructions 
exist to load them with specific values, and other instructions exist to decrement or increment 
them, or to branch depending on the whether or not the specific counter Is zero. 
There are also 2 special flags (not registers) associated with C1 and C2, and these flags hold the 
zero-ness of C1 or C2. The flags are used for loop control, and are listed here, for although they 
are not registers, they can be tested like registers. 
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Tab le 351 T able 11 . Flags for testing C1 and C2 



Name 


Description 


C1Z 


1 = CI is cun-ent zero, 0 = C1 is currently non-zero. 


C2Z 


1 = C2 is current zero, 0 = C2 is currently non-zero. 



grS RTMP 

5 The single bit register RTMP allows the implementation of LFSRs and multiple precision shift 
registers. 

During a rotate right (ror) instruction with operand of rb, the bit shifted out (formally bit 0) is 
written to the RTMP register. The bit currently in the rtmp register becomes the new bit 31 of the 
Accumulator. Performing multiple ror rb commands over several 32-bit values implements a 

1 0 multiple precision rotate/shift right. 

The xrb operand operates in the same way as RB, in that the current value In the rtmp register 
becomes the new bit 31 of the Accumulator. However with the XRB instruction, the bit formally known 
as bit 0 does not simply replace rtmp (as in the rb instruction). Instead, it is XORed with rtmp, 
and the result stored in rtmp, thereby allowing the implementation of long LFSRs. 

1 5 &S Registers used for I/O 

Several registers are defined for communication between the master and the OA Chip. These 
registers are Locaiid, inByte and OutByte. 

Locaiid (7 bits) defines the chip-specific id that this particular OA Chip will accept commands for. 
InByte (8 bits) provides the means for the QA Chip to obtain the next byte from the master. OutByte 
20 (8 bits) provides the means for the QA Chip to send a byte of data to the master. 
From the QA Chip's point of view: 

• Reads from InByte will hang until there is 1 byte of data present from the master. 

• Writes to OutByte will hang if the master has not already consumed the last OutByte. 
When the master begins a new command transaction, any existing data in InByte and OutByte is 

25 lost, and the PC is reset to the entry point in the code, thus ensuring correct framing of data. 
St? Registers used for trimming clock speed 

A single 8-bit Trim register is used to trim the ring oscillaor clock speed. The register has a known 
value of 0x00 during reset to ensure that reads from flash will succeed at the fastest process 
corners, and can be set in one of two ways: 
30 • via Trim Mode, which is necessary before the QA Chip is 
programmed for the first time; or 

• via the CPU, which is necessary every time the QA Chip is 
powered up before any flash write or erasure accesses can be 
carried out . 

35 
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M Registers used for testing Flash 

There are a number of registers specifically for testing the flash implementation. A single 32-bit 
write to an appropriate RAM address allows the setting of any combination of these flash test 
registers. 

5 RAM consists of 96 x 32-bit words, and can be pointed to by any of the standard An address 

registers. A write to a RAM address In the range 97-127 does nothing with the RAM (reads return 
0), but a write to a RAM address in the range 0x80-0x87 will write to specific groupings of 
registers according to the low 3 bits of the RAM address. A 1 in the address bit means the 
appropriate part of the 32-bit Accumulator value will be written to the appropriate flash test registers. 
10 A 0 in the address bit means the register bits will be unaffected. 
The registers and address bit groupings are listed In Table 352: 

Tab l e 352 Table 12 . Flash test registers settable from CPU in RAM address range 
0x80-0x87^ 



adr 

bitSuperscriptp 
aranumonly 


data bits 


name 


description 


0 


0 


shadowsOfF 


0 = shadowing applies (nybble based flash 
access) 

1 = shadowing disabled, 8-bit direct accesses 
to flash. 




1 


hiFlashAdr 


Only valid when shadowsOff = 1 

0 = accesses are to lower 4Kbytes of flash 

1 = accesses are to upper 4 Kbytes of flash 




2 




1 


3 


enableFlashTes 
t 


0 = keep flash test register within the TSMC 
flash IP in its reset state 

1 = enable flash test register to take on non- 
reset values. 




8-4 


flashTest 


Internal 5-blt flash test register within the 
TSMC flash IP (SFC008_08B9_HE). 
If this Is written with 0x1 E, then subsequent 
writes will be according to the TSMC write test 
mode. You must write a non-0x1 E value or 



This is from the programmer's perspective. Addresses sent from the CPU are byte aligned, so the MRU needs to test 
bit n+2. Similarly, checking DRAM address > 128 means testing bit 7 of the address In the CPU, and bit 9 in the 

MRU. 

unshadowed 
shadowed 
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reset the register to exit this mode. 


2 


28-9 


flashTime 


When tImerSel is 1 , this value is used for the 
duration of the program cycle within a 
standard flash write or erasure. 1 unit =16 
clock cycles (16 x 100ns typical). 
Regardless of tImerSel, this value is also used 
for the timeout following power down detection 
before the QA Chip resets itself. 1 unit = 1 
clock cycle (= 100ns typical). 
Note that this means the programmer should 
set this to an appropriate value (e.g. 5 //sj, just 
as the localld needs to be set. 




29 


timerSel 


0 = use internal (default) timings for flash 
writes & erasures 

1 = use flashTime for flash writes and erasures 



When none of the address register bits 0-2 are set (e.g. a write to RAM address 0x80). then 
invalid writes will clear the iiiChip and retryCount registers. 

For example, set the AO register to be 0x80 in RAM. A write to (A0),0 will write to none of the flash 
5 test registers, but will clear the iiichip and retryCount registers. A write to (A0),7 will write to all of the 
flash test registers. A write to (A0),2 will write to the enabieFiashTest and flashTest registers only. A 
write to (A0),4 will write to the flashTime and timerSei registers etc. 

Finally, a write to address 0x88 in RAM will cause a device erasure. If infoBiockSei Is 0, then the 
device erasure will only be of main memory. If infoBiockSei is 1 , then the device erasure is of both 
1 0 main memory and the information block (which will also clear the ChipMask and the Fuse). 
Reads of invalid RAM areas will reveal information as follows: 

• all invalid addresses in RAM (e.g. 0x80) will return the illChip 
flag in the low bit (illChip is set whenever 16 consecutive bad reads occur for a single byte 
in memory) 

15 • all invalid addresses in RAM with the low address bit set 

(e.g. 0x81, or (A0),1 when AO holds 0x80), will additionally 
return the most recent retryCount setting (only updated by the chip when a bad 
read occurs), i.e. bit 0 = iiiChip, bits 4-1 = retryCount. 

StO Register summary 

20 Tab le 353 Table 1 3 provides a summary of the registers used in the CPU. 

Tab l e 35 3 Table 13 . Register summary 



Register name 


Description 


#bits 


A[0-3] 


address registers 


49=36 
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Acc 


Accumulator 


32 


C1 


general purpose counter and index 


3 


C2 


general purpose counter and Index 


6 


IllChip 


gets set whenever more than 1 5 consecutive bad 
reads from flash occurred (and any program 
executing has hung) 


1 


InByte 


input byte from outside world 


8 


Go 


determines whether CPU is executing 


1 


Local Id 


determines id for this chip's lO 


7 


OutByte 


output byte to outside world 


8 


Z 


zero flag for last xfer to Acc 


1 


PCA 


program counter array 


1212=144 


PCRamSel 


Program code is executing in flash (0) or ram (1 ) 


1 


RetryCount 


counts the number of retries for bad reads 


4 


RTMP 


bit used to alow multi-word rotations 


1 


SP 


stack pointer into PCA 


4 


Trim 


trims ring oscillator frequency 


8 


Flash test registers 


various registers in the embedded flash and flash 
access logic specifically for testing the flash 
memory 


30 


TOTAL (bits) 


295 



8740 Startup 

Whenever the chip is powered up. or receives a 'write' command over the serial interface, the PC 
and PCRamSel get set to 0 and execution begins at 0 in Flash memory. The program (starting at 0) 
5 needs to determine how the program was started by reading the inByte register. 

If the first byte read is OxFF, the chip is being requested to perform software reset tasks. 
Execution of software reset can only be interrupted by a power down. The reset tasks include 
setting up RAM to contain known startup state information, setting up Trim and locaiiD registers etc. 
The CPU signals that it is now ready to receive commands from an external device by writing to 
1 0 the OutByte register. An external Master is able to read the OutByte (and any further outbytes that 
the CPU decides to send) if it so wishes by a read using the localld. 

OthenArise the first byte read will be of the form where the least significant bit is 0, and bits 7-1 
contain the locaiid of the device as read over the serial interface. This byte is usually discarded 
since it nominally only has a value of difFerentiation against a software reset request. The second 
1 5 and subsequent bytes contain the data message of a write using the locaiid. The CPU can prevent 
interruption during execution by writing 0 to the locaiid and then restoring the desired locaiid at the 
later stage. 

8 I nstruction Sot 
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Tho CPU operates on 8 bit instruct i ons and typica l ly on 32 - b i t data i toms. Each instruct i on 
typica l ly consists of an opcode and oporand. although th e number of b i ts al l ocated to opcodo and 
operand var i es botwoon i nstruct i ons. 

9t4 Bas i c Opcodes (Summary) 

5 Tho opcodes aro summarized i n Toblo 35 4 : 

Tab l e 354. Opcod e bit patt e rn map 



Opcod e 



Mn e mon i c 



S i mp l e Doscription 



OOOOxxxx 



Jump 



OOOlxxxx 



J 3P 



Jump subroutin e 



OOlOxxxx 



Test and branch 



OOllxxxx 



D e oremGnt and branch 



01003CXXX 



SG 



Sot counter to a va l u o 



OlOlxxxx 



Stor e Accumu l ator in specif i ed l ocat i on 



OllOOOOx 



r e s e rv e d 



01100010 



Jump to 0 



01100011 



Jump indirect 



OllOOlxx 



r e s e rv e d 



011013CXX 



r e s e rv e d 



01110000 



r e s e rv e d 



01110001 



Erase pag e of flash m e mory pointed to by 
Accumulator 



01110010 



Jump to subrout i n e at at 0 



01110011 



Jump subrout i ne i ndir e ct 



01110100 



R e turn from subrout i ne 



01110101 



HAtT 



Stop th e CPU 



OlllOllx 



rosorved 



Ollllxxx 



UA 



Load imm e d i at e va l u e into addr e ss r e gist e r 



lOOOOxxx 



B i tw i se AND Accumu l ator 



lOOOlxxx 



OR 



Bitw i se OR Accumu l ator 



lOOlxxxx 



XOR 



Exclus i ve OR Accumulator 



lOlOxxxx 



Add a 32 bit va l u e to th e Accumu l ator 



lOllxxxx 



Load Accumulator 



llOOxxxx 



POP 



Rotat e Accumu l ator right 



B i tw i s e AND Accumu l ator^ 



llOlOxxx 



ANO 



i ronumon iy" 



11011X3QC 



OR 



B i tw i s e OR Accumu l ator^ 



B i twise XOR Accumu l ator '' "^""^""^^""'"""^"^ 



111003OC3C 



i mmed i at e form of i nstmotion 
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lllOlxxx 



ADD 



Add a 32 bit va l ue to tho 



/Vccumulator 



Load AoGumul ateP^*'P^''^"^'P^P^^ 



111103CXX 



111113CXX 



RIA 



Rotat e Aooumu l ator i nto addr e ss rog i stor 



Tabl e 355 i s a summary of va li d operands for e ach opoodo. Th e tab le is ordered alphabot i oa l ly by 
opoodo mnemonic. Tho binary va l uo for e ach operand can b e found in tho subsequent s e ctions. 
Tabl e 355. Va li d operands for opcodes 



Opoodo 



Va li d operands 



ADO 



imm e d i at e va l u e 



(AO), offs e t 



(An), {C1,C2) [where n - 0 3] 



imm e d i at e va l u e 



(AO), offset 



{C1,C2]. Offset 



HALT 



IMP 
xnvtr 



addrooG 



IQP 



addr e ss 



UA 



{Flash, Ram}. An [where n ~ 0 - 3], {imm e d i at e va l ue) 



LO 



immed i ate va l u e 



(AO), offset 

(An), {C1,C2) [whore n ~ 0 3] 



OR 



i mm e d i at e value 



(AO), offset 



RIA 



{F l ash, Ram}, An [wher e n - 0 3] 



{InByto, OutByte, Wr i toMosk, ID, C1, C2, RB, XRB, 1,3,8,21,31} 



py3 



SG 



{CI, C2), {immed i at e va l u e } 



ST 



(AO), offcot 



(An), {C1,C2} [where n - 0 3] 



TSR 



{0, 1}, offset 



immediate va l uo 



(AO), offset 
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(An). {C1,C2} [whoro n - 0 3] 



Addit i onal ps e duo opcod e s (for progromm i ng convon i onoo) aro ao fo l lows: 

■ DEC^ADD OxFF, . 

■ INC= ADD 0x01 0 
5 ■ NOT = XOR OxFF. , 

* LDg ^ LD 0 

■ SC {Cl, C2} , ACQ ^ ROR {CI, C2 } 
— RD = ROR InbytG 

— WR « ROR OutDytc 
10 * LDMASK = ROR WritcMaalc 

* LDID ^ ROR Id 

■ NOP XOR 0 

8t2 Addressing Modes 

The CPU supports a sot of oddroooing modos as follows: 
15 — immodiatc 

— aacumulator indirect 
-* — indirect — fixed 
— indirect indexed 

&^ I mmodiatc 

20 I n this form of addr e ss i ng, tho operand itself supp ii os the 32 b i t data. 

I mm o d ia to addressing ro li os on 3 bits of operand, p l us an opt i onal 8 b i ts at PC+1 to determino an 
8 bit base va l ue. Bits 0 to 1 of tho opcode byt e det e rmine whether th e bas e va l u e com e s from tho 
opoodo byte itself, or from PC+1, as shown in Table 356. 
Tab l e 356. S e l e ct i on for baso va l u e in imm e d i ato mode 

25 



Opcod04-o 


Baso value 








00000000 




00000001 




From PC*1 (i.e. MIUData^) 






11111111 



The baso value Is computed by using cmdo as bit 0, and copying cmD 4 i nto tho upper 7 b i ts. 
Th e resu l tant 8 b i t baso value i s th e n used as a 32 bit va l ue, with Os in the upper 2A bits, cr the 8 - 
bit valu e is rep l icat e d into tho upper 32 b i ts. Tho se l ection Is dctorm i nod by bit 2 of the opcode 
30 byt e , as fol l ows: 

Tabl e 357. R e plicat e bits s ele ct i on 
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No replication. Data has 0 in uppor 24 bits and basoVal in lowor 8 bite 




3r 


Roplicated. Data is 32-bit value formed by roplicating basoVai. 



Opcod e s that support imm e d i at e address i ng aro LD, ADD, XOR, AND, OR. The SC and LIA 
instruct i ons aro a l so i mmodloto I n that thoy storo tho data with th e opcod e , but they are not In the 
sam e form as that d e scrib e d horo. Soo th e d e ta il on the i ndividual I nstructions for more 
5 information. 

S i ngle byto oxamplos i nc l ude: 

LD 0 

^ ADD 1 

^ ADD OxFF. . . # thio aubtracto 1 from the acc 

10 ^ XOR OxFF.,, # thio pcrformo an cffcGtivQ logical NOT 

operation 
Doubl e byt e e xamp le s inc l ude: 

LD 0x05 # a conotant 

A^TD OxOF # ioolatco the lower nybblc 

15 LD 0x3 6 . . . — # uoeful for HMAC proGC33ing 

Accumulator i nd i r e ct 

I n th i s form of addressing, th e Aocumu i ator holds the effoct i vo address. 

Opcodes that support Aocumuiator ind i rect addrosoing aro JPI, JSI and ERA. i n th e cas e of JP I and 
JS I , the Accumu l ator ho l ds tho oddr e ss to jump to. In th e case of ERA, th e Acoumu i ator ho l ds th e 
20 addr e ss of th e pag e I n flash m e mory to b e e ras e d. 
Examples I nc l ude: 

iJPi 

^ J&t 

BRA 

25 9t2t3 I nd i rect fixod 

I n this form of address i ng, address r e g i st e r AO i s used as a bas e address, and th e n a sp e cific 
fixod offset is add e d to tho base oddroso to g i ve tho offoctivo addross. 

Bits 2 0 of th e opcode byto specify tho fixod offs e t from AO, which m e ans th e fix e d offset has a 
range of 0 to 7. 

30 Opcod e s that support I ndirect i ndoxod address i ng aro LD, ST, ADD, XOR, AND, OR. 

Exampl e s includo: 

■ LD (AO), 2 

' ADD (AO) , 3 

* Al ^ JD (AO) , — 4: 
35 ■ CT ( AO ) , 7 

^tZtA I ndir e ct i ndoxod 
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In this form of address i ng, an addr e ss r e g i ster i s us e d as a baso addr e ss, and thon an indox 
rog i stor is usod to offs e t from that bas e addr e ss to givo th e effeot i vo addross. 
Tho address r e gist e r is one of 4, and i s s e l e cted via bits 2 1 of th e opcod e byto as fo ll ows: 
Tablo 358. Address reg i ster selection 

5 



QpcodOa^ 






address register 
selected 




AG 




A4- 




A2 


3r3r 


A3 



Bit 0 of th e opcod e byt e s e l e cts whether ind e x r e gist e r C1 or C2 is usod: 
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Th e counter i s se l ected as fol l ows: 

Tab l e 359. I ntorprotation of count e r for DBR 



OpcodOo 






Interpretion 


& 




3: 


G2 



5 Opcodes that support i ndiroct Ind e x e d addr e ssing ar e LD, ST, ADD, XOR. 

Examples i nc l ude: 

* LD (A2) , CI 

* ADD (Al) , CI 

* ST (A3 ) , C2 

10 S i nce C1 and C2 can only d e c e m e nt. proc e ss i ng of data structur e s typically works by load i ng Cn 
with some numbor n and d e cr e m e nt i ng to 0. Thus (Ax).n Is the first word accessed, and (Ax).o i s tho 
l ast 32 bit word accessed in tho l oop. 

di3 ADD Add To Accumulator 

Mn e monic: ADD 

15 Opoodo: lOlOxxxx, — and lllOlxxx 

Usago: ADD e ff e ct i ve addr e ss, or ADD i mmod i ato va l uo 

Th e ADD instruction adds the sp e c i fi e d 32 bit va l ue to tho Aooumu i ator v i a modu l o 2^ addition. 
Tho iiiQixxx form of the opcod e fo l lows tho imm e diat e addr e ssing rul e s (s e e Sect i on 9.2.1 on 
page 1). Th e loio^cxxx form of th o opcode dofinos an off o ct i vo addr e ss as fol l ows: 
20 Table 360. Intorprotation of operand for ADD (1010xxxx) 



bit-3 


interprotion 


comment 


G- 


(AO), offset 


indirect fixed addressing (see Section 9.2.3 on pago 1 ) 




(An), Cn 


Indirect Indexed addressing (see Section 9.2.4 on 
page 1 ) 



Tho z flag is also sot during this operation, d e p e nd i ng on wh e th e r th e r e sult 

( l oad e d into the Aooumuiator) i s z e ro or not. 
25 9.4 AND B i twise AND 

Mn e mon i c: AND 

Opcod e : lOOOOxxx, — and llOlOxxx 

Uoago: AND offootivo address, or AND I mmod i ato valuo 
Th e AND I nstruction performs a 32 bit b i tw i se AND operat i on on th e Aooumuiator r 
30 Th e iioiojoac form of th e opcodo fol l ows tho i mm e diat e address i ng ru l es (see Section 9.2.1 on 
pag e 1 ). Th e looooxxx form of th e opcode fol l ows th e ind i rect f i x e d addr e ss i ng rul e s (s e e 
Sect i on 9.2.3 on pago 1). 
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The z flag i s a l so sot dur i ng th i s op e rat i on, depond i ng on wh e th e r tho r e sultant 32 bit valuo 
(load e d Into th e Aooumuiator) is zero or not. 
97§ DBR Decrement and Branc h 

Mnomon i c: DBR 

5 Opoodo: OOllxxxx 

Usago: DBR Countor. Offoot 
This instruct i on prov i des tho mochanism for bu i lding simp i o loops. 
Tho countor is so l octod from b i t 0 of tho opcode byt e as fo l lows: 

Tab le 361 . I nt e rprotation of counter for DBR 

10 



bit-0 


intorprotion 








3r 


G2 



I f tho spocif i ed counter is non zoro, thon the counter Is docrom e nt e d and the designated offs e t is 
add e d to th e curr e nt instruction addr e ss (PC for 1 - byt e I nstructions, PC+1 for 2 - byt e instruct i ons). I f 
tho spoc i fied count e r is z e ro, it Is docromented (all b i ts in tho counter become sot) and proc e ss i ng 
15 continu e s at tho next instruction (pc*1 or pc*2). Th e d e signat e d offset wi l l typ i cally b e n e gat i ve for 
uso i n l oops. 

Tho i nstruction is eith e r 1 or two byt e s, as d e term i ned by b i ts 3 1 of tho opcod e byt e : 

If bito 3 1 - 000, — the inotruGtion conaumco 2 bytca . — Tho 8 

bits at PC * 1 ar e tr e at e d as a sign e d numb e r and used as th e offs e t amount. Thus OxFF 
20 is treated as 1, and OxOi is tr e at e d as *1. 

If bito 3 — 1 000, tho instruct i on consumes 1 byt e . B i ts 3 1 arc treated as a n e gativ e 

number (tho sign bit is imp lie d) and us e d as tho offset amount. Thus 111 i s tr e at e d as - 1, 
and 001 is treated as 7. Th i s is usefu l for sma l l l oops. 
Tho effect i s that i f the branch I s back 1 7 bytes (1 byte is not part i cularly us e ful), th e n tho sing l e 
25 byto form of the I nstruction can be used. If the branch i s forward, or backward mor e than 7 byt e s, 
then th e 2 byte i nstruction is required. 

8t€ ERA Erase 

Mn e monic: ERA 

Opoodo: 01110001 

30 Usago: ERA 

This instruction causes an erasur e of the 256 byte page of flash memory point e d to by the 
Accumulator. The Aooumu i ator I s assumed to contain an 8 - bit pointer to a 128 - bit (16 byt e ) aligned 
structur e (same structuro as tho oddrooo rog l stors). Tho pag e numb e r to b e erased comes from 
bits 7 4 , and tho l ower 4 b i ts are I gnored. 
35 Not e that the size of tho flash memory pago being erased I s actual l y 512 bytes, but In terms of 
data storago and addressing from the point of vi e w of th e CPU, thor e Is on l y 256 byt e s in tho 
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07? HALT Halt CPU operat i on 

Mn e monic: HALT 

Qpeede; 01110101 

Ucago: HALT 

The HALT i nstruction writ e s a 0 to the int e rnal GO r e gist e r, th e r e by oaus i ng tho CPU to torminato 
th e currently e xecuting program. Th e CPU will only b e restart e d with a new l oca ll d transaction 
from tho Master or by a globa l ld plus Activ e Modo byto. 

©tS JMP Jump 

Mnomonic: JMP 

Opoodo: OOOOxxxx 

Usago: JMP ofFcxrtivo addrooo 

The JMP instruction prov i des for a m e thod of branching to a spocif i od address. Tho instruction 
l oads tho PC with the offoctivo address. 

The n e w PC is loaded as fo l lows: bits 11 - 8 are obtained from bits 3 0 of tho JMP opcode byto, and 
b i ts 7 0 ar e obtain e d from PC+1 . 
9.9 JP I - Jump I nd i rect 

Mnomon i c: JP* 

Qpee^ei 01100011 

Usag e : JPI 

The JPI instruction loads tho PC with tho lower 12 b i ts of the Aocumu i ator, and s e ts the PCRamSoi 
register w i th bit 15 of tho Accumulator. Note that tho stack i s unaffected (unlike JS i ). 
9t40 JPZ Jump to Zero 

Mnomonic: JPZ 

Opoodo: 01100010 

Usage: JPZ 

The JPZ i nstruction l oads the PC and PCRamSoi with 0, th e r e by caus i ng a jump to addr e ss 0 i n 
F l ash memory. 

Programm e rs wi ll not typica ll y use tho JPZ command. How e ver the CPU e x e cut e s this i nstruction 
wh e n e v e r a new command arr i ves over tho oor i al interface, so that tho code e ntry point is known 
i.e. every time tho chip r e ceives a new command, execution begins at address 0 in flash. This 
does not chang e tho status of any other i nterna l r e gist e r s e ttings (e.g. tho flash tost registers). 
974^ JSI Jump Subroutine I ndirect 

Mn e mon i c: JSi 

Opcode^ 01110011 

Uoago: JS» 

Th e JSI instruct i on allows tho jumping to a subroutine whose address i s obta i nod from the 
Accumu l ator. The instruction pushes tho current PC onto th e stack, l oads th e PC w i th th e l ower 12 
b i ts of tho Accumu l ator, and sots the PCRamSo l r e gist e r with b i t 1 5 of the Accumu l ator. 
Th e stack prov i d e s for 12 l evels of execut i on (1 1 subrout i n e s d ee p). I t i s tho respons i bi l ity of th e 
programm e r to ensur e that this depth i s not oxcoed e d or th e d ee pest return value wi l l be 
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overwr i tten (sinoo tho Gtaok wraps). Programs can tak e advantag e of tho fact that tho stack 
wraps. 

8r45 JSR ■ Jump Su b routine 

Mnemon i c: JSR 

5 Opoodo: OOOlxxxx 

Usago: JSR e ff e ctivo addroso 

Tho JSR instruction prov i des for the most common usago of tho subrout i ne construct. Tho 
i nstruction pushos tho current PC onto tho stack, and loads tho PC with tho o ff o ctiv o address. 
The now PC i s loaded as fo l lows: b i ts 1 1 8 ar e obtain e d from bits 3 0 of tho JSR opcod e byto, and 
10 b i ts 7 0 are obta i ned from PC*1 . 

Th e stack provides for 1 2 l ovo l s of oxocut i on (1 1 subroutines deep). It I s th e respon si b ili ty of tho 
programmer to ensure that this depth is not oxcood e d or tho return va l uo wil l bo overwritten (sinoo 
tho stack wraps). Programs can tako advantage of th e fact that th e stack wraps. 

9t45 JSZ Jump to Su b rout i ne at Zero 

15 Mn e mon i c: JSZ 

Opcodo: 01110010 

Usago: JSZ 

Th e JSZ instruction jumps to the subroutine at flash address 0 ( i .e. it pushes tho current PC onto 
the stack, and loads tho PC and PCRamSoi with 0). 
20 Programmers w i ll not typ i ca ll y use th e JSZ command. I t ex i sts mere l y as a rosu l t of opcodo 
decoding minim i zation and can bo used to assist w i th tho test i ng of the chip. 

LD Load Accumulator 

Mnemon i c: LD 

Opcod e : 101l3Qooc, — and llllOxxx 

25 — Usago: LD e ffectivo address, or LD i mmediato valuo 

Th e LD i nstruct i on l oads the Aooumu i ator w i th th e 32 b i t value. 

Tho 11110X3C3C form of th e opcod e fo l lows th e I mmed i at e address i ng rules (see Section 0.2.1 on 
page 1). Tho loiixxacx form of tho opcode defines an effectiv e address as fo ll ows: 
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Tabl e 362. I nterpretation of oporand for LD (101 1xxxx) 





interpretion 


comment 




(AO), offcot 


indiroct fixed addressing (see Section 9.2.3 on pago 1 ) 


i 


(An), Cn 


indirect indexed addressing (see Section 9.2.4 on 
pago 1) 



T l i e z flag is also s e t during this operat i on, dep e nd i ng on whether tlie valu e l oad e d i nto tli e 
5 Accumulator is ZOfO or not. 

L I A Load Immediate Address 

Mn e monic: UA 

Opoodo: Ollllxxx 

Usago: L I AF AddrocoRog i stor, Valuo # for flaoh addressos 

10 L I AR Addr e ssR e g i st e r, Valuo # for rom addrossoo 

The L I A instruct i on transfers tho data from pc-*'1 into th e designated addr e ss r e gist e r (AO A3), and 
sets th e memory mode bit for that address register. 
Bit 0 sp e cifi e s wh e th e r tho addr e ss is i n flash or ram, as follows: 
Tab l e 363. Interpretation of memory mode for L I A 

15 





Interpretion 




G- 


Flash 







Tho addroso register to bo targottod is soloctod v i a bits 2 - 1 of the i nstruction. 

OR Bitw i se OR 

Mnemonic: OR 

20 Opcod e : lOOOlxJcx:, — and llOllxxx 

Usago: OR offoctivo addross. or OR i mmod i ato va l uo 

The OR instruction p e rforms a 32 b i t b i twise OR op e rat i on on tho Accumu i ator r 
Tho 110 iixxx form of the opcod e follows th e imm e diate addr e ssing ru le s (s ee S e ction 9.2.1 on 
pago 1 ). Tho loooixxx form of the opoodo fol l ows the i nd i rect fix e d addr e ssing rul e s (s e e 
25 S e ction 9.2.3 on pago 1 ). 

Th e z flag I s also sot dur i ng this operation, depend i ng on whether the resu l tant 32 bit valuo 
(load e d into tho Aooumu i ator) i s zero or not. 
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R I A Rotate I n Address 

Mn e mon i o: RIA 

Opoodo: lllllxxx 

Uoago: R I AF Addr e ssRog i ster It for flash addroosoo 

R I AR AddrossR e g i Gter # for ram addrosso s 
Tho RIA instruction transfers tho lower 8 b i ts of tho Accumu l ator i nto th e designat e d address regist e r 
(AO A3), s e ts th e m e mory nnodo bit for that address r e gister, and rotates the Accumu l ator r i ght by 8 

■S7TCOT 

Bit 0 spocifios whether tho addr e ss i s i n flash or ram, as fo ll owo: 
Tab le 36A, I nterpretation of memory mode for R I A 



bit-O 




interpretion 


G- 




i 


Ram 



Th e addr e ss r e gister to be targ e ttod is select e d via b i ts 2 1 of tho Instruct i on. 
ROR RoTATC Right 

Mn e monic: ROR 

Opcode: llOOxxxx 

Usage: ROR Va l uo 

Th e ROR instruct i on provides a way of rotating th e Aooumutator r i ght a sot numb e r of bits. Th e blt(s) 
com i ng i n at th e top of tho Accumu l ator (to b e com e b i t 31) con either oomo from tho previous lower 
bits of th e Accumu l ator, from tho serial connection, or from externa l flags. The b i t(s) rotat e d out can 
a l so be output from th e s e r i a l connect i on, or comb i n e d w i th an oxtorna l flag. 
Tho al l owed operands are as fo ll ows: 

Tabl e 365. Interpretat i on of operand for ROR 



bits 3 0 






Interpretion 


0000 


RB 


0001 


XRB 




WritoMaok 






0011 


A- 


0100 






(reserved) 


0101 


3 


0110 


34- 


0111 


24 








G2 


1010 






(reserved) 


1011 






■ (reserved) 
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1100 g 

1101 io 

iH^ InByt e 

3rHr3: OutByt e 



The z f l ag i s also s e t during this op e ration, depend i ng on wh e ther resu l tant 32 bit va l uo ( l oadod 

Into th e Aooumuiator) is zero or not. 
I n its s i mp le st form, the operand for the ROR instruction is one of 1. 3, 8, 2i, 3i, ind i cat i ng how 
5 many bit positions th e Aooumu i ator should bo rotated. For theso operands, thoro is no oxtorna l I nput 
or output - th e b i ts of tho Accumu l ator ar e moroly rotated right. Note that th e se valu e s ar e th e 
e quiva le nt to rot a ting l eft 31, 20. 24, 8. 1 b i t pos i t i ons. 

W i th operand writoMaok, tho l ower 8 bits of th e Aooumu i ator ar e transf e rr e d to tho WritoMask rog i st o r, 
and th e Accumulator i s rotated right by 1 bit. This conv e ni e nt l y al l ows succ e ss i ve nybb le s to b e 
10 masked dur i ng F l ash wr i tes if th e Accumulator has b ee n pr e loaded w i th an appropr i ate va l uo (eg 

With operands C1 and GS , the lower appropriat e numb e r of b i ts of th e Aooumuiator (3 for C1, 6 for C2) 
ar e transf e rred to tho ci or G2 reg i ster and tho lower 6 bits of the Accumulator ar e load e d with tho 
pr e vious valu e of the Cn r e gister. The remaining upp e r b i ts of the Accumu l ator are sot as follows: b i t 
15 31 2A are copied from previous b i t s 7 - 0, and bits 23 6 are cop ie d from previous bits 31 1 i 

( e ffect i ve l y junk). As a result, tho Accumulator shou l d bo subs e qu e nt l y mask e d if th e programmer 
wants to compar e for spocific va l ues). 

W i th op e rand i d, tho 7 low order b i ts aro transf e rr e d from tho Accumulator to th e Locai i d r e gister, tho 
low order 8 bits of th e Accumulator are cop i ed to th e Trim register if the Trim regist e r has not alr e ady 

20 b ee n wr i tt e n to after power on res e t, and the Accumu l ator is rotat e d r i ght by 8 b i ts. This m e ans that 
th e ROR ID i nstruction needs to b e p e rformed tw i ce, typ i ca ll y during Global Act i v e Mod e - onc e to 
sot Trim, and onc e to s e t Looai i d. Not e ther e fe no way to r e ad th e contonte of tho iooalfd or Trim 
regist e rs diroctly. However tho Loca i id sent to tho program for a command is ava il ab l e as bits 7 1 
of tho first byt e obtain e d from i nByto after program startup. 

25 W i th operand inBytc, tho noxt sorial input byte i s transferred to tho highest 8 b i ts of tho Aooumuiator ? 
The inBytoVa i id b i t is also cl e ared. I f thoro i s no i nput byte ava i lab l e from th e cl i ent yet, execution is 
susp e nd e d unti l thoro is one. Tho remainder of th e Accumu l ator Is shift e d right 8 bit pos i t i ons (bit31 
b e com e s b i t 23 etc.), with lowest b i ts of th e Accumu l ator shifted out. 

W i th operand OutByte, the Accumu l ator is shift e d r i ght 8 b i t pos i t i ons. Th e byte sh i ft e d out from bits 7 - 
30 0 is stor e d i n the OutByto r e g i ster and th e OutBytoVai i d f l ag is s e t. I t is ther e for e r e ady for a cl i ent to 
r e ad. I f th e Out B ytoVa i id flag i s a l ready s e t, e x e cution of the i nstruction sta ll s unt i l the OutBytoVa i id 
flag c le ar e d (wh e n the OutByto byte has boon road by the cl i ent). Tho now data shifted in to tho 
upper 8 bits of the Accumulator is what was transferred to tho OutByto r e g i ster (i.e. from tho 

Accumulator ^ 

35 F i nal l y, tho rb and xrb op e rands al l ow th e imp le mentation of LFSRs and mu l tip l e prec i s i on shift 
r e gist e rs. With rb, tho bit shifted out (forma ll y bit 0) is written to th e RTMP rog i stor. Tho rog i stor 
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curront i y i n tho rtmp regist e r bocomos tho now b i t 31 of the Aocumu i ator. Porform i ng mu l t i plo ror 
RB Gommands over several 32 - b i t valuos implomonts a mu l tip i o proo i s i on rotato/shift right. The 
XRB op e rat e s i n th e sam e vyay as RB, i n that the current value in the rtmr reg i ster becomes tho 
n e w b i t 31 of th e Aooumuiator. Howovor w i th tho XRB i nstruction, tho bit forma ll y known as b i t 0 doos 
5 not simp l y r e p l ac e rtmp (as in th e rb i nstruction). I nstead, i t i s XOR e d with rtmp, and th e resu l t 
stored in rtmp. Th i s al l ows th e implomontation of l ong LFSRs, as roquirod by tho authontioation 
protocol. 

9A9 RTS Return From Su b routine 

Mnemon i c : RTS 

10 Opcodo: 01110100 

Usag e : RTS 

Th e RTS instruction pul l s tho sovod PC from tho stack, adds 1 , and resumes oxocution at tho 
r e sultant addr e ss. Th e e ff e ct i s to cause execut i on to resume at the i nstruction after tho most 
rocontly oxooutod jsr or JSi Instruction. 

15 Although 12 l e v e ls of ex e cution ar e provided for (1 1 subrout i nes), i t i s the r e sponsib il ity of th e 

programmer to ba l ance e ach jsr and JSi instruction with an rts. A rts e x e cut e d with no pr e v i ous 
JSR will caus e e x e cut i on to bogin at what e v e r addr e ss happens to b e pull e d from th e stack. Of 
course this may b e d e sir e d b e haviour in specific circumstances. 
9t20 SC Set Counter 

20 Mnemonic: SG 

opcode: OlOOxxxx 

Usag e : SC Counter Va l ue 

Th e SC instruct i on is us e d to transf e r a 3 b i t Va i uo into the sp e cifi e d count e r. Th e op e rand 
determines wh i ch of count e rs C1 and C2 is to b e load e d as w e ll as th e value to bo l oad e d. Vaiuo i s 

25 stored i n b i ts 3 - 1 of the 8 - bit opcod e , and th e count e r i s sp e c i fi e d by b i t 0 as fo l lows: 
Tab l e 366. Interpretation of counter for SC 



brt-Q 




interpretion 


0 




i 


G2 



S i nc e count e r G4 i s 3 b i ts, Va i uo is copi e d dir e ct l y i nto C1. 
30 For count e r C2, C2a^ ar e cop ie d to C2^, and Vaiuo I s copied to C2g^. Two sc C2 instructions ar e 

therefore roquirod to load C2 with a g i v e n 6 b i t va l ue. For e xampl e , to l oad C2 with Oxoc, wo wou l d 
hav e sc C2 1 fo l lowed by sc C2 4. 

ST Store Accumulator 

Mn e mon i c: ST 

35 Opcodo: OlOlxxxx 

Usage: ST offoot i v e address 

Th e ST i nstruction stor e s tho 32 b i t Aooumu i ator at tho e ff e ct i v e address. Th e e ff e ctiv e addr e ss i s 
determined as fo l lows: 
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Table 367, I ntorprotation of oporand for ST (0101xxxx) 





interpretion 


oommont 




(AO), offset 


indirect fixed addrossing (soe Section Q.2.3 on pago 1 ) 




(An), Cn 


indirect indexed addressing (see Section 9.2.4 on 
page 1) 



If th e e ff e ct i ve address In F l ash m e mory, only those nybb l os whose corresponding WrIt e Mask bit 
5 i s s e t will be written to F l ash. Programm e rs should b e v e ry aware of flash characteristics (write 
time, longevity, pago s i z e e tc. when storing data in flash). 

Th e re is a l ways the possib i l i ty that powor could bo romovod during a writ e to Flash. I f this occurs, 
th e flash wi ll b e in an ind e t e rminat e stat e . I f the QA Ch i p is warned by tho oxtornai system that 
pow e r is about to b e removed (v i a the master causing a trans i tion to I d le Mod e ), the wr i te wi l l bo 
10 abort e d clean l y at the nearest nybb l e boundary (wr i tes occur in th e order of l e ast s i gnificant to 
most sign i ficant). 

9z22 TBR Test mo BRA^ J G H 

Mnemonic: TBR 

Opcod e : 00103ocxx 

15 Usag e : TBR Valu o Offo o t 

Th e T e st and Branch i nstruct i on tests tho status of tho Z flag (th e z e ro ness of the AcGumu i ator>i 
and then branch e s if a match ocurs. 

Th e z e ro ness is s ele ct e d from bit 0 of tho opcode byt e as follows: 
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Tabl e 368. Intorpr e tat i on of z e ro noss for TBR 



bft-Q 


interpretion 




true if Ago is zero (Z ^ 1 ) 


3r 


truo if Ago is non zero (Z-0) 



I f tlie spec i f ie d zoro - t e st matchos, thon tho designat e d offsot is added to tho curr e nt Instruct i on 
addr e ss (PC for 1 byt e instructions, PC*^ for 3 byto i nstructions), i f t l ie zero tost does not match, 
proc e ssing cont i nu e s at tlie next instruction (PC+1 or PC*2). Tli e instruction is ei th e r 1 or two 
byt e s, as dotorm i ned by b i ts 3 1 of tho opcodo byto: 

If bita 3 — 1 = 000, — the inotruction Gonoumco 2 bytco, — The 8 

bito at PC- i- 1 ar e treated as a s i gnod number and usod as the offsot amount to b e 
added to pen. Thus Oxff Is tr e ated as - 1, and 0)(01 is treat e d as 

If bita 3 1 7^ 000, tho i nstruction consumes 1 byt e . Bits 3 - 1 ar e tr e ated as a posit i ve 

numb e r (tho sign bit i s impl i ed) and usod as tho offsot amount to bo add e d to PC. Thus 111 
Is tr e at e d as 7, and 001 is tr e at e d as 1 . This is useful for s l ^ipp i ng over a small number of 
i nstructions. 

The effect i s that if tho branch is fonyard 1 7 bytos (1 byt e is not particularly useful), th e n th e 
singl e byte form of th e instruct i on can bo us e d. I f tho branch is backward, or forward more than 7 
byt e s, then tho 2 byto instruction is requ i red. 

9r23 XOR Bitw i se Exclusive OR 

Mnemonic: XOR 

Opcodo: lOOlxxxx, — and lllOOxxx 

Usago: XOR offoct i vo oddr e ss. or XOR i mmodiato va l u o 

The XOR instruction performs a 32 b i t bitw i s e XOR operation on tho AGcumui a tor. 
Th e iiiooxxxform of tho opcodo fo l lows the i mm e diate addressing rul e s (s e e Sect i on 0.2.1 on 
pag e 1). Tho looixaoacform of th e opcode has an e ff e ct i v e address as fo ll ows: 

Tab l e 360. interpretation of operand for XOR (lOOlxxxx) 





interprotion 


comment 




(AO), offsot 


indirect fixed addressing (see Section 0.2.3 on page 1 ) 




(An), Cn 


indirect indexed addressing (see Section 0.2.4 on page 1) 



The z flag is also sot during this op e ration, d e p e nd i ng on wh e th e r th e r e sult (load e d i nto th e 
Accumulator) i s zoro or not. 
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Implementation 
— I ntroduction 

This chapt e r prov i d e s tho The high-level definition of a CPU capable of implementing the 
functionality required of an QA Chi p is as follows . 

^QA Physical Interface 

10.1.1 Pin connections 

The pin connections are described in Tablo 370 Table 1 4 . 

Tab l e 370 Table 14 . Pin connections to QA Chip 



pin 


direction 


Description 


Vdd 


in 


Nominal voltage. If the voltage deviates from this by 
more than a fixed amount, the chip will RESET. 


GND 


In 




SCIk 


In 


Serial clock 


SDa 


In/Out 


Serial data 



The system operating clock SysCik is different to scik. SysCik is derived from an internal ring 
oscillator based on the process technology. In the FPGA implementation SysCik is obtained via a 
5th pin, 

10.1.2 Size and cost 

The QA Chip uses a 0.25 fam CMOS Flash process for an area of 1 mm^ yielding a 10 cent 
manufacturing cost in 2002. A breakdown of area is listed in Tab l o 371 T able 15 . 

Tabl e 371 Tabel 15 . Breakdown of Area for QA Chip 



approximate area 
(mm^) 


Description 


0.49 


8KByte flash memory 

TSMC: SFC0008_08B9_HE 

(8K X 8-bits, erase page size = 512 bytes) 

Area = 724.688jim x 682.05 ^m. 


0.08 


3072 bits of static RAM 


0.38 


General logic 


0.05 


Analog circuitry 


1 


TOTAL (approximate) 



Note that there is no specific test circuitry (scan chains or BIST) within the QA Chip (see Sect i on 
10.3.10 on pago 1) , so the total transistor count is as shown in Tabl e 371 T able 15 . 
10.1.3 Reset 
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The chip performs a RESET upon power-up. In addition, tamper detection and prevention 
circuitry in the chip will cause the chip to either RESET or erase Flash memory (depending on 
the attack detected) if an attack is detected. 

4^r2 Operating speed 

5 The base operating system clock SysCik is generated internally from a ring oscillator (process 
dependant). Since the frequency varies with operating temperature and voltage, the clock is 
passed through a temperature-based clock filter before us o (soo Sect i on 10.3.3 on pago 1) . The 
frequency is built into the chip during manufacture, and cannot be changed. The frequency is in 
the range 7-14 MHz. 

1 0 40t3 General manufacturing comments 

Manufacturing comments are not normally made when normally describing the architecture of a 
chip. However, in the case of the OA Chip, the physical implementation of the chip is very much 
tied to the security of the key. Consequently a number of specialized circuits and components are 
necessary for implementation of the QA Chip. They are listed here. 
15 • Flash process 

• Internal randomized clock 

• Temperature based clock filter 
Noise generator 

• Tamper Prevention and Detection circuitry 
20 • Protected memory with tamper detection 

• Boot -strap circuitry for loading program code 

• Data connections in polysilicon layers where possible 

• OverUnderPower Detection Unit 

• No scan- chains or BIST 
25 10.3.1 Flash process 

The QA Chip is implemented with a standard Flash manufacturing process. It is important that a 

Flash process be used to ensure that good endurance is achieved (parts of the Flash memory can 

be erased/written many times). 

10.3.2 Internal randomized clock 

30 To prevent clock glitching and external clock-based attacks, the operating clock of the chip should 

be generated internally. This can be conveniently accomplished by an internal ring oscillator. The 

length of the ring depends on the process used for manufacturing the chip. 

Due to process and temperature variations, the clock needs to be trimmed to bring it into a range 

usable for timing of Flash memory writes and erases. 
35 The internal clock should also contain a small amount of randomization to prevent attacks where 

light emissions from switching events are captured, as described below. 

Finally, the generated clock must be passed through a temperature-based clock filter before being 
used by the rest of the chip (soo Section 10.3.3 on pogo 1) . 
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The normal situation for FET implementation for the case of a CMOS inverter (which involves a 
pMOS transistor combined with an nMOS transistor) as shown in F i gur e 35 3 Fiaure 26 . 
During the transition, there is a small period of time where both the nMOS transistor and the 
pMOS transistor have an intermediate resistance. The resultant power-ground short circuit causes 
5 a temporary increase in the current, and in fact accounts for around 20% of current consumed by 
a CMOS device. A small amount of infrared light is emitted during the short circuit, and can be 
viewed through the silicon substrate (silicon is transparent to infrared light). A small amount of 
light is also emitted during the charging and discharging of the transistor gate capacitance and 
transmission line capacitance. 

10 For circuitry that manipulates secret key information, such information must be kept hidden. 
Fortunately. IBM's PICA system and LVP (laser voltage probe) both have a requirement for 
repeatability due to the fact that the photo emissions are extremely weak (one photon requires 
more than 10^ switching events). PICA requires around 10® pases to build a picture of the optical 
waveform. Similarly the LVP requires multiple passes to ensure an adequate SNR. 

1 5 Randomizing the clock stops repeatability (from the point of view of collecting Information about 
the same position In time), and therefore reduces the possibility of this attack. 
10.3.3 ^Temperature based clock filter 

The OA Chip circuitry is designed to operate within a specific clock speed range. Although the 
clock is generated by an internal ring oscillator, the speed varies with temperature and power. 

20 Since the user supplies the temperature and power, it is possible for an attacker to attempt to 

introduce race-conditions in the circuitry at specific times during processing. An example of this is 
where a low temperature causes a clock speed higher than the circuitry is designed for, and this 
may prevent an XOR from working properly, and of the two Inputs, the first may always be 
returned. These styles of transient fault attacks are documented further In [1]. The lesson to be 

25 learned from this Is that the input power and operating temperature cannot be trusted. 

Since the chip contains a specific power filter, we must also filter the clock. This can be achieved 
with a temperature sensor that allows the clock pulses through only when the temperature range 
is such that the chip can function correctly. 

The filtered clock signal would be further divided internally as required. 
30 10.3. 4 Noise Generator 

Each QA Chip should contain a noise generator that generates continuous circuit noise. The 

noise will interfere with other electromagnetic emissions from the chip's regular activities and add 

noise to the Idd signal. Placement of the noise generator Is not an Issue on an QA Chip due to the 

length of the emission wavelengths. 
35 The noise generator is used to generate electronic noise, multiple state changes each clock cycle. 

and as a source of pseudo-random bits for the Tamper Prevention and Detection clrcuitry-(see 

Section 10.3.5 on page 1) . 

A simple implementation of a noise generator Is a 64-bit maximal period LFSR seeded with a non- 
zero number. 

40 10.3.5 — ^Tamper Prevention and Detection circuitry 
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A set of circuits is required to test for and prevent physical attacks on the QA Chip. However what 
is actually detected as an attack may not be an intentional physical attack. It is therefore important 
to distinguish between these two types of attacks in an QA Chip: 
• where you can de ce/ta/n that a physical attack has occurred. 
5 • where you cannot be certain that a physical attack has occurred. 

The two types of detection differ in what is performed as a result of the detection. In the first case, 
where the circuitry can be certain that a true physical attack has occurred, erasure of flash 
memory key information is a sensible action. In the second case, where the circuitry cannot be 
sure if an attack has occurred, there Is still certainly something wrong. Action must be taken, but 
1 0 the action should not be the erasure of secret key information. A suitable action to take in the 

second case is a chip RESET. If what was detected was an attack that has permanently damaged 
the chip, the same conditions will occur next time and the chip will RESET again. If, on the other 
hand, what was detected was part of the normal operating environment of the chip, a RESET will 
not harm the key. 

15 A good example of an event that circuitry cannot have knowledge about, is a power glitch. The 
glitch may be an intentional attack, attempting to reveal information about the key. It may, 
however, be the result of a faulty connection, or simply the start of a power-down sequence. It is 
therefore best to only RESET the chip, and not erase the key. If the chip was powering down, 
nothing is lost. If the System Is faulty, repeated RESETs will cause the consumer to get the 

20 System repaired. In both cases the consumable is still Intact. 

A good example of an event that circuitry can have knowledge about, is the cutting of a data line 
within the chip. If this attack is somehow detected, it could only be a result of a faulty chip 
(manufacturing defect) or an attack. In either case, the erasure of the secret information is a 
sensible step to take. 

25 Consequently each QA Chip should have 2 Tamper Detection Lines - one for definite attacks, and 
one for possible attacks. Connected to these Tamper Detection Lines would be a number of 
Tamper Detection test units, each testing for different forms of tampering. In addition, we want to 
ensure tiiat tiie Tamper Detection Lines and Circuits tiiemselves cannot also be tampered with. 
At one end of the Tamper Detection Line Is a source of pseudo-random bits (clocking at high 

30 speed compared to the general operating circuitry). The Noise Generator circuit described above 
is an adequate source. The generated bits pass through two different paths - one carries the 
original data, and the other carries the inverse of the data. The wires carrying these bits are in the 
layer above the general chip circuitry (for example, the memory, the key manipulation circuitry 
etc.). The wires must also cover the random bit generator. The bits are recombined at a number 

35 of places via an XOR gate. If the bits are different (they should be), a 1 is output, and used by the 
particular unit (for example, each output bit from a memory read should be ANDed with this bit 
value). The lines finally come together at the Flash memory Erase circuit, where a complete 
erasure is triggered by a 0 from the XOR. Attached to the line is a number of triggers, each 
detecting a physical attack on the chip. Each trigger has an oversize nMOS transistor attached to 

40 GND. The Tamper Detection Line physically goes through this nMOS transistor. If the test fails, 
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the trigger causes the Tamper Detect Line to become 0. The XOR test will therefore fail on either 
this clock cycle or the next one (on average), thus RESETIng or erasing the chip. 
Figur e 3 4 9 Fiaure 22 illustrates the basic principle of a Tamper Detection Line in terms of tests 
and the XOR connected to either the Erase or RESET circuitry. 
5 The Tamper Detection Line must go through the drain of an output transistor for each test, as 
illustrated by Fiquro 350 Fiaure 23 . 

It is not possible to break the Tamper Detect Line since this would stop the flow of 1s and Os from 
the random source. The XOR tests would therefore fail. As the Tamper Detect Line physically 
passes through each test, it is not possible to eliminate any particular test without breaking the 

1 0 Tamper Detect Line. 

It is important that the XORs take values from a variety of places along the Tamper Detect Lines 
in order to reduce the chances of an attack. F i gur e 351 Figure 24 illustrates the taking of multiple 
XORs from the Tamper Detect Line to be used in the different parts of the chip. Each of these 
XORs can be considered to be generating a ChipOK bit that can be used within each unit or sub- 

1 5 unit. 

A typical usage would be to have an OK bit in each unit that is ANDed with a given ChipOK bit 
each cycle. The OK bit is loaded with 1 on a RESET. If OK is 0, that unit will fail until the next 
RESET. If the Tamper Detect Line is functioning correctly, the chip will either RESET or erase all 
key information. If the RESET or erase circuitry has been destroyed, then this unit will not 

20 function, thus thwarting an attacker. 

The destination of the RESET and Erase line and associated circuitry is very context sensitive. It 
needs to be protected in much the same way as the individual tamper tests. There is no point 
generating a RESET pulse If the attacker can simply cut the wire leading to the RESET circuitry. 
The actual implementation will depend very much on what is to be cleared at RESET, and how 

25 those items are cleared. 

Finally, Fiouro 352 Fiqure 25 shows how the Tamper Lines cover the noise generator circuitry of 
the chip. The generator and NOT gate are on one level, while the Tamper Detect Lines run on a 
level above the generator. 
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10.3.6 Protected memory with tamper detection 

It is not enough to simply store secret information or program code in flash memory. The Flash 
memory and RAM must be protected from an attacker who would attempt to modify (or set) a 
particular bit of program code or key Information. The mechanism used must conform to being 
5 used In the Tamper Detection Circuitry (described above). 

The first part of the solution Is to ensure that the Tamper Detection Line passes directly above 
each flash or RAM bit. This ensures that an attacker cannot probe the contents of flash or RAM. A 
breach of the covering wire is a break in the Tamper Detection Line. The breach causes the Erase 
signal to be set, thus deleting any contents of the memory. The high frequency noise on the 

1 0 Tamper Detection Line also obscures passive observation. 

The second part of the solution for flash is to always store the data with its inverse. In each byte, 4 
bits contains the data, and 4 bits (the shadow) contains the inverse of the data. If both are 0, this 
is a valid erase state, and the value Is 0. Otherwise, the memory Is only valid if the 4 bits of 
shadow are the inverse of the main 4 bits. The reasoning is that It Is possible to add electrons to 

1 5 flash via a FIB, but not take electrons away. If it Is possible to change a 0 to 1 for example, it Is 
not possible to do the same to Its inverse, and therefore regardless of the sense of flash, an 
attack can be detected. 

The second part of the solution for RAM is to use a parity bit. The data part of the register can be 
checked against the parity bit (which will not match after an attack). 
20 The bits coming from Flash and RAM can therefore be validated by a number of test units (one 
per bit) connected to the common Tamper Detection Line. The Tamper Detection circuitry would 
be the flrst circuitry the data passes through (thus stopping an attacker from cutting the data 
lines). 

In addition, the data and program code should be stored In different locations for each chip, so an 
25 attacker does not know where to launch an attack. Finally, XORing the data coming In and going 
to Flash with a random number that varies for each chip means that the attacker cannot learn 
anything about the key by setting or clearing an Individual bit that has a probability of being the 
key (the inverse of the key must also be stored somewhere in flash). 

Finally, each time the chip is called, every flash location Is read before performing any program 
30 code. This allows the flash tamper detection to be activated in a common spot instead of when the 
data is actually used or program code executed. This reduces the ability of an attacker to know 
exactly what was written to. 

10.3.7 Boot-strap circuitry for loading program code 

Program code should be kept in protected flash instead of ROM, since ROM is subject to being 
35 altered In a non-testable way. A boot-strap mechanism is therefore required to load the program 
code Into flash memory (flash memory Is In an Indeterminate state after manufacture). 
The boot-strap circuitry must not be in a ROM - a small state-machine suffices. Otherwise the 
boot code could be trivially modified in an undetectable way. 

The boot-strap circuitry must erase all flash memory, check to ensure the erasure worked, and 
40 then load the program code. 
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The program code should only be executed once the flash program memory has been validated 
via Program Mode. 

Once the final program has been loaded, a fuse can be blown to prevent further programming of 
the chip. 

5 10.3.8 Connections in polysilicon layers where possible 

Wherever possible, the connections along which the key or secret data flows, should be made in 
the polysilicon layers. Where necessary, they can be In metal 1 , but must never be in the top 
metal layer (containing the Tamper Detection Lines). 

10.3.Q OverUnder Power Detection Unit 

1 0 Each QA Chip requires an OverUnder Power Detection Unit (PDU) to prevent Power Supply 

Attacks. A PDU detects power glitches and tests the power level against a Voltage Reference to 
ensure it is within a certain tolerance. The Unit contains a single Voltage Reference and two 
comparators. The PDU would be connected into the RESET Tamper Detection Line, thus causing 
a RESET when triggered. 

15 A side effect of the PDU is that as the voltage drops during a power-down, a RESET is triggered, 
thus erasing any work registers. 
10.3.10 — No scan chains or BIST 

Test hardware on an QA Chip could very easily introduce vulnerabilities. In addition, due to the 
small size of the QA Chip logic, test hardware such as scan paths and BIST units could in fact 
20 take a sizeable chunk of the final chip, lowering yield and causing a situation where an error in the 
test hardware causes the chip to be unusable. As a result, the QA Chip should not contain any 
BIST or scan paths. Instead, the program memory must first be validated via the Program Mode 
mechanism, and then a series of program tests run to verify the remaining parts of the chip. 
+1 ^Architecture 

25 Figuro 380 FiQure 28 shows a high level block diagram of the QA Chip. Note that the tamper 
prevention and detection circuitry is not shown. 

44t1 ^Analogue unit 

Figur e 390 Fiqure 29 shows a block diagram of the Analogue Unit. Blocks shown in yellow provide 
additional protection against physical and electrical attack and, depending on the level of security 
30 required, may optionally be implemented. 
11.1.1 Ring oscillator 

The operating clock of the chip (SysCik) is generated by an internal ring oscillator whose frequency 
can be trimmed to reduce the variation from 4:1 (due to process and temperature) down to 2:1 
(temperature variations only) in order to satisfy the timing requirements of the Flash memory. 

35 The length of the ring depends on the process used for manufacturing the chip. A nominal 

operating frequency range of 10 MHz is sufficient. This clock should contain a small amount of 
randomization to prevent attacks where light emissions from switching events are captured. 
Note that this is different to the input scik which is the serial clock for external communication. 
The ring oscillator is covered by both Tamper Detection and Prevention lines so that if an attacker 

40 attempts to tamper with the unit, the chip will either RESET or erase all secret information. 
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FPGA Note: the FPGA does not have an internal ring oscillator. An additional pin (SysClk) 
is used instead. This is replaced by an internal ring oscillator in the final ASIC. 

11.1.2 — ^Voltage reference 

The voltage reference block maintains an output which is substantially independant of process, 
5 supply voltage and temperature. It provides a reference voltage which is used by the PDU and a 
reference current to stabilise the ring oscillator. It may also be used as part of the temperature 
based clock filte r doscr i bod i n Soct i on 10.3.3 on page 1 . 

11.1.3 OverUnder power detection uni t (PDU) 

The OvorUnd e r Pow e r D e tection Un i t (PDU) i s the same as that dosoribod in Soction 10.3.9 on 
10 pag e 1 . 

The Under Voltage Detection Unit provides the signal PwrFailing which, if asserted, indicates that 
the power supply may be turning off. This signal is used to rapidly terminate any Flash write that 
may be in progress to avoid accidentally writing to an indeterminate memory location. 
Note that the PDU triggers the RESET Tamper Detection Line only. It does not trigger the Erase 
1 5 Tamper Detection Line. 

The PDU can be implemented with regular CMOS, since the key does not pass through this unit. 
It does not have to be implemented with non-flashing CMOS. 

The PDU is covered by both Tamper Detection and Prevention lines so that if an attacker 
attempts to tamper with the unit, the chip will either RESET or erase all secret information. 

20 11.1. '1 Power-on Reset and Tamper Detect Unit 

The Power-on Reset unit (POR) detects a power-on condition and generates the PORstL signal 
that is fed to all the validation units, including the two inside the Tamper Detect Unit (TDU). 
All other logic is connected to RstL, which is the PORstL gated by the VAL unit attached to the 
Reset tamper detection lines (s ee S e ct i on 10.3.5 on page 1) w ithin the TDU. Therefore, if the 

25 Reset tamper line Is asserted, the validation will drive RstL low, and can only be cleared by a 
power-down. If the tamper line is not asserted, then RstL = PORstL. 

The TDU contains a second VAL unit attached to the Erase tamper detection lines (ooo Soction 




30 
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11.1.5 — Noise generator 

The Noise Generator (NG) io th e samo as that doscr i bed in S e ct i on 10.3. 4 on pag e 1 . I t is based 
on a 64-bit maximal period LFSR loaded with a set non-zero bit pattern on RESET. 
The NG must be protected by both Tamper Detection and Prevention lines so that if an attacker 
5 attempts to tamper with the unit, the chip will either RESET or erase all secret information. 

In addition, the bits in the LFSR must be validated to ensure they have not been tampered with 
(i.e. a parity check). If the parity check fails, the Erase Tamper Detection Line is triggered. 
Finally, all 64 bits of the NG are ORed into a single bit. If this bit is 0, the Erase Tamper Detection 
Line is triggered. This is because 0 is an invalid state for an LFSR. 

10 44.2 Trim Unit 

The 8-bit Trim register within the Trim Unit has a reset value of 0x00 (to enable the flash reads to 
succeed even in the fastest process corners), and is written to either by the PMU during Trim 
Mode or by the CPU in Active Mode. Note that the CPU is only able to write once to the Trim 
register between power-on-reset due to the TrimOone flag which provides overloading of LocaiidWE. 

1 5 The reset value of Trim (0) means that the chip has a nominal frequency of 2.7MHz - 10MHz. The 
upper of the range is when we cannot trim it lower than this (or we could allow some spread on 
the acceptable trimmed frequency but this will reduce our tolerance to ageing, voltage and 
temperature which is the range 7MHz to 14MHz). The 2.7MHz value is determined by a chip 
whose oscillator runs at 10MHz when the trim register is set to its maximum value, so then it must 

20 run at 2.7MHz when trim = 0. This is based on the non-linear frequency-current characteristic of 
the oscillator. Chips found outside of these limits will be rejected. 

The frequency of the ring oscillator is measured by counting cycles'*^, in the PMU, over the byte 
period of the serial interface. The frequency of the serial clock, SCIk, and therefore the byte period 
will be accurately controlled during the measurement. The cycle count (Fmeas) at the end of the 
25 period is read over the serial bus and the Trim register updated (Trimval) from its power on default 
(POD) value. The steps are shown in F i our e 391 Fioure 30 . Multiple measure - read - trim cycles 
are possible to improve the accuracy of the trim procedure. 

A single byte for both Fmeas and Trimval provide sufficient accuracy for measurement and 
trimming of the frequency. If the bus operates at 400kHz, a byte (8 bits) can be sent in 20|as. By 
30 dividing the maximum oscillator frequency, expected to be 20MHz, by 2 results in a cycle count of 
200 and 50 for the minimum frequency of 5MHz resulting in a worst case accuracy of 2%. 



The 8-bit Trim value is used in the analog Trim Block to adjust the frequency of the ring oscillator 
by controlling Its bias current. The two Isbs are used as a voltage trim, and the 6 msbs are used 
35 as a frequency trim. 



Note that the PMU counts using 12-bits, saturates at OxFFF, and retums the cycle count divided by 2 as an 
8-blt value. This means that multiple measure-read-trim cycles may be necessary to resolve any 
amibguity. In any case, multiple cycles are necessary to test the correctness of the trim circuitry during 
manufacture test. 




figure 31 shows a block diagram of the Trim Unit: 
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The analog Trim Clock circuit also contains a Temperature filter as doscr i bed i n Section 10.3.3 on 
pag e 1 . 

44t3 lO Unit 

The OA Chip acts as a slave device, accepting serial data from an external master via the lO Unit 
5 (lOU). Although the lOU actually transmits data over a 1-bit line, the data is always transmitted 
and received in 1 -byte chunks. 

The lOU receives commands from the master to place it in a specific operating mode, Which is 
one of: 

Idle Mode: is the startup mode for the lOU if the fuse has not yet been blown. Idle Mode is 
1 0 the mode where the OA Chip is waiting for the next command from the master. Input 

signals from the CPU are ignored. 
• Program Mode: is where the QA Chip erases all currently stored data in the Flash memory 
(program and secret key information) and then allows new data to be written to the Flash. 
The lOU stays in Program Mode until told to enter another mode. 
15 • Active Mode: is the startup mode for the lOU if the fuse has been blown (the program is 

safe to run). Active Mode is where the QA Chip allows the program code to be executed to 
process the master's specific command. The lOU returns to Idle Mode automatically when 
the command has been processed, or if the time taken between consuming input bytes 
(while the master is writing the data) or generating output bytes (while the master is reading 
20 the results) is too great. 

Trim Mode: is where the QA Chip allows the generation and setting of a trim value to be 
used on the internal ring oscillator clock value. This must be done for safety reasons before 
a program can be stored in the Flash memory. 

Se e Section 12 on page 1 for d e tail e d information about tho l OU. 

25 44r4 Central Processing Unit 

The Central Processing Unit (CPU) block provides the majority of the circuitry of the 4-bit 
microprocessor. F i gure 303 FiQure 32 shows a high level view of the block. 
44:5 Memory Interface Unit 

The Memory Interface Unit (MIU) provides the interface to flash and RAM. The MIU contains a 
30 Program Mode Unit that allows flash memory to be loaded via the lOU, a Memory Request Unit 
that maps 8-bit and 32-bit requests into multiple byte based requests, and a Memory Access Unit 
that generates read/write strobes for individual accesses to the memory. 
F i gur e 39 4 Fiaure 33 shows a high level view of the MIU block. 
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44t6 Memory Components 

The Memory Components block isolates the memory implementation from the rest of the QA 
Chip. 

The entire contents of the Memory Components block must be protected from tampering. 
5 Therefore the logic must be covered by both Tamper Detection Lines. This is to ensure that 
program code, keys, and intermediate data values cannot be changed by an attacker. The 8-bit 
wide RAM also needs to be parity-checked. 



SKBytes of flash memory and 3072 bits of parity checked RAM. 
10 RAM 

The RAM block is shown here as a simple 96 x 32-bit RAM (plus parity Included for verification). 
The parity bit is generated during the write. 

The RAM is in an unknown state after RESET, so program code cannot rely on RAM being 0 at 
startup. 

15 The initial version of the ASIC has the RAM implemented by Artisan component RA1SH (96 x 32- 
bit RAM without parity). Note that the RAMOutEn port is active low i.e. when 0, the RAM Is enabled, 
and when 1 , the RAM is disabled. 
11.6.2 Flash memory 

A single Flash memory block is used to hold all non-volatile data. This includes program code and 
20 variables. The Flash memory block is implemented by TSMC component SFC0008_08B9_HE [4], 
which has the following characteristics: 



The Fiashctri line are the various inputs on the SFC0008_08B9_HE required to read and write 
bytes, erase pages and erase the device. A total of 9 bits are required (see [4] for more 
information). 

Flash values are unchanged by a RESET. After manufacture, the Flash contents must be 
35 considered to be garbage. After an erasure, the Flash contents in the SFC0008_08B9_HE is all 

1s, 

^VAL blocks 




Figure 34 shows a high level view of the Memory Components block. It consists of 



25 



BK X 8-bit main memory, plus 128 x 8-bit information memory 

512 byte page erase 

Endurance of 20,000 cycles (min) 

Greater than 100 years data retention at room temperature 
Access time: 20 ns (max) 



30 



Byte write time: 20|is(min) 
Page erase time: 20ms (min) 
Device erase time: 2 00 ms (min) 
Area of 0 . 494mm^ (724.66|im x 682.05^m) 
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The two VAL units are validation units connected to the Tamper Prevention and Detection circuitry 
(describ e d i n S e ct i on 10.3.5 on pago 1) , each with an OK bit. The OK bit is set to 1 on PORstL, and 
ORed with the ChipOK values from both Tamper Detection Lines each cycle. The ok bit is ANDed 
with each data bit that passes through the unit. 
5 In the case of vali, the effective byte output from the flash will always be 0 if the chip has been 
tampered with. This will cause shadow tests to fail, program code will not execute, and the chip 
will hang. 

In the case of val2, the effective byte from RAM will always be 0 if the chip has been tampered 
with, thus resulting in no temporary storage for use by an attacker. 
10 45 I/O Unit 

The I/O Unit (lOU) is responsible for providing the physical implementation of the logical interface 
d e scr i b e d in S e ction 5.1 on pago 1 , moving between the various modes (Idle, Program, Trim and 
Active) according to commands sent by the master. 

The lOU therefore contains the circuitry for communicating externally with the external world via 
1 5 the scik and Soa pins. The lOU sends and receives data in 8-bit chunks. Data is sent serially, 
most significant bit (bit 7) first through to least significant bit (bit 0) last. When a master sends a 
command to an OA Chip, the command commences with a single byte containing an id in bits 7-1 , 
and a read/write sense in bit 0, as shown in F i gur e 396 Fiqure 35 . 

The lOU recognizes a global id of 0x00 and a local id of Locaiid (set after the CPU has executed 
20 program code at reset or due to a global id / ActiveMode command on the serial bus). 

Subsequent bytes contain modal information in the case of global id, and command/data bytes in 
the case of a match with the local id. 

If the master sends data too fast, then the lOU will miss data, since the lOU never holds the bus. 
The meaning of too fast depends on what is running. In Program Mode, the master must send 
25 data a little slower than the time it takes to write the byte to flash (actually written as 2 x 8-bit 

writes, or 40)js). In ActiveMode, the master is permitted to send and request data at rates up to 
500 KHz. 

None of the latches in the lOU need to be parity checked since there is no advantage for an 

attacker to destroy or modify them. 
30 The lOU outputs Os and inputs Os if either of the Tamper Detection Lines is broken. This will only 

come into effect if an attacker has disabled the RESET and/or erase circuitry, since breaking 

either Tamper Detection Lines should result in a RESET or the erasure of all Flash memory. 

The lOU's inByte, inByteVaiid, OutByte, and OutByteValid registers are used for communication between 

the master and the OA Chip. inSyte and inByteVaiid provide the means for clients to pass commands 
35 and data to the QA Chip. OutByte and OutByteVaiid provide the means for the master to read data 

from the QA Chip. 

Reads from inByte should wait until inByteVaMd is set. InByteVaiid will remain clear until the 
master has written the next input byte to the QA Chip. When the lOU is told (by the FEU 
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or MU) that inByte has been read, the lOU clears the inByteVaiid bit to allow the next byte to 
be read from the client. 

• Writes to Outsyte should wait until OutSyteVaiid is clear. Writing Outsyte sets the Out- 

ByteVaiid bit to Signify that data is available to be transmitted to the master. OueyteVaiid will 
then remain set until the master has read the data from OutByte. If the master requests a 
byte but OutByteVaiid Is dear, the lOU sends a NAck to Indicate the data is not yet ready. 
When the chip is reset via RstL. the lOU enters ActiveMode to allow the PMU to run to ioad the 
fuse. Once the fuse has been loaded (when MiUAvaii transitions from 0 to 1) the lOU checks to see 
if the program is known to be safe. If it is not safe, the lOU reverts to IdleMode. If It is safe 
(FuseBiown = 1 ), the lOU stays in ActiveMode to allow the program to load up the locaiid and do any 
other reset initialization, and will not process any further serial commands until the CPU has 
written a byte to the OutByte register (which may be read or not at the discretion of the master 
using a locaiid read). In both cases the master is then able to send commands to the OA Chip-as 
doscribod i n Soct i on 5.1 on page 1 . 
Fiauro 30 7 Fiaure 36 shows a block diagram of the lOU. 

With regards to inByteVaiid Inputs, set has priority over reset, although both set and reset in conrect 
operation should never be asserted at the same time. With regards to lOSetinByte and lOLoadinByte, 
if lOSetinByte is asserted, it will set InByte to be OxFF regardless of the setting of lOLoadinByte. 
The two VAL units are validation units connected to the Tamper Prevention and Detection circuitry 
(d e scr i bed in S e ction 10.3.5 of th e Archltoctur e Overvi e w chaptor) , each with an OK bit. The OK 
bit is set to 1 on porsil, and ORed with the ChlpOK values from both Tamper Detection Lines 
each cycle. The OK bit is ANDed with each data bit that passes through the unit. 
In the case of vali, the effective byte output from the chip will always be 0 if the chip has been 
tampered with. Thus no useful output can be generated by an attacker. In the case of val2, the 
effective byte input to the chip will always be 0 if the chip has been tampered with. Thus no useful 
input can be chosen by an attacker. 

There is no need to verify the registers in the lOU since an attacker does not gain anything by 
destroying or modifying them. 

The current mode of the lOU is output as a 2-bit lOMode to allow the other units within the QA Chip 
to take correct action. lOMode is defined as shown in Tabl e 372 Table 16 : 

Table 372 T able 16 . lOMode values 



Value 


Interpretation 


00 


Idle Mode 


01 


Program Mode 


10 


Active Mode 


11 


Trim Mode 



The Logic blocks generate a 1 if the current lOMode is in Program Mode, Active Mode or Trim 
Mode respectively. The logic blocks are: 
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Logici 


lOMode = 01 (Program) 


LogiC2 


lOMode = 10 (Active) 


Logics 


IOMode = 11 (Trim) 



State machine 

There are two state machines in the lOU running in parallel. The first is a byte-oriented state 
5 machine, the second is a bit-oriented state machine. The byte-oriented state machine keeps tracic 
of the operating mode of the QA Chip while the bit-oriented state machine keeps track of the low- 
level bit Rx/Tx protocol. 

The SDa and scik lines are connected to the respective pads on the QA Chip, The lOU passes 
each of the signals from the pads through 2 D-types to compensate for metastability on input, and 
1 0 then a further latch and comparltor to ensure that signals are only used if stable for 2 consecutive 
internal clock cycles. Th e circuit is shown i n S e ct i on 12.1.1 b el ow. 
12.1.1 Start/Stop control signals 

The startDetected and stopDetected control Signals are generated based upon monitoring soa 
synchronized to scik. The startDetected condition is asserted on the falling edge of soa synchronized 
15 to scik, and the stopDetected condition is asserted on the rising edge of soa synchronized to scik. 
In addition we generate fescik which is asserted on the falling edge of scik, and rescik which is 
asserted on the rising edge of scik. Finally, feSdkPrev is the value of fescik delayed by a single 
cycle. 

F i gur e 398 Fiqure 37 shows the relationship of inputs and the generation of SDaReg, reSCik, feSCik, 
20 feSclkPrev, StartDetected and StopDetected. 

The SDaRegSeiect logic compensates for the 2:1 variation in clock frequency. It uses the length of 
the high period of the scik (from the saturating counter) to select between sda5, sda6 and sda7 as 
the valid data from 300ns before the falling edge of scik as follows. 

The minimum time for the high period of scik is 600ns. If the counter <= 4 (i.e. 5 or fewer cycles 
25 with scik = 1 ) then SDaReg output = sdas (sample point is equidistant from rising and falling edges). 
If the counter = 5 or 6 (i.e. 6 or 7 samples where scik = 1 ) , then SDaReg output = sdaS. If the 
counter = 7 (the counter saturates when there are 8 samples of scik = 1 ), then SDaReg output = 
sda7. This is shown in pseducode below: 
If {(counters = 0) v (counter = 4)) 
30 SDaReg = sda5 

Elself (counter = 7) 

SDaReg = sda? 
Else 

SDaReg = sda6 
35 Endlf 

The counter also provides a means of enabling start and stop detection. There is a minimum of a 
600ns setup and 600ns hold time for start and stop conditions. At 14MHz this means samples 4 
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and 5 after the rising edge (sample 1 is considered to be the first sample where SCIk = 1 ) could 
potentially include a valid start or stop condition. At 7 MHz samples 4 and 5 represent 284 and 
355ns respectively, although this is after the rising edge of scik, which itself is 100ns after the 
setup of data (i.e. 384 and 455ns respectively and therefore safe for sampling). Thus the data will 
5 be stable (although not a start or stop). Since we detect stops and starts using sdas and sda6, we 
can only validly detect starts and stops 6 cycles after a rising edge, and we need to not-detect 
starts and stops 4 cycles before the falling edge. We therefore only detect starts and stops when 
the counter is >= 6 (i.e. when scik3 and scik2 are 0 and 1 respectively, sda2 holds sample 1 
coincident with the rising edge, sdai holds sample 2, sdao holds sample 3, we load the counter with 
10 0 and sample SDa to obtain the new sdaO which will hold sample 4 at the end of the cycle. Thus 
while the counter is incrementing from 0 to 1 , sdaO will hold sample 4. Therefore sample 4 will be 
in sda6 when the counter Is 6. 

12.1.2 Control of SDa and SGIk pins 

The scik line is always driven by the master. The SDa line is driven low whenever we want to 
1 5 transmit an ACK (SDa is active low) or a 0-bit from OutByte. The generation of the SDa pin is shown 
in the following pseudocode: 

TxAck = (bitSM_state = ack) a { (byteSM_state = doWrite) v 

( ( (byteSM_state = getGlobalCmd) v {byteSM_state = checkid) ) 
A AckCtnd) ) 

20 TxBit <- (byteSM_state = doRead) a (bitSM_state = xferBit) a 

-.OutByte^bitcovmt 

SDa = -i{TxAck V TxBit) # only drive the line when we are 
xmitting a 0 

The slew rate of the SDa line should be restricted to minimise ground bounce. The pad must 
25 guarantee a fall time > 20ns. The rise time will be controlled by the external pull up resistor and 
bus capacitance. 

12.1.3 Bit oriontod state machine 

Tho b i t or i ontod stat e machine koops track of the general flow of ser i al 
transmiss i on inc l ud i ng start/dota/ack/stop as shown i n tho follow i ng psoudocodo: 

30 

EndBytQ « FALSE 

EndAck ° FALSE 

If (StartDctcatcd) 

otatc < — otarting 

35 Biee 

otatc < — idle 

Bndlf 

otarting 
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BndBytc = FALSE 

EndAclc = FAIiSE 

NAgIc < a 

£f — ( S topDctcatGd) 

5 otatG < — idle 

BloGlf ( f GSClkPrcv) 

bitCoxint < — & 

OtatG < — xf GrBit 

ElOG 

10 OtatG < — otarting # includGO StartDctGCtGd 

Endlf 

xf crDit 

EndAcJc = FAIiCE 

BndBytc = — (fcScllcrrcv a (bitCount = 0)) — # after f cSclk 

bitCount muot be 1.. 8 
If (fGCClk) 

ohif tLGf t [ioBytc, — SDaRGg] — # — capture — fehe — feit — ia — fefee — ioBytc 

ohift rcgiotcr 

bitCoxint < — bitCount i 1 # modulo count due to 3 bit bitCount 

Endlf 

i€ — (StopDctGCtcd) 

OtatG < — idle 

EloGlf — ( StartDctGCtGd) 

OtatG < — otarting 

Elocif — (BndBytc) 

OtatG < — aek 

Eloc 

otate < — xf crBit 

Endlf 

aclc 

BndBytc ° FALSE 

EndAck = fcSclkPrcv 

35 If (StopDctGCtcd) 

otate < — idle 

Bloclf (StartDctGCtGd) 

OtatG < — otarting 

Elocif (EndAck) 




15 



20 



25 



30 
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otato < — xf crBit — # bit Count io already 0 

Eloc 

If (fcSClk) 

NAclc < SDaRcg # active low, oo 0 - ACK, 1 - NACK 

Endlf 

otato < — aek 

Endlf 

12.1.4 Byt e orientod state mach i n e 

Th e fel l ow i ng pGoudocod e il lustrat e s the genore l startup stat e of th e l OU and tho rece i pt of a 
transmission from th e mast e r. 

rotL # ootup otato of rcgiatoro on rooot 

IQModo < — ActivoModo — # to force the fuao to be loadod 

OutBytcValid < 0- 

Out Byte ( 9- 

InBytoValid < 1 — # required 

InBytc < OxFF # byte - FF - the — 'rcoot ^ — cominand 

localld < — 9 # — loada — localld with the globalld oo no localld 

cxiato 

otato < — wait 4 f uae 

wait 4 f uoe 

If (MIUAvail) 

^ — (FuoeBlown) # — thio — muot — fee — done — same — eyole — eta — oeeing 

MIUAvail go high 

otate < — wait4opu 

Eloe 

lOMode < IdleMode — # — GPU — will — new — require — aaa — external 

AetiveMode to otart 

otate < — idle 

Sloe 

otate < — wait4fuoe 

Endlf 



wait 4 cpu 

^ — ( C PUOut By t OWE ) # wait for CPU rcoct activitico to finioh 

otate < — idle ft notC! v^c'rc otill in AetiveMode 

Eloe 

otate < — wait4cpu 

Endlf 
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If (StartDctGctcd) 

Gtatc < — chcGlcId 

ElOG 

otatG < — idle 

Endlf 

The first byt e r e ce i v e d must bo chookod to onouro it is moant for ovoryono (g i obai i d of 0) or 
specifica ll y for us ( l oca ii d matches). Wo on l y s e nd an ACK to a r e ad whon thoro i s data ava il ablo to 
sohd. In addition, wr i tes to the gonoral co l l address (0) ar e always ACKod, but roads from the 
gonoral ca ll addr e ss ar e only ACKod boforo tho fuse has b ee n b l own. 

chcckld 

ioWritG = — (ioBytc^ = 0) 

ioRoad ° — (ioBytc^ ° 1) 

iaClobal = — (ioBytC: y-a , = 0) 

globalW = ioGlobal a ioWritc 

loGalW ° — (ioBytO y ^ - locallD) — a ioWritc a — l ioGlobal 

localR « (ioBytG: 7_a, = locallD) a ioRcad a ( i GlobalW v 

i FusGBlown) 

— (StopDGtGGtcd) 

OtatG < — idle 

EloGlf (EndDytc) 

AQlcCmd_in = — (globalw v localW) — v — (localR a OutBytcValid) 

AQlcCmd < — AQkCmd_in 

If (loQalW) 

lOModc < — IdlGModG — # jic any output wao panding 

lOOutBytcUoGd = 1 

lOClcarlnBytG = 1 # anourG thoro io nothing hanging around 

from boforo 

Endlf 

Eloolf (EndAolc) 

M — (globalw) # globalw and looalW aro mutually oxcluoivo 

otato < — gctClobalCmd 

EloQif (localW) 

lOModo < — AotivoModc 

lOLoadlnBytG » 1 # will oot inDyto to looalW — (lob will be 

otato < — doWrito 

EloGlf — (localR A lOModOj, a AokCmd) # — Activo — mode — tea? — Trim 

when fuoo intact) 
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atatQ < — doRcad. 

Bloc 

atatc < — idle — # — ignore — reado — unleoa — f irot — ifi — active — ©3? 

trim mode 

Endlf 

Eloe 

otatc < — chcckid 

Endlf 

With a now g l oba l command th e lOU waits for th e mod e byt e (se e Tab le pag e 6 on page 1 ) 
to d e termin e th e now operat i ng mod e : 

gctClobalCmd 

want Prog = — ( (ioByto = ProgramModeld) — a — iFuocDlown) 

wantTrim = — ( (ioBytc = TrimModcId) — a — iFuooBlown) 

wantActivc = — (ioBytc = ActivcModoId) 

£^ — (StopDctGctcd) 

otate < — idle 

Elocif (StartDctcctcd) 

otatc < — chcclcid 

Elacif (EndBytc) 

AG3cCmd_in = wantActivc v want Prog v wantTrim # — only ACK emdo 

we can do 

AclcCmd < — Ac]cCmd_in 

If (AGkCmd_in) 

lOModc < — IdlcModc — # jic any output wao pending 

lOOutDytcUoed ° 1 

lOClearlnByto = 1# cnoure there io nothing hanging around 

from before 

Endlf 

Elaelf (EndAolt:) 

£f — (want Prog) 

lOMode < — ProgramMode — # — don^ t — load — inByte — fwe — only — want 

the data) 

otate < — doWrite 

Eloolf — (wantTrim) 

lOModc — < TrimMode — # — don^ t — load — InByte — ^we — only vfant — 

next byte) 

otate < — doWrite 

Eloelf — (wantActivc) # muot be Active 

lOMode < — ActivcMode 
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lOSotlnDytc = 1 # — 0 — ie^? — aii — other — caoca — & — otatca , — 1 — » 

OGto inDytQ to OxFF 

lOLoadlnBytc « 1 # octo InBytoValid — (InBytc io oct to OxFF 

( ^rcoot^ — cmd) ) 

otato < — wait 4 cpu tt — don^ t — de — anything — feari — — ej&tt — hae- 

complotcd thio taolc 

BlOG 

otatc < — idle — # unJcnown id, — oo ignore remainder 

Bndlf 



10 Bise 

otatc < — gctClobalCmd 

Endlf 



When tho master wr i t e s bytes to the QA Chip ( e .g. paramotors for a command), th e program must 
consum e th e byt e fast e nough ( i . e . during th e s e nd i ng of tho ACK) or subsequent bits may bo 
15 lestr 
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Th e procosQ of rooo i ving bytos io ohown in tho following pseudocodo: 
doWritc 

If (StopDotoGtcd) 

otatc < — idle # — otay — i*a — whatever — lOMode — %#e 

5 were in 

Bloolf (StartDQtGGtod) 

atatc < — chcckld 

Bloc 

If (BndDyte) 

10 lOLoadlnByte « — ilnByteValid 

Endlf 

^ — (EndBytQ A InByteValid) # will — only be — when maoter — ocndo 

data too quialcly 

otatc < idle # — ftGK — will — aet — fee 

1 5 ocnt when in idle otatc 
Elae 

otate — i doWrito — # — ACK will — fee — oent — automatically after 

byte ia Rxed 

Endlf 

20 Endlf 

Wh e n th e mastor wants to r e ad, tho l OU s e nds on e byte at a tim e as r e qu e sted. Tho proooss io 
shown in the following psoudooodo: 

doRcad 

^ — ( StopDctcGtcd) 

25 otatc < idle 

Blocif (GtartDctcetcd) 

otate < — cheekld 

BloGlf (BndAclc) 

If (NAck V — iGutDyteValid) 

30 otate < — idle 

Eise 

otate < — doRead 

Endlf 

Eloe 

35 If (EndByte) 

lOOutByteUoed ■ 1 

Endlf 

otate < — doRead 

Endlf 
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43 F e tch and Exoout e Unit 

43t^ I ntroduction 

Th e OA Ch i p do e s not r e qu i r e tho h i gh spoods and throughput of a gonora l purpose CPU. I t must 
op e rat e fast e nough to p e rform th e auth e ntication protocols, but not fostor. Rathor than havo 
5 sp e c i a li zed circuitry for opt i m i zing branch control or ex e cut i ng opcodes wh i l e f e tching tho noxt 
on e (and a ll th e complex i ty assoc i at e d w i th that), tho stat e machino adopts a simp l ist i c v ie w of the 
wor l d. This h el ps to minimiz e d e sign tim e as wel l as reduc i ng th e possibility of orror i n 
implomontat i on. 

Th e FEU is r e sponsible for g e n e rat i ng th e operating cycles of tho CPU, stal l ing appropriate l y 
10 dur i ng long command oporat i ons due to memory lat e ncy. 

Wh e n a n e w transact i on b e gins, th e FEU w ill gonorat e a jpz Oump to zoro) instruction. 
Th e g e n e ra l operat i on of th e FEU is to g e n e rate sots of cycl e s: 

Cyclo 0 ! fotch cyci e e. This i s whore th e opcod e i s f e tched from tho program memory, 

and th e e ffective address from tho fetched opcode i s gon e ratod. Th e Fotoh output flag i s s e t 
15 during th e fina l cycl e 0 (i.o. when th e opcode is fina l ly val i d). 

Cycle 1 ! oxoGuto cyclo. This is wh e r e the operand is (pot e ntial l y) look e d up v i a tho 

g e n e rat e d e ff e ctiv e address (from Cycl e 0) and the operation its e lf i s e x e cuted. The Ekoo 
output fiag is sot dur i ng tho fina l cyclo 1 ( i .o. when tho op e rand is finally val i d). 
Under normal cond i tions, th e state machin e gen e rat e s mult i p l e Cyoio-o follow e d by mult i ple 
20 Cyc i o-1. Th i s is becaus e the program is stor e d in flash memory, and may take multiple cycles to 
road. In add i t i on, wr i tes to and erasures of flash m e mory take differing numb e rs of cycles to 
p e rform. The FEU wi ll stall, g e nerat i ng mu l t i pl e i nstances of the sam e Cyc l o va l ue with Fotch and 
Exoo both 0 unt il tho i nput M i URdy ~ 1 , whereupon a Fotch or Exoo pu l s e w ill b e generat e d in that 
same cyc l e. 

25 Th e r e ar e a l so two cases for sta l ling duo to ser i a l I /O operations: 

Tho opcodG i a RO T X OutDyto, and OutBytoVa l id - 1 . This moans that tho current operat i on 

requires outputting a byte to tho master, but th e mast e r hasn't read tho l ast byt e yet. 

The oporat ion io ROR in B yto, and i n B ytoVai i d - 0. Th i s means that tho current 

op e ration requires read i ng a byte from tho master, but tho master hasn't supp l i e d tho byto 
30 yet 

I n both th e se cas e s, the FEU must stal l until th e stal l ing condition has fin i shed. 
F i na ll y, th e FEU must stop oxocuting code if tho lOU exits Act i ve Modo. 
Tho local Cmd opcodo/oporand l atch ne e ds to b e parity check e d. The l og i c and r e g i st e r s 
conta i n e d i n the FEU must b e covorod by both Tamper Dotoction Lin e s. This i s to ensure that th e 
35 i nstructions to b e e x e cut e d are not changed by an attackor. 
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4^72 State Machine 

The Fotch and Exocuto Un i t (FEU) is combinatorial logic with the fo l low i ng regist e rs: 

Tabl e 373. FEU Reglstors 







Doscription 


Output registers (visiblo outoido tho FEU) 


Cycle 


4- 


0 if tho FEU is currently fetching an opcode, 1 if tho 




FEU is currently executing the opcode. 


NewMemTrans 


1- 






Is asserted during the start of a potential new memory 
access « 


y — mis IS noi me Tirsi cycie ot a set ot uycio u or uycie 
+ 




(previous cycle must have boon a Fotch or an Exec). 


Go 


4- 




T — It — ine new — is currenuy — leioning — a no executing 


program code (i.e. a program is currently running), 0 H 
it is not. 


Local registers (nc 


)t visible 


t outside the FEU) 


CurrCmd 




Holds — the — currently — executing — instruction — (parity 
checked). 


PondingKill 


1- 






The currently executing program is waiting to be halted 
(waiting duo to memory access) 




PondingStart 


4- 






A new transaction is waiting to bo started (waiting due 


to memory access or an existing transaction not yet 
stopped) 


Wasldle 


4- 


Tho previous cycle had an lOMode of IdloModo. 







In add i tion, the fo ll ow i ng e xt e rna ll y visib l o outputs are generat e d asynchronous l y: 
Table 374. External l y vis i bl e asynchronous FEU outputs 



Name 




Description 


Fotch 


4- 


1 if the FEU is performing tho final cycle of a fotch (I.e. 
Cycle will also bo 0). It is set when tho NoxtCmd 




output Is valid. Tho local Cmd register is latchod during 
the Fotch cycle with either tho incoming MIUSData or 


an FEU gonoratod command. 




Exec 


1- 


1 if the FEU is performing the final cycle of an execute 




(i.e. Cycle will also be 1). It is set when the data 




required by tho opcode from tho MIU is valid. Other 



PEA23US 



970 







units can oxocuto tho Cmd and latch data from tho 

Mill (f^ O K^il Attr'm^^ CIvai^ r^\/r>\^ 


ivrt^ ^cy. iiuiit ivinjuoiuy uurniy iiitJ cxtjO OyUrg? 




g 




vvnen oyciQ — u, inis noios tno noxt instruction to do 


executed (during tho next Cyclo " 1 ). is gonorotod 
based on incoming MIUSData or substituted FEU 


command (o.g. JSR 0). 

When Cycie - 1, this hoids tho current instruction 




boing oxocuted (based on thoCmd). 



Tho Cycle and ourrCmd registers aro not us e d dir e ct l y. I nstead, their outputs aro pass e d through a 
VAL unit boforo use Th e VAL un i ts ar e d e sign e d to val i dato tho data that passes through them. 
Each conta i ns an OK bit connoctod to both Tamper Provontion and Detoct i on L i n e s. Tho OK b i t is 
5 sot to 1 on PORGtL, and ORod w i th th e Ch i pOK va l u e s from both Tamper Detection Linos each 
cycl e . Tho OK b i t is AND e d w i th each data b i t that pass e s through th e un i t 
I n tho case of VAU, tho offoct i vo Cyoio will a l ways be 0 if tho chip has boon tamper e d w i th. Thus no 
program code w i l l execute. 

In tho case of VALa, tho offoctivo 8 bit currCmd va l ue will always bo 0 if th e chip has boon tampered 
10 with. Mu l t i p le Os w ill bo i nterpr e t e d as the jsr o instruction, and this wi l l offoct i voly hang tho CPU. 
VAL a also performs a par i ty check on tho bits from currCmd to ensure that ourrCmd has not boon 
tampered w i th. If the parity chock fa i ls, the Erase Tamper Dotoction L i n e is triggered. For moro 
information on Tamper Provontion and Detection circu i try, see Section 10.3.5 on page 1. 

13.2.1 Ps e udocod e 

1 5 rcoct: Gonditiono! 

Fetch ° 0 

Exec « 0 

Cycle < — 9- 

currCmd < — & 

20 Go^ & 

pcndingKill < & 

pcndingStart < — 

ncwMcmTrano < — 9^ 

waoIdlG < — 1 # required to dcticct — if lOU otarto in a non idle 

25 Dtatc 

Th e cyclo by cyc l e combinatorial l ogic b e hav i our i s shown i n th e fo ll ow i ng 
ps e udocode: 

ioActivG « — (lOModc = ActivGModc) 

waoIdlG < (lOModc = IdlcModc) 

30 wantToStart — (pondingStart v waoldlo) — a ioActivc 

ncvfTrano ^ wantToStart a — iGo a MIUAvail 
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pcndingGtart — < — wantToCtart a — incwTrano 
IcillTrano = Go a — ( l iaActivc v pcndingKill) 



Fetch ° nowTrana v — (Go a — iCyclc a MIURdy a — i killTrana) 

5 inDclay ° — (currCmd = ROR InBytc) — a — i lnBytcValid 

outDolay = — (currCmd = ROR OutByto) — a QutBy to Valid 

ioDclay = inDolay v outDolay 

Exec = Go A Cycle a MIURdy a — l ioDclay 

10 If (Cycle) 

Cmd ° currCmd 

Blocif — ( ncwTrano ) 

Cmd a JPZ # jump to 0 

Elae 

15 Cmd ° MIU S Data 

Endlf 

rcoctCo = (MIURdy a killTrano) v (Fetch a (Cmd ° HALT) ) 

pcndingKill < — IcillTrana a — .reoetGo 

20 

changeCyclc « Fetch v Exec # will only be 1 when Go 

Cycle < — newTrano v — ( (Cycle @ changeCycle) — a — ■ roactCo) 

nowMemTrano < — newTrano v — (changeCycle a — i reoetGo) 

25 If (Fetch) 

currCmd < — Gmd 

Endlf 



— (reoetGo) 

30 Ge— < — ^ 

Eloolf — ( newTrano ) 

Ge— < — i 

Endlf 

44 AUJ 

35 The Arithmot i o Logic Unit (ALU) conta i ns o 32 b i t Ago (Acoumuiator) r e gister as w ell as tho cirouitry 
for c i mp i o arithmet i c and logica l op e rations. 

Tho l ogic and reg i sters oontoinod in th e ALU must b e cov e r e d by both Tamper Potoot i on Linos. 
Th i s is to ensure that k e ys and int e rm e d i at e ca l culation va l u e s cannot be chang e d by an attacker. 
I n add i tion, tho Accumu l ator must bo par i ty check e d. 
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A 1 bit z s i gnal r e pr e s e nts tho stato of zero - n e ss of tho Aocumuiator. Th e Accumulator is c le ar e d to 0 
upon a RotL, and tho z signal is sot to 1 . The Aooumuiator i s updatod for any of th e oommands: and. 
OR, XOR, ADD. ROR. and R i A, and tho z signa l I s updated when e v e r tho Acoumuiator i s updated. Noto 
that tho Z signa l I s actua ll y imp l omonted as a nonz r e gist e r whose output is passed through an 
invortor and us e d as z. 

Each ar i thm e tic and l og i ca l block operat e s on two 32 bit inputs: tho curront value of tho 
Accumu l ator, and th e curr e nt 32 bit output of tho DataS el block ( ei ther th e 32 b i t va l ue from 
M I UData or an i mm e d i at e value). Tho AND, OR, XOR and ADD b l ocks perform the standard 32 
b i t operat i ons. Tho rema i n i ng blocks are out li ned bo l ow. 
Figur e 399 shows a block diagram of tho ALU: 

Tho Accumulator i s updat e d for a l l instructions wh e r e th e high bit of tho opcod e is sot: 



l=e§46+ 



Exoc A Cmd/ 



Sinc e the WritoEnab l oo of Ago and nonZ takes Cmd? and Exoo i nto account (duo to Log i cs), those two 
bits are not required by tho multiplexor Mx» in ord e r to s e lect tho output. Tho output s ele ction for 
MX ^ only requ i res bits 6 3 of the Cmd and is th e refor e simp l er as a resu l t (as shown In Table 375). 

Tabl e 375. Selection for multip l exor MX4 



Output 



dtxuLs « 



immOut 



Ollx V 1110 (LD) 



r orOut 



from XOR 



From ADD 



From AND 



From OR 



1 0 Ox V 1111 (RIA, ROR) 



OOlx V 1100 (XOR) 



0103C V 1101 (ADD) 



0000 V 1010 (AND) 



0001 V 1011 (OR) 



Th e two VAL un i ts ar e val i dat i on un i ts connected to tho Tamp e r Pr e vent i on and D e t e ction c i rcu i try 
(d e scr i bed in Sect i on 10.3.5 on pag e 1), each with an ok bit. Th e ok b i t i s sot to 1 on porgil, and 
OR e d with th o Ch i pOK values from both Tamper Det e ct i on Lin e s e ach cyc le . Tho OK b i t i s ANDod 
with e ach data bit that pass e s through the unit. 

I n tho case of vau, the effoct i v e b i t output from the Aooumuiator w ill always bo 0 if the chip has b ee n 
tamp e red with. This pr e vents an attack e r from proc e ssing anyth i ng involv i ng th e Accumu l ator, vau 
a l so performs a parity chock on th e Accumulator, s e tt i ng tho Erase Tamper D e t e ct i on L i ne if tho 
ch e ck falls. 

In tho case of VALa, tho effectiv e z status of tho Aooumu i ator wi l l always b e tru e if th e ch i p has boon 
tampered with. Thus no l oop i ng constructs can b e cr e at e d by an attackor. 
^AA DataSel Block 

The DataS e l block i s des i gn e d to imp le ment the s el ect i on betw ee n th e M I U32Data and th e 
i mmed i ate addr e ssing mode for log i cal commands. 
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I mmed i ato addross i ng rolios on 3 b i to of oporand, p l us an optional 8 b i ts at PC*1 to dotorm i no an 
8 - b l t base va l u e . B i ts 0 to 1 dotormino wh e ther tho bas e value comes from tho opcode byto i tooif, 
or from PC*1 , as shown i n Table 376. 

Tab le 376. S e lect i on for base value I n i mmodlato mode 



Omd'4-.0 


Base valuo 




00000000 




00000001 




From PC+1 (i.o. MIUData,^) 




11111111 



10 



15 



20 



25 



Th e base value is computed by us i ng cmdq as b i t 0, and copying cmd4 into the upper 7 bits. 

The 8 bit bas e va l ue forms th e l owor 8 bits of output. Th e se 8 b i ts aro a l so ANDed w i th th e senso 

of whether tho data i s replicat e d in tho upper bits or not (i.e. CMDg). The resu l tant bits aro copied i n 

3 tim e s to form the upper 2 4 b i ts of the output. 

Figur e 400 shows a block d i agram of tho ALU's DataS el b l ock: 

4472 ROR Block 

Th e ROR b l ock imp le ments the ror and ria functionality of th e ALU. 

A 1 bit regist e r nam e d rtmp is contain e d w i thin the ROR unit, rtmp i s c l ear e d to 0 on a RstL, and 
s e t during the ror rb and ror xrb commands. Tho rtmp r e gister al l ows impl e m e ntation of Linear 
Foodback Sh i ft Regist e rs w i th any tap configuration. 
Figur e 4 01 shows a block diagram of the ALU's ROR block: 

Tho ROR n, b l ocks are shown for clarity, but i n fact would be hardwired i nto mu l tipioxor mx3. since 
e ach b l ock i s simp l y a rew i ring of tho 32 - bits, rotated right n bits. 

i=e§iG ^ i s us e d to provide the WntoEnab i o signal to rtmp. The rtmp rog i stor should on l y be written to 
dur i ng ror rb and ror xr b commands. Th e combinator i al logic block i s: 



Legle^ 



Ex e c A (Cmd^- ROR) a (Gmd^ - 000) 



Mult i plexor mx^ p e rforms the task of se l ect i ng the 6 - b i t va l u e from Cn i nstead of bits 1 3 8 (6 b i ts) 
from Ago (the s e l e ction i s basod on tho valuo of Logicg). Bit 5 i s requ i red to d i stingu i sh ROR from 
RIA- 



LegiGa 



Qm4& ^- 0x10 



Tabl e 377. Se l ection for mu l tipl e xor MX4 





Output 


LogiCa 




en 


4 




AGG4^ 


0 
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Mu l t i plexor MXa porforms tho task of solooting tho 8 bit va l uo from i nByto instoad of tho l owor 8 b i ts 
from the ANDod Aoo based on tho cmd. 

Tab le 378. S ele ct i on for mu l t i p l exor MX;^ 





Output 


^^nftd.4^ 




4nByte 


0x110 






i(0x110) 



5 

Mu l tip l exor MXa do e s the final rotating of tho 32 b i t va l uo. Tho b i t patt e rns of tho cmd op e rand aro 
taken advantage of: 

Table 379. S ele ct i on for multip l exor MX^ 



10 





Output 


Cmd;»-Q 


Comments 










ROR1 


OOxx 


RB. XRB, WritoMask, 1 




ROR3 


OlOx 


3 


ROR 31 


Olio 




ROR 2A 


0111 


24 


ROR 8 


Ixxx 






RIA, InByto, 8, OutByto, 01, C2, 
ID 



44t3 l O Block 

Th e l O b l ock w i thin the ALU imp le m e nts tho logic for communicating w i th tho l OU during 
i nstructions that i nvo l ve th e Aocumuiator. This includes gen e rating appropriate control signa l s and 
15 for g e n e rating th e corr e ct data for s e nd i ng during wr i t e s to the lOU's OutByto and LooaUd r e g i st e rs. 
Figur e 4 02 shows a b l ock diagram of the lO block: 

Le§i64 i s us e d to prov i d e th e Loooi i dWE s i gna l to th e l OU. Tho l ocai i d register shou l d on l y be written 
to during the ror i d command. On l y tho low e r 7 bits of the Aocumuiator ar e wr i tt e n to the l oca ii d 
reg i st e r. 

20 4=e9ie a is used to prov i de tho ALUOutBytoWE signa l to the lOU. Th e OutByto r e g i ster shou l d only be 
written to dur i ng th e ROR OutByto command. On l y th e lowor 8 b i ts of th e Aooumutator are wr i tten to 
tho OutByto register. 

In both cas e s w e output tho lowor 8 bits of tho Accumulator. Th e ALU i OData value is ANDed with tho 
output of Log i c2 to ensure that ALU i ODota is on l y val i d when it i s safe to do so (thus tho lOU log i c 
25 never sees tho key pass i ng by in ALU i OData). Tho comb i nator i al log i c blocks are: 



Logica 



Ex e c A (Cmd^ - ROR I D) 



Ex e c A (Cmd^ - ROR OutByto) 
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Log i c3 i s usod to prov i do tho ALUinBytoUood Signal to tho l OU. Tho (nByto is on l y usod dur i ng 
the ROR inByto command. The combinatoria l l ogic is 



Logica 



Exoo A (Cmdv^ " ROR InByto) 



4S Program Count e r Un i t 

5 The Program Counter Un i t (PCU) inc l udos tho 12 bit PC (Program Countor), as woll as l ogic for 
branching and subrout i ne contro l . 

Th e PCU latches n e ed to be par i ty - ch e ck e d. I n addition, th e log i c and registers contained i n the 
PCU must bo cov e red by both Tamp e r D e t e ct i on L i n e s to e nsure that th e PC cannot b e chang e d 
by an attackor. 

10 The PC is implomontod as a 12 entry by 12 bit RCA (PC Array), indexed by a ^ b i t SP (Stack 

Po i nt e r) reg i st e r. Th e P C, PCRamSci and sp r e g i ster s ar e a ll c le ar e d to 0 on a RotL, and updated 
during th e flow of program contro l accord i ng to th e opcod e s. 

The current va l u e for th e PC i s norma l ly updated during th e Exoouto cycl e accord i ng to tho 
command b e ing executed. How e v e r i t i s also incremented by 1 dur i ng th e F e tch cyc l e for two byt e 
15 instructions such as JMP, JSR, DBR, TBR, and instructions that requ i re an add i t i onal byt e for 
imm e diat e addr e ss i ng. The mechanism for calcu l ating the new PC va l ue depends upon th e 
opcod e b e ing proc e ss e d. 
Figur e 103 shows a block diagram of th e PCU: 

The ADD b l ock is a simple adder modu l o 2 ^ w i th two inputs: an unsigned 12 b i t number and an 
20 8 bit signed number (high b i t ~ sign). The signed i nput is either a constant of 0x01 , or an 8 b i t 
offs e t (th e 8 b i ts from th e miu). 

The "+1" b l ock takes a 4 bit input and incr e ments i t by 1 (modulo 12). The " 1" b l ock takes a 4- bit 
i nput and decrements it by 1 (modu l o 12). 
Table 380 li sts th e diff e r e nt forms of PC contro l : 
25 Tab l e 381 . D i ff e r e nt forms of PC control during th e Ex e c cyc le 



Command 



Action 



Th e PC is load e d with th e curr e nt 12 bit value as pass e d i n from 
tho M I U. 



Th e PC is l oaded w i th tho curr e nt 12 - b i t valu e as pass e d in from 
th e Aco. 



PCRamS e l i s loaded w i th tho va l u e from bit 15 of th e Ace. 



JPZ 



Th e PC is l oaded with 0. PCRamS el i s l oad e d w i th 0 (program i n 
flash) 



Save o l d va l ue of PC onto stack for l at e r. Th e PC i s l oaded with 



0. PCRamSel i s l oad e d w i th 0 (program i n flash). 



JSR, JS I Sav e old value of PC onto stack for later. Tho PC is l oad e d w i th 



th e current 12 b i t va l u e as passed i n from e ither tho M I U or the 
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Acc. With JSI, PCRamSo l i s l oaded from the valuo in bit 15 of tho 



Accumulator. 



Pop old valu e of PC from stack and I ncr e ment by 1 to got now 
PGt 



If tho Z flag matches tho TBR tost, add 8 b i t signed number 
(M I USData) to current PC. Othorwloo inoromont curr e nt PC by 1 . 



DBR 



I f th e CZ flag I s sot, add 8 - b i t s i gned offset (M I USData) to current 



PC. Othorwiso incr e m e nt current PC by 1 . 



All oth e rs 



Incr e ment current PC by 1 



Th e updating of PCRamSo i only occurs during jpi, js i , jpz a nd JSZ i nstruct i ons, dotocted v i a Logioo r 
Tho sam e action for tho Exec takes plac e for jmp. jsr, J PI , JSI, jpz and jsz, so w e sp e cifica ll y 
detect that cas e in Log i cs. In the sam e way, w e t e st for th e rts cas e in Log i oa r 



Logice 



Log i c s 



Logics 



Gmd7- 4- 011x001 



(Cmd^ - 000) V Log i Ctf 



^.^1 I IU.^C_Q 111 \J 



When updat i ng the PC, we must decide if the PC i s to bo replaced by a comp le te l y now va l uo (as 
in tho caso of the jmp, jsR i- JP Ij Jsr ? jpz and jsz i nstructions), or by tho r e su l t of the adder (al l other 
instructions). Th e output from Log i cs ANDod with Cyo i o can therefore bo safely used by tho 
multiplexor to obtain tho new PC va l u e (w e n ee d to a l ways select pc^^I wh e n Cyc l e i s 0, even 
10 though w e don't a l ways writ o i t to th e pca). 

Note that tho jpz and JSZ instructions ar e imp le mented as 12 AND gates that cause tho 
Accumulator valuo to b e ignored, and tho now PC to bo set to 0. Likewis e , th e PCRamSci bit i s cleared 
via these two instruct i ons us i ng the samo AND mechan i sm. 

Th e input to tho 12 bit adder d e p e nds on whether we are i ncrement i ng by 1 (the usual case), or 
15 add i ng th e offset as r e ad from the M i u (wh e n a branch I s taken by th e dbr and t b r i nstructions). 
Logioa generat e s th e t e st. 



l=o§fe3 Cyc l e A (((Cmd^ - DBR ) a ■ CZ) v ((Cmd^^ - TBR) a (Cmdu ® Z))) 



20 



The actual offs e t to b e added i n the cas e of th e DBR and TBR i nstructions i s e i ther tho 8 b i t valuo 
r e ad from th e M I U, or an 8 b i t va l uo generated by b i ts 3 1 of tho opcod e and treat i ng b i t 4 of th e 
opcode as tho sign (thereby mak i ng DBR i mmed i at e branching negativ e , and TBR i mmediate 
branch i ng pos i t i ve). Tho former is se l ect e d wh e n b i ts 3 1 of tho opcode i s 0, as shown by Log i o 4T 



Log l C4 



I f (Cmd^ - 000) output M I USData 



E l se output Cmd4 | Cmd4 | Cmd4 | Cmd4 | Cmd4 | Cmd 



Fina l ly, the se l ect i on of wh i ch PC entry to use dep e nds on the curr e nt valu o for sp. As we ontor a 
subrout i n e , th e sp ind e x va l ue must i ncrement, and as we r e turn from a subroutin e , the sp index 
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valu e must docromont. Logics toilo uo whon a Qubroutino is being ontorod, and Logioa toi l s us whon 
the subrout i no is be i ng return e d from. W e use Log i o g to soloot tho oltorod SP va l uo, but on l y wr i to to 
th e sp r e g i ster when Exoo and Cmd4 aro a l so sot (to prevent jmp and jpz from adjusting sp). 
Tho two VAL un i ts ar e val i dat i on units oonn e ot e d to th e Tamper Provont l on and Detection circuitry 
5 (described i n Section 10.3.5 on pag e 1), e ach with an ok b i t. Th e ok b i t i s s e t to 1 on PORotL, and 
OR e d with the ChipOK valu e s from both Tamper D e tection L i nos each cycl e . Th e OK b i t i s ANDod 
with oach data bit that passes through the un i t. Both val un i ts also par i ty ch e ck tho data bits to 
e nsure that th e y are val i d. I f th e parity ch e ck fails, the Erase Tamper Detection Line is trigg e r e d. 
I n tho case of vau, th e e ff e ctiv e output from the sp r e gist e r w il l a l ways bo 0. I f the ch i p has boon 
10 tamp e r e d with. Th i s pr e v e nts an attack e r from ex e cuting any subroutin e s. 

I n the case of VALa, the effective PC output wil l always bo 0 i f tho chip has b ee n tamper e d w i th. 
This prevents an attacker from execut i ng any program cod e . 



PEA23US 



978 



4€ Address G e n e rator Un i t 

Th e Address G e n e rator Un i t (AGU) generates offoot i vo addroosos for access i ng tho Memory Unit 
(MU). I n Cyoio 0, tho PC is passed through to the MU in ord e r to fetc l i tho next opcode. Tho AGU 
5 int e rpr e ts the returned opcod e in order to g e n e rat e the effoctivo address for Cyo i o 1. In Cyoio 1, tho 
generated addr e ss is pass e d to th e MU. 

Tho log i c and reg i sters contained in the AGU must be covered by both Tamper Det e ct i on Lines. 

This i s to ensure that an attack e r cannot a l t e r any generated address. Th e l atch e s for th e 

counters and ca l cu l ated addr e ss shou l d also be parity chocked. 
10 I f ei th e r of th e Tamp e r D e t e ction L i nos Is broken, th e AGU w i ll gonorat e address 0 e ach cyc l e and 

all counters w i ll be fixed at 0. Th i s w il l only come i nto e ff e ct i f an attack e r has disab l ed tho RESET 

and/or eras e c i rcu i try, since under normal circumstanc e s, break i ng a Tamper Det e ct i on L i no w ill 

r e sult i n a RESET or the erasure of all F l ash memory. 

4%A I mplementat i on 

15 Th e block diagram for tho AGU i s shown i n F i gure ^0 4 : 

Th e acGoooModo and WritoMaok r e gist e rs must be c le ar e d to 0 on reset to ensure that no access to 

memory occurs at startup of th e CPU. 

Th e Adr and aocoGsModo r e gisters ar e written to dur i ng the final cycle of cycle 0 (Fotoh) and cycle 1 
(Exoo) with tho address to use dur i ng th e follow i ng cyc l e phase. For example, when cycle ~ 1 , tho 
20 PC i s s ele ct e d so that i t can bo writt e n to Adr during Exoc. Dur i ng cycle 0, whi l e the RC is being 

output from Adr, the address to b e used in th e fo ll owing cyGl o 1 is calculat e d (based on tho f e tch e d 
opcode s ee n as Cmd) and f i nal l y stor e d i n Adr when Fetch is 1 . The aocoGoModo register is a l so 
updated in the same way. 

I t is important to d i st i nguish b e tween tho va l u e of Cmd during diff e r e nt va l ues for Cydo: 

25 During Cyolo 0, wh e n Fotoh is 1 , tho 8 bit i nput Cmd holds th e i nstruct i on to be ex e cut e d in 

th e fol l owing Cyoio 1. This 8 b i t va l ue is used to decode tho effective address for th e operand 
of tho i nstruction. 

During Cyolo 1, when Exoc i s 1 , Cmd holds th e cun^ e ntly e x e cuting instruction. 

Th e WritoMaok reg i ster i s on l y ev e r writt e n to dur i ng e x e cution of an appropriate ror instruction. 
30 fce9ie ^ s e ts the WritoMaok and MMR WritoEnab i oo r e spect i v el y based on th i s condition: 



I=e§i64 



Exec A (Cmd^ - ROR WritoMask) 



Th e data wr i tten to the WritoMaok r e g i ster i s th e l ow e r 8 bits of the Aooumu i ator. 
Th e Address Reg i st e r Unit is only updated by an ria or l i a instruction, so tho wr i t e Enab l o is 
generated by Log i oa ao fol l ows: 



I=eg4e2 Exec a (Cmd^- 1111) 



The Counter Unit (CU) g e nerates count e rs C1, C2 a n d the solocted n i nd e x. I n addit i on, tho CU 
35 outputs a GZ - flag for use by the PCU. Th e CU i s descr i bed in more deta i l below. 

The vau un i t i s a validat i on un i t conn e ct e d to tho Tamp e r Prevent i on and Detection c i rcu i try 
(descr i bed i n S e ction 10.3.5 on page 1). I t contains on ok b i t that i s set to 1 on PORotL, and 
ORed w i th the Ch i pOK va l u e s from both Tamp e r Detect i on L i nes e ach cyc le . Tho OK bit is 
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AND e d with tho 12 b i ts of Adr b e fore thoy can bo usod. I f tho ch i p has boon tamporod with, tho 
addroGS output wi ll be a l ways 0, ther e by pr e vent i ng an attackor from acc e ssing othor parts of 
momory. Tho VAU unit also porforms a par i ty chock on tho Adr Address bits to onsuro i t has not 
boon tamporod w i th. I f th e parity chock fa i ls, tho Erase Tamp e r D e t e ction L i no i s triggorod. 

5 16.1.1 Counter Unit 

Th e Count e r Un i t (CU) g e n e rat e s counters C1 and C2 (usod i nterna ll y). I n addition, th e CU outputs 
Cn and flag cz for us e externa l ly. Tho block d i agram for tho CU is shown in Figure 4 05: 
R e g i sters ci and C2 ore updated when th e y ar e th e targ e ts of a pbr, sc or ror i nstruction. Logic s 
generates tho contro l signals for th e wr i t e enab le s as shown in th e follow i ng psoudocodo. 

10 iaDbrCc = {Cmdb j^ >-» DDR) v (Cmd »- ^ ^ CC) 

ioRorCn = — (Cmci y- ^ ° ROR) — a — (Cmdj ^ a = 10) 

CnWE = Exec A — (ioDbrSc v iaRorCn) 
ClwG = CnWE A — iCmd ^ 
15 C2wQ a CnWE A Cmd ^ 

Th e single bit flag cz is produc e d by th e NOR of th e appropriate C1 or C2 regist e r for use during 
a DBR instruction. Thus cz is 1 i f tho appropriat e G r va l u e ~ 0. 

Th e actual value writt e n to G4 or eg depends on wheth e r th e ror, dbr or sc i nstruction is b e ing 
ex e cut e d. During a d b r instruction, th e va l u e of ei th e r ci or ca is docromontod by 1 (with wrap). 
20 On e mult i p l exor se l ects between th e l ow e r 6 bits of the Aooumu i ator (for ror i nstruct i ons), and a 
6 bit value for an sc i nstruction wh e r e th e uppor 3 b i ts ~ tho low 3 b i ts from C2, and low 3 bits ~ 
l ow 3 b i ts from Cmd. Noto that only tho low e st 3 bits of th e op e rand aro writton to ci. 
Tho two VAL units are validat i on units conn e ct e d to th e Tamp e r Pr e v e ntion and Detect i on circuitry 
(described in S e ction 10.3.5 on pag e 1), each w i th an ok b i t Th e ok bit Is set to 1 on PORstL, and 
25 OR e d w i th the Ch i pOK valu e s from both Tamp e r D o t o ction L i n e s e ach cycl e . Th e OK bit is ANDod 
with oach data bit that passes through the unit. A l l val units also par i ty check tho data to onsuro 
tho counters have not b ee n tamp e r e d w i th. I f a par i ty chock fai l s, tho Erase Tamper Detection 
L i ne is tr i ggorod. 

I n th e case of vau, the effect i ve output from th e count e r C1 wil l always bo 0 i f tho ch i p has boon 
30 tampered with. This pr e vents an attackor from executing any l ooping constructs. 

I n the case of VALa, tho offoctivo output from th e count e r C2 w i l l always b e 0 i f th e chip has boon 
tamp e red with. This pr e v e nts an attackor from e x e cuting any l oop i ng constructs. 
16.1.2 Calcu l ate N e xt Addr e ss 

This un i t generates th e address of the operand for the noxt i nstruction to be oxocut o d. It mak e s 
35 us e of tho Address Register Unit and PC to obta i n base addresses, and the counters from tho 
Count e r Unit to assist i n g e n e rat i ng offsets from th e base addr e ss. 

Th i s unit consists of som e s i mp l e combinatoria l l ogic, includ i ng an add e r that adds a 6 b i t numb e r 
to a 10 - b i t numb e r Th e logic i s shown in th e fo ll owing psoudocodo. 
ioEraoG ° (Cmd ? ^ = ERA) 
40 ioSt (CmcU - ^ « CT) 

PEA23US 980 



ioAccRQad = — (Cmd: y_ ^ « 10) 

# — Firot — dctcrmi rRe — whether — thio — io — etst — immediate — mode — requiring 
PC 1 1 

5 ioJmpJorDbrTbrlmmed ■ — (Cmd^ = 00) — a — (- i Cmd ^— v — (Cmd s- ^ ° 1x000)) 

ioLoglmmed « — ( (Cmdi y-s.— ■ — — a — ( (Cmd^ v Cmd ^-) — a — (Cmds 3 # 111) ) ) — a 
(Cmdj^ = 10) 

pcSel — = — Cycle — v — ( iCycle — a — ( i o Jmp JarDbrTbrlmmed — v — ioLoglmmed — v 
10 ioLia) ) 

# Generate AnScl aignal for the Addrcoo Rcgiotcr Unit 
AOCcl = — (ioAccRead v iaSt) — A — ( i Cmd a.— v — (Cmd s, ^ = 001) ) 

15 

# The next addreoo io either the new PC or muot be generated 
# — (we require the baoe addreoo from Addreaa Rcgioter Unit) 
nextRAMSel = AnDataOut^ — a — lioEraoe 

If (nextRAMScl) 

20 baacAdr = 00 — | — AnDataOutj ^-# — a^am — addreooco — aa^e — already — word 

aligne d 
Eloo 

baacAdr = AnDataOut: ?-^ — | — 00 # f laoh addreooeo arc 4 byte aligned 

Endlf 

25 # Baoe addreoo io now word — (4 byte) — aligned 

# Now generate the offoet amount to be added to the baoe addreoo 
oelCn ■ — (ioAccRead v ioSt) — a — (Cmd^ v Cmd^ ^ — a Cmd^ . 

of foe t^ — a — (AOSel a Cmd^ ^ — v — (oelCn a Cn^ 4- 
30 of f octj ,— « — (AOSel a Cmd a,^ — v — (oelCn A Cn^ .^ 

of f oeta — — (AOSel A Cmd^ -^ — v — (oelCn a Cn^ i- 

if — (ioEraoe) 

35 nextEf f Adr^ _ ^ — don^t care 

Bloc 

# now we — can o imply add the offoet to the baoe addreoo to get 

the effective adr 
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ncxtEf f Adrii a = baocAdr i of foot # 10 bit pluo C bit, with wrap 

1 10 bito out 

ncxtEf fAdr^^ ° 0 # word acGcoo, — oo lower bito of cf fadr are 0 

Endlf c 
5 # Now gencratG the varioua oicfnalo for uoe during Cycle = l 

# Note that theoe are only valid when pcScl io 0 — (otherwioo will 
road PC) 

nextAccGooModc^ = 1 # want 32 bit aGccoa 

nGxtAcGcaaModca, ° ncxtRAMCol # ram or flaoh acoooo — (only valid if 
10 rd/wr/craoG oct) 

ncxtAcccooModGa ° ioAcGRcad # poSol takoa oarc e€ iiiA 

inotruction 

nextAcGGOoModOj. - iaSt # write acGOoa 

nGxtAGCCOoModG4. = ioEraoe — # craoe page acceao 
15 16.1.3 AddroGO Rogiotor Unit 

This unit contains ^ »f 0 b i t rogiotors that aro optiona ll y c l oarod to 0 on PORotL. Tho 2 bit input 
AnSoi s e l e cts which of th e 4 regist e rs to output on DataOut. Wh e n th e wntoEnab i o is se t, the AnSo i 
solocts which of tho 4 rogistors is written to w i th the 9 bit Data i n. 

47 Program Mode Unit 

20 Tho Program Mode Un i t (PMU) is r e sponsib l e for Program Modo and Trim Mod e op e rat i ons: 

Program Mode involvco craaing the cxiating flaoh momory and 

loading tho new program/data into the flash. — The program that 
io loaded oan be a bootstrap program if dcaircd, — and may 
contain additional program code to produce a digital 
25 oignaturc of the final program to verify that the program wao 

written correctly — (e.g. — by producing a SIIA 1 signature of the 
entire flaoh memory) . 

Trim Mode involves counting the number of internal cycleo 

that have elapsed between the entry of Trim Mode — (at the 
30 falling edge of the ack) — and the receipt of the next byte — fat: 

the falling edge of the last bit before the aclc) — from the 
Maoter . — When the byte — is received, — the current count value 
divided by 2 io transmitted to the Master. 
Tho PMU rol ie s on a fuse ( i mplom e ntod as th e valu e of word 0 of tho fla s h I nformation b l ock) to 
35 d e term i n e whether i t i s a ll owod to perform Program Modo operat i ons. Tho purpos e of this fuso i s 
to prev e nt e a s y (or acc i denta l ) roprogramm i ng of OA Ch i p s onc e th e ir purpose has boon sot. For 
oxampio, an attackor may want to rouso chips from o l d consumabl e s. If an attack e r somohow 
bypass e s th e fus e check, tho PMU wi l l st ill oraso al l of flash before storing tho dos l rod program. 
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Ev e n if th e attack e r somohow d i sconn e cts tho orasuro logic, th e y wi ll b e unable to storo a 
program in the flash due to th e shadow nybblos. 

The PMU contains an 8 b i t buff register that i s us e d to hold tho byt e b e ing wr i tt e n to flash and a 
12 bit Qdr reg i ster that i s used to hold tho byt e addr e ss currently be i ng writt e n to. 
5 Th e P I VIU i s a l so used to l oad word 1 of th e infonnat i on block into a 32 bit r e gister (comb i nod from 
8 b i ts of buff, 12 - b i ts of adr, and a further 12 b i t r e gist e r) so i t can b e us e d to XOR a l l data to and 
from memory (both Flash and RAM) for future CPU aocoosos. Th i s log i c is act i vated only whon 
the ch i p enters AotivoModo (so as not to access flash and poss i bly causo an erasure directly aft o r 
manufacture sinc e shadows w il l not bo corr e ct). The log i c and 32 bit mask reg i ster i s in tho PMU 
10 to m i n i miz e chip ar e a. 

Tho PMU thoroforo has an asym metric accoss to flash memory: 

writQQ arc to main memory 

rcado arc from information block memory 

Tho reads and wr i t e s ar e automatically d i roctod appropriat e ly i n th e MRU. 
15 A b l ock diagram of th e PMU Is shown i n F i gur e 4 06. 
4774 Local s torage and counters 

Tho PMU keeps a 1 cycle delay e d v e rsion of MRURdy, ca l l e d provMRURdy. I t is used to generate 
PMNowTronc. Th e r e fore each cycle tho PMU performs tho fol l ow i ng task: 

20 provMRURdy < — MRURdy v — (otatc « loadDytc) 

Th e PMU also requ i r e s 1 - bit maokLoadodHdi e P e nd i ng and i d i oPond i ng registers, a ll of wh i ch ar e c le ar e d 
to 0 on RGtL. The 1 bit fu oo B i own r e gister i s s e t to 1 on Rgil for s e curity. 
4^72 State mac hi ne 

25 Th e stato machin e for th e PMU is shown i n Figure ^07, w i th th e ps e udocod e for 



th e var i ous states out li ned be l ow. 



rati 



provMRURdy, — maolcLoadcd, — idlGPGiiding, — adr < 0 # GlGar moot rcgo 



fuocBlown < — 1 # for OGCurity oako aooumo tho worot 



30 



otatG < — idle 



35 



The i dle stat e , ent e r e d after reset, s i mply waits for the lOModo to enter 
ProgramModo, Aot i voModo, or TrimModo. Note that tho reset va l ue for fuooBiown 
means that Program Modo and TrimMod e cannot be ent e r e d unt i l after a 
successfu l e ntry i nto AotivoModo that also c l ears the fuooBiown r e gister. In stato 
i dle, PMEn ~ — rmaskLoadod, and i n stato wa i tlModo PMEn - 0. I n all other states, 



PMEn - 1 . 



idlcrcnding < 0- 



PMEn 



imaol^oadod 
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PMNcwTrano « — 0- 

-i^ — ( (lOModc = ActivcModc) — A MRUIldy) 
3t€ — (maokLoadcd) 



otatc < — wait4modo — # no nocd to reload maok oncG loaded 

Eloe 



adr < — G # — fefee — location — &€ — fefee — fuoe — is — within — 32 bit 

word 0 

otate < — loadFuoe 

Endlf 



10 Eloelf — ( (lOMode ° ProgramMode) a MRURdy a — i fuoeDlown) — # wait 4 

acceaa 2 finioh 

maolcljoadcd < — 0 # the maolt io now invalid 

adr < — G # the location of the fuae io within 32 bit word 

1 5 otatc < — loadFuoe 

Elacif — ((lOModc ° TrimMode) — a rqiURdy a — ■ fuocBlo%m) # wait 4- 

acceoa 2 finioh 

maalcLoadcd < — 0 # the maok io now invalid 

adr < — 0 # otart the counter on entering TrimMode 

20 Otate < — trim 

Eloe 

otate < — idle 



Bndlf 

Tho waiMmodo ctato simp l y waits unt il for tho curr e nt modo to f i n i sh and r e turns 
25 to i dlo. 

wait4mode 

PMEn ■ 0 

PMNcwTrano = 0 

If (lOMode - IdleModc) 

30 otate < — idle 

Eloe 

otate < — wait 4 mode 

Endlf 

The trim stat e i s wh e r e wo count tho number of cycles botwoon tho entry of tho Tr i m Modo and 
35 the arr i va l of a byto from tho Master. When the byte arrives from tho Mast e r, w e s e nd the 
r e sultant count: 

# — We — oaturate — fehe — adder — et^ — a^rl — 3rS — fee — make — external — trim 

control eaoier 
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laotOnc « adr^ a adra ,— a — z-r^ — adr^ ^ 

i-^ — ( i laatOnc) 

adr a adr — i — i — # 12 bit incromcntor 

Bndlf 

# — Thio — logic — o imply — cauooo — fctee — current — adder — value — fee — fee 

written to the 

# — out Byte when — fcfee — inByte — ate — received . — Tfee — inByte — is — cleared 

when received 

# although it ia not atrictly ncGcaoar>^ to do oo 

PMOutBytcWE ° InBytcValid — # 0 in all other otatco 

PMInBytcUacd « InBytcValid # — oame — as — iii — loadByt -e — otate, — 9 — 

all other atatoo 

£^ — (lOModc # TrimMode) 

atate < — idle 

Bloelf (InBytcValid) 

otate < — wait4mode 

Bloc 

otate < — trim 

Endlf 

The l oodFuso state i s ca lle d wh e n e v e r there is an attempt to program th e d e vic e or we ar e 
entering Act i v e Mode and the mask i s inva l id (i. e . aft e r pow e r up or aft e r a ProgramModo or 
Tr i mMod e command). W e load the 32 bit fuse valuo from word 0 of information memory i n flash 
and compar e I t against the FuooS i g constant (OxSSSSAAAA) to obtain tho fuse va l uo. Tho next stato 
deponds on lOModo and tho Fuso. 

loadFuoc 

PMEn ° 1 

PMNewTrana = prcvMRURdy 

idlePending^in = idlePending v — (lOModc = IdleMode) 

idlePending < — idlePending_in 

If (mURdy) 

^ — (idlePending_in) ft — don^ t — change — otate — until — fefee — memory 

acceoo io complete 

otate < — idle 

Blae 

fuoeBlown_in « (MRUData^ j ^ « FuoeSig) 

fuoeDlown < — fuoeBlown_in 

i# — (lOMode = ProgramModo) 

i€ — ( f uocBlown_in) 

otate < — wait 4 mode — # not allowed to program anymore 
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ElOQ 

otQtc < — craoG 

Bndlf 

Bloif — (lOModc = ActivcModc) 

adr < 4 # — byte — 4 — ie — word — 1 (the — location — e€ — fefee 

XORMaok) 

DtatG < — get Ma ale 

Eloo 

atatc < — idle 

Endlf 

Endlf 

Elac 

otatc < — loadFuoQ 

Endlf 

Th e e ras e stat e e ras e s th e flash memory and then loads into the mo i n programming states: 
craoc 

PMNcvyTrano ° provMRURdy 

PMEraoGDoviGG = 1 # io 0 in all other otatca 

adr < — & 

idlGPcnding_in = idlcPcnding v — (lOModc ^ ProgramModo ) 

idloPcnding < — idlcPonding^in 

If (MRURdy) 

i€ — ( idlcPonding^in) 

otatG < — idle 

Eloo 

OtatG < — loadByfe e 

Endlf 

Elac 

otatc < — craoQ 

Endlf 

Program Mod e i nvolv e s load i ng a s e ries of 8 bit data va l ues into th e F l ash. Th e PMU r e ads byt e s 
v i a th e l OU's i nByto and i nBytoVa ii d, s e tt i ng MU i nBytoUsod as i t l oads data. The Master must sond 
data s li ght l y s l ower than the speed i t takes to write to Flash to e nsur e that data i s not l ost. 

loadByt e # Load in 1 byte (1 word) — from 10 Unit 

PMNcwTrano ■ 0 

PMlnBytcUocd » InBytcValid # oamc aa in Tritnin otatc, — and 0 — i» 

all other otatca 

i€ — (lOMode ^ ProgramModo) 

otate < — idle 
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Bloc 

If (InBytcValid) 

buff < — InBytc 

otatc < — writcBytG 

Bloo 

otatc < — loadByfe e 

Endlf 

Bndlf 

writcBytc 

PMNcwTrano « prcvMRURdy 

PMRW = 0 # write. In all other atatco, ri > 1RW = 1 — (read) 

rM320ut^ = buff # data (can be tied to thio) 

rM320uti9 0 = adr # can be tied to thio 

rM32Out9 3^-a 0 = 12bitRGg# io alwaya thio — (io don^ t oarc during a 

write) 

idlcrcnding__in « idlGPcnding v (lOModc ^ ProgramModc ) 

idlcPcnding < — idlcPGnding_in 

If (MRURdy) 

la o tone = adr^ a adr^ a . , . — ada^ii 

adr < — adr i — 1 # 12 bit incrcmcntor 

i# — ( idlGPGnding_in) 

otatG < — idle 

Elocif — (laotOnc) 

otatQ < — wait 4 ModG 

Bloc 

otatc < — loadByfe e 

Bndlf 

Bloc 

otatc < — writcBytc 

Endlf 

Tho gotMask state l oads up word 1 of th e flash i nformat i on block (bytos 4 - 7) i nto the 32 b i t buff e r 
so i t can bo used to XOR a ll data to and from memory (both F l ash and RAM) for futur e CPU 
acc e ss e s. 

gctMaok 

PMNcwTrano ° prcvMRURdy 

PM320utj^ ° adr # adr ohould ° A, — i.e. word 1 which holdo the 

CPU' 3 maok 

PMRW = 1 # read (MUST be 1 in thio otatc) 
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idlcPcnding_in = — idlcrGnding v — (lOModo ^ ActivcModc) 

idlcrcnding < idlcrcnding^in 

If (P4RURdy) 

buff < MPTT^)n^ a.■^ p 

adr < — MRUData io p 

12bitRQg < MRUDnt-^ n 3j^ 

maolcLoadcd < — i 

1# — (idlcrGnding_in) 

otato < — idle 

Bloc 

otatc < — wait4modo 

Endlf 

Bloc 

otato < — gotMaok 

Endlf 



Tho Momory R e quest Unit (mru) prov i d e s arbitration botwoon PMU momory r e quests and CPU 

bosod memory requ e sts. 

Tho arbitrat i on is straightforward: i f the input PMEn is ass e rt e d, th e n PMU i nputs ar e prooossod 
and CPU i nputs are ignored. I f PMEn is deassortod, tho rovorso is truo. 
A block d i agram of th e MRU i s shown In F i gur e 4 08. 
4dr1 Ar bi trat i on Logic 

The arb i tration log i c b l ock prov i d e s arbitrat i on b e tween tho acc e ss e s of tho pm and th e 8/32 b i t 
acc e ss e s of tho cpu v i a a s i mpio mult i p l oxing mechanism basod on PMEn: 



If (PMEn) 

NcwTrana = PMNcwTranG 

AcccooModc^ a PMRW — # — mapo — fee — 1 — fea? — rcado — — bito) , — 0 — #03e 

writca — ( 8 bito) 

AocGooModo^ m 0 # flaoh aoccooco only 

AocGooModCa «■ PMRW A — i PMEraooDcvicc # road has lower 

priority than oraoc 

Ac GOO oModOa ^— = — i PMRW A — i PMEraocDoviGG — # writo feae lowor 

priority than oraoo 

AoooooModo^ ° 0 # pagQEraac 

AcccooModGs = PMEraaoDGvicc # craoo everything — (main & info 



Momory Roquost Unit 




bloolc) 



WritoMaalc 



OxFF 



PM320ut3 ^ 
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RoqDataOut: ; 



PM320ut^ 



Bloc 



NcwTrano =» crUNcwTrano a (CPUAGCQoaModc^ 
AGGGOoModG4^ a CPUAoGGaoModc 



# 000) 



AcQGOoModGs 0 # cpu cannot ever craaG cntirG Ghip 
WritcMaok » CPUWritGMaok 



Adr 



CPUAdr 



10 4^ 



RcqDataOut^ —a 

Endlf 

Memory Request Log i c 



CPUDataOuta 



15 



Th e M e mory Roquost Logic i n the MRU imp l om e nts th e memory r e qu e st s from th e SQloctod i nput. 
An ind i vidua l r e quest may Involvo outputting mu l tip le sub r e quests o.g. an 8 b i t road cons i sts of 2 
^ 4 b i t r e ads (oach flash byt e contains a nybbl e plus i ts I nv e rs e ). 

Tho input aooosGModo bits are int e rpret e d as fo l lows: 

Table 382. I ntorprotation of aoc e ssMod e bits 



D e script i on 



0 ~ 8 - b i t acc e ss 



- 32 b i t acooso 



0 ~ flash accoss 



-• RAM acc e ss 



th i s bit i s on l y val i d i f bit 2, 3 or 4 i s s e t 



~ r e ad acc e ss 



~ writo accoss 



4r 



e r a s e pag e acc e ss 



1 ~ erase e ntire ( i nfo and main) flash (on l y uood within the 
MRU) 



Th e MRU conta i ns th e fo l low i ng r e g i st e rs for gen e ra l purpose flow contro l : 
Tab l o 383. Doscr i ption of regist e r s e ttings 



20 



Activ e Trans 



name 



ft vji 



badUnt il Rostart 



D e scr i pt i on 



e xtraTrans and 



noxtToXfor can bo cons i dorod val i d. 



Is ther e a transact i on sti l l runn i ng? If so, th e n 



0 ~ m e mory (flash and ram) r e ads work correctly 

1 " m e mory (flash and ram) r e ads r e turn 0 



Gots sot whenever illChip gets sot, and rema i ns 
s e t unt il a soft restart occurs i .e. l OModo passes 
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through I dl e . 



e xtraTrans 



Dotorm i nos whothor thoro i s an add i tional sub 



transact i on to perform, e.g. a 32 b i t road from flash 
i nvo l v e s A sub - transact i onQ i n tho caso of 8 b i t 



acc e ss e s, and 8 sub transact i ons in th e cas e of 4 



b i t accossos. 



0 " 1 5 cons e cut l vo bad r e ads have not ooourrod 



"15 consecutive bad roads hav e occurred 



n e xtToXfer 



Tho noxt e l e m e nt (byte or nybblo) number to 



transfer to/from memory 



restartPond i ng 



~ I QMode pass e d through I dle while a 



transaction was b e ing procossod 

0 - Tho tranoact i on completed w i thout I QMode 



passing through Idl e 



r e tryCount 



Numb e r of times that a byte has boon read bad l y 



from flash. When a byte has b ee n road bad l y 15 
consecutiv e times illChip wil l bo set. 



retryStartod 



0 ~ no retri e s e ncount e red yet for this r e ad 

1 - r e tr i es have boon encount e r e d - r e tryCount 



ho l ds tho number of retries 



Th e r e tryStartod r e g i st e r is us e d to stop r e tryCount 



be i ng cleared on good roads — thus ke e ping a 
r e cord of th e last number of retr i es on a bad read. 



Tab l e 383 l ists tho reg i sters spec i ficaHy for testing flash. Although th e complete set of flash tost 
r e gisters is in both the MRU and MAU (group 0 is in th e MRU, groups 1 and 2 are in tho MAU), al l 
the decoding tak e s place from tho MRU. 



10 



Table 383. Flash t e st r e g i sters sottabl e from CPU when th e RAM address is 
428^ 



Th i s is from th e programmor'o poropoot i v e . Address e s s e nt from th e CPU ar e byt e alignod. so tho MRU noods to toot 
bit n*2. Simi l arly, ohooking DRAM addrooo > 128 moans tooting bit 7 of tho addroso in tho CPU, and bit 0 i n tho 



PEA23US 



990 



bitSupo 



rscr i ptp 



aranum 



bits 



nam e 



description 



9 



shadowsOff 



0 - r e gular shadowing (nybb l e based acooGS to 
flash) 

" shadow i ng d i sabled, 8 b i t direct acc e ss e s to 



hlF l ashAdr 



Only va li d wh e n shadowsOff ~ 1 



0 ~ acc o ss e s ar e to lowor 4 Kbyt e s of flash 



acoessos aro to upp e r A Kbyt e s of flash 



3 



onabl e FlashTostO - k ee p flash t e st r e g i st e r with i n th e TSMC flash 



va l ues. 



I P in its rosot stato 



- e nabl e flash tost r e gist e r to take on non r e s e t 



8-4 



flashTost 



I nt e rna l 5 b i t flash t e st rogistor within the TSMC 
flash I P (SFC008,08B0_HE). 



I f this is written with 0x1 E, then subsoquont 



writes w i l l b e according to tho TSMC writo tost 



mode. You must writ e a non 0x1 E value or resot 



tho rog i stor to exit th i s mode 



2 3 Q 



flashT l me 



Whon tim e rS e! is 1 , th i s valu o is us o d for th o 



duration of tho program cyc l e w i thin a standard 
flash write or erasur e . 1 unit "16 c l ock cyc le s (16 



100ns typica l ). 



R e gardless of t i m e rS e l, this va l uo is also used for 
the timeout following pow e r down detection 



before tho QA Ch i p resots itse l f. 1 unit ~ 1 clock 



cycle {- 100ns typ i ca l ). 

Noto that this moans tho programmor should s e t 



this to an appropriato valu e (e.g. 5 jug), just as tho 
localld n ee ds to be set. 



29 t i m e rS el 



0 ~ us e int e rnal (defau l t) timings for f l ash wr i tes & 



unshadowod 



shadowed 
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o rasuros 

1 - uso flaohTimo for flash wr i tOG and oraouroo 



18.2.1 Reset 

I nit i al i zat i on on r e s e t i nvo l v e s cl e aring a l l th e flags: 

MRURdy ° 0 # can^ t proccoa anything at thio point 

activcTrano < — & 
oxtraTrano < — & 
illChip < — & 
badUntilRcotart < — 0^ 
roo tart Pending < — & 
rctryCoxint < — & 
rctryStartcd < — & 
ncxtToXfor < — 0 — don^t care 
ohadowoOff < — 0 
hiFlaohAdr < — 0 

infoBloclcScl < — 0 # uocd to generate MRUModOa 

18.2.2 Ma i n logic 

Th e ma i n l og i c cons i sts of wa i ting for a new transaction, and starting an 
appropriat e sub - transaction accord i ng l y, as shown i n th e fo l lowing ps e udocod e : 

# GcncratG seme baoic aignala §e3? «se ia determining 

aGCcoorattcrna 
Ia32Bit = AcGCooModc ^ 

lo B Bit = lAcGGOoModc ^ 

loFlaah ° — l AGeeoaModCj , 

I ORAM = AeceooModej , 

loRead ° AoeoooModOa 

I o Write « AeGeooModea . 

noShadowo =■ ohadowoOff 

doShadowo = loFlaoh a — inoShadowo 

GontinueRequest ° — (lOMode # IdloMode) 

olcForTrano « — ireotartPending a eontinueRequeot 

otartOf SubTrano = » — (NowTrano v extraTrano) — a okForTrana 

doingTrano ° otartOf CubTrano \f — (aetiveTrano a — lextraTrano) 

lalnvalidRAM « doingTrano a IoRAM a (Adr» — v — (Adr^ a Adr^^) ) 

loTcatModeWB ■ doingTrano a IoRAM a loWrite a Adr^ 

loTeotReg^ ° loTcotModeWE a Adr^ . # write to flaoh teot regiotcr — 

bit 1 of word adr 
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laTcotRcg a, = loTcotModcWE a Adr4 . #writQ to flaah tcot rcgiotcr — 

bit 2 of word adr 

MRUTcotWE a loTcotRcg^ v loTootRcg^ , 
loPagcEraoo ° AaGGOoModC4 . 
5 loDeviccBraoG ° AaooooModcs --v — (laTcotModcWE a — (Adre _a.'— « — 0001000) ) 

# bit 9 not rcq 

loEraac ° laDcvicQEraoo v loPagcEraoc 

MRURAMScl = I ORAM A — iMRUTootWE A — i IoDcviccEraoG 

loInfBloolc a — (PMEn a (loDGvioGEraoG v loRcad) ) — v 

10 (iPMEn A infoBlockSQl a 

(loDGvioGEraoG — v — (loFlaoh — a — {i^cji r ^-^ ^ — i. — 9^ — a 1 ( Adr^ — a 

doShadowo) ) ) ) 

# Which olGmont — (byto or nybblc) — arc wo up to xforring? 
15 If (NcwTrano) 

toXfcr « 0 

Elac 

toXfcr = ncxtToXfcr 

Endlf 

20 

# Form the addrcoa that goco to the outoidc world 
i# — (loFlaoh A noShadowa) 

bytcCount « toXfor^ ^ 

MRUAdr^ « hiFlaohAdr — # — uppor — ea? — lower — block — ef — 4Kbytco — e# 

25 flaoh 

MPTTAdT - ^j^ 2 = ftf^T^ ii 2 # word # 

MRUAdr^ ° (Adr^^ a ( ■ Io32Bit| iIo32Bit) ) v bytoComit # byte 

Eloc 

bytcCount ° toXfor^ ^ 

30 MRUAdr^^ ^ Adr^ ^ — # word # 

MRUAdra - ^ » (Adr^ a ( .Ia32Bit | ■ Io32Bit) ) v bytcCount # byte 

MRUAdr^ ° toXfcr^ # nybblc 

Endlf 

35 # Aoouming a write, — arc we allowed to write to thio addreoo? 

writcEn »-» CclectBit [WritcMaok, — ( (MRUAdra a doChadowo) | MRUAdr^ ^^-j- 
# mu3C! 1 from 8 
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# Gcnoratc the 4 bit maolc to bo uood for XORing during CPU qgoqoo 
to flaoh 

baocMaok ° SQlcctNybblo (rM320ut, MIlUAdra -^^-# — muse — OGlocto — 4 — bito 

of 32 

If (PMEn) 

thcMaok = 0 

Eloc 

thcMaok ° baocMaok — # — we — only — use — maok — §e3£= — CPU — acccooGO — fee 

flaoh 
Endlf 

# SclcGt a byte — (and nybblo) from the data for writco 

baocDytG o SclcctBytG [RoqDataOut, bytcCount] # — mvuc ; — 8 — bito — from 

baocNybblc « SclGCtNybblc [baoGDytc, — toXfcr^ j — # muxs 4 bito from 0 
outNybblc ° baooNybblG 0 thoMaok # only uood when nybblo writing 

# Gcncrato the data on the output linco (docon^t matter for rcado 
or craourco) 

MRUDataOut^ j ^ = RQqDataOut^ j^-4 — of fcctivGly — don^ t — care — — flash 
writGO 

i€ — (doShadowo) 

MRUDataOut^ y— ■ — l OUtNybblOa . 

MRUDataOut^ = outNybblOj . 

MRUDataOut^ — ■ — l OutNybblOa 

MRUDataOut^ ■ outNybblo^ 

MRUDataOuta ,— « — lOutNybblOj , 

MRUDataOuta ° outNybblCj , 

MRUDataOut^ — ■ — l OUtNybblG^ 

MRUDataOut^ ■ outNybblo^ 

Elac 

MRUDataOut: ;u- a ° baocBytG 

Endlf 

# Setup MRUModQ 

allowTrano ° loRAM^v loRead-V (loWrito a writoEn) v loEraoc 
i# — (doingTrano) 

MRUModOa ° loInfBloclc 

MRU^todG^ ° loEraoG v loTcotRcg^ 
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MRUModc^ - 



loDcviccEraoc 



( i laWritQ 



i IoragcEraoG) 



loTcotRcg^ 



MRUNcwTrano 



otartOf SubTrano a allo^ i /Trano a 



( i IaInvalidRAI > 4 v MRUTcotWE v loDcviGcEraoc) 




001 # road (oafc) 



10 



15 



20 



25 



30 



MRUNcwTrano = 0 

Endlf 

# Gcncrato the effective nybblc read from flaoh — (thio may not be 

uacd) . 

# — When — there — is — a — ohadowFault — (non eraoed — memor>^ — aed — invalid 
ohadow3 ) — we conaider 

# it a bad read when an 8 bit read, or when writcMaolc^ io 0. 

# Note ; — we alwaya — oubotitute the upper nybble of WritcMaolc for 
the non valid data^ 

# but — only flag a — read error if WritcMaalc ^--^ — aloo — — When the 
data io eraoed, 

# we return 0 regardleoa of WritcMaolc^ — 
f iniohedTrano = doingTrano a MAURdy 

f iniohedFlaohSubTrano = f iniohedTrano a loFlaoh a — iIoEraoe 
ioWrittenFlaoh ° (FlaohData: y_ » 11111111) — # — flaoh — is — eraoed — fee 
all lo 

If (ioWrittenFlaoh a ( (FlaohData: ^^.^^ ^ 0 FlaohData^ ^.^^ ^) ^ 1111)) 
inNybble^^ = WritcMaolc :;^ 

badRcad = f iniohedFlaohSubTrano a loRead a (Io 8 Bit v 

iWritcMaoJc^ ^ — a doChadowo 
Bloc 

inNybble3,2,i,o « (thcMaokj, 2,1,0 ® FlaohPata c, 4 , 2 , 0 ^ ^ 

ioWrittenFlaoh 

badRcad ° 0 

Endlf 

# Prcocnt the reoultant data to the outoide v^orld 

MaokThcData — = loInvalidRAM — v — badRcad — v (badUntilRcotart a 

■loRAM) 

NoData ° loEraoe v loWrite v — idoingTrano 

If (NoData v MaoltThcData) 

MRUData^ a loInvalidRAM a illChip 
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10 



15 



25 



MRUData-i 1 a rctryCount a — (lalnvalidRAM a Adr^ -) — # maok aii 4- 

count bito 

MRUDatO a ^ = 0 # aloo onourco a read that io bad rctumo — ^ 

ElQGlf (loRAM) 

MRUDataji 3 4 — — SclcctDyto [RAMData, (Adr^ ^ — v — Io32Bit [ Io32Dit) ] 

# m\ix ! — 8 from 32 

MRUDatO a^- ^ « nAMDataa3 0 — # laba romain unchangod from RAM 

Elaolf — (doShadowo) 

MRUData 3 i 2 0 = inNybblo 

Bloc 

MRUData3i ai = FlaohPata 

Endlf 



# — Shift — iR — fefee — data — §03? — fehe — good — rcado cither — 4 — eae — 8 — bito 

(vfritco ~ don^ t care) 
— (f iniohcdFlaohSubTrano a — i badRcad) 

buf f3 ^-< — buff^ # ohift right 4 bito 

20 If (doChadowo) 

buf f23 4— < — buf fa :^ # ohift right 4 bito 



hnf f ^-r 2^ —^ — inNybblo 



ElOG 



btt##i9_4,— < — buf fa? 12 — # — ohift — right — 8 — bito, — buf f^ -g — ie — don' t 

care 

buf f o-^ — FlaohData 

Endlf 



Endlf 



30 # DGtcrminc whether or not we need a new oub tranoaction. Wo only 

need one if: 

# — * — there — haon^ t — boon — a — tranaition — fee — IdleModc — during — thio 
tranoaction 

4 — * v/c' re — doing 8 — bit rcado that arc ahadowcd 
35 #- * wG^rc — doing 32 bit rcado and we've done Icoo. than — 4 — or 8 — 

vo non oh) 

# — * we got a bad read from flaoh and we need to retry^ the read 
(jio wao a glitch) 

morcAdroToGo ° ( i toXfer^ a ( (loSBit a doShadowo) v Io32Bit) ) v 
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( itoXfcrj , A Ia32Bit) v ( i toXfcr^ a Io32Dit a doChadowo) 

ncQd-ToRctryRoad — « — badRcad — a ( i rctryStartcd — v (rctryCount — ^ 

1111) ) 

cxtraTrana_in f ini ohodFlaohSubTrana (morcAdroToGo v 

5 ncodToRct iryRcad ) 

A olcForTrano 

ncxtToXfor < toXf cr 1 ( f iniohcdFlaohSubTraa e — a (loWritc — v 

tnccdToRctryRcad) ) 

1 0 # goncratc our rdy oignal and otatc value o for next cyclG 

MRURdy ■ — idoingTrano v — (doingTrano a MTVURdy a — icxtraTrano_in ) 
extraTrano < — extraTrana^in 

activeTrano < iMRURdy — # all complete only when MRURdy io oet 

# TalcG account of bad rcado 

triedEnough = badRead a retryStartcd a — (retryCount = 1111) 
If (^4AURdy) 

^ — (laTeotModeWB a (Adr^^ « 0000) ) # — capture — writeo — fee — local 

rego 

illChip < — ^ 

rctryCount < 0- 

Eloc 

illChip < illChip v triedEnough 

If (badRcad) 

rctryCount < (retryCount a retryStartcd) — i — 1-# — AND — aii — 4- 

<UX L>S7 

retryStartcd < — i 

Bise 

retryStartcd < — 9-# — clear flag oo will be ok for the next 

read 

Endlf 

Endlf 

Endlf 

35 ^ Enouro that wc won't have problcma rcatarting a program 

— (MRURdy a — l OlcForTrano ) — # — note — MRURdy — (may — aet — be — running — a 
tranoaotion! ) 



15 



20 



25 



30 
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ohadowoOf f , hiFlaohAdr, inf oBlockSQl ^ r cot art Pending, 

badUntilRcotart < 0- 

ElOG 

badUntilRcotart < — badUntilRootart v tricdSnoH Cffe 

5 if — (doingTrano a — i continucRcqucot) 

rcotartPcnding < — 1 # record for later uoc 

Endlf 

if — (loTcotModcWE A Adr^ .^-^ — fefee — other writeo — aaee — taken — care — e# 

by the MAU 

10 ohadowoOff < — ReqDataOuto 

hiFlaohAdr < — ReqDataOutj , 

infoBlockSel < — RcqDataOuta 

Endlf 

Endlf 

15 49 Memory Accoos Unit 

The Momory Access Unit (MAU) takes m e mory acc e ss control signals and turns thorn i nto RAM 

acc e ss e s and flash access strobed s i gna l s w i th appropr i ate duration. 

A new transact i on Is giv e n by MRUNowTrans. Th e addr e ss to bo road from or wr i tt e n to i s on 

MRUAdr, wh i ch i s a nybbl e bas e d address. Th e MRUAdr (13 b i ts) is us e d as is for Flash address i ng. 
20 When mruramso i - 1 , then the RAM addr e ss (RAMAdr) i s tak e n from b i ts 9 3 of MRUAdr. Th e data 

to b e writt e n i s on i viRUData. 

The return va l ue MAURdy is sot when the MAU i s capable of r e c e iv i ng a n e w transact i on th e 
fo l low i ng cycle. Thus MAURdy will be 1 during th e f i na l cycle of a flash or ram acc e ss, and shou l d 
b e 1 wh e n th e MAU is i d l e. MAURdy should only bo 0 dur i ng startup or whon a transact i on has yot 
25 to fin i sh. 

Whon MRURA i viSoi ~ 1, the access is to RAM, and MRUModo has the following interpr e tation: 
Tabl e 384. Interpr e tation of MRUModo' *^^ 



30 











18(4- 


doRood 



Whon M RURAMSrt - 0, tho aocooc i c to flaoh. I f m rv^ocwe - thon tho oocxiGO i o to rogulor flaoh momofy^ oo g i von by 



48 

Tab l o 386. Intorprotation of MRU ^ 



MRUModO;L4 i s i gnorod for RAM 



- MRUMod e ^ can bo d i r e ctly i ntorprotod by tho MAU ao tho I FREN signa l roqu i rod for e mb e dd e d flas l i b l ock 
SFC008 08B0 HE 
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I 



t?ilc1 0 


action when MRUMode2=Q 


action when MRUModoa=4- 


00 


doWrite (main memory) 






doWrite (info block) 


04- 


doRoad (main momory) 






doRead (info block) 


40 


doErasoPago (main 


doErasoPago (info bloolO 


momory) 






doEraseDevice (main 




memory) 


doEraseDevioo {both 
bfeeks) 



tf- MRUT o otWE Is 1 , then MRUModcg wil l also be 0, and tlio aocoss i s to a flash tost 
r e gist e r, as giv e n by MRUModo: 
5 Tabl e 386. I nt e rpr e tation of MRUMod e for flash t e st reg i ster write acoossoo 









If (MRUData^ " Q), tie the flash IP test register to its reset state 


If (MRUData^ - 1), take the flash IP test register out of reset state, and 




write MRUDatag-4 to the 5 bit flash test register within the flash IP 
(SFC008 08B0 HE) 


V 

A f /\ 


Write MRUData^s-a to the internal 20-bit alternate counter source register 


flashTime, and MRUData^ to the corresponding 1 bit tost register 
timerSel. 



4971 I mplementat i on 

The MAU cons i sts of l og i c that calculat e s MAURdy, and additiona l l ogic that produces tho various 
10 strobed s i gnals accord i ng to the TSMC Flash m e mory SFC0Q08_08B9_HE; refer to this 

datasheet [A] for detailed t i m i ng d i agrams. Both ma i n memory and information blocks can bo 
accessed i n th e Flash. The F l ash t e st mod e s ar e also supported as describ e d in [5] and general 
appl i cat i on information is g i ven in [6]. 

The MAU can be consid e r e d to b e a RAM contro l b l ock and a flash contro l b l ock, with appropriate 
15 action s e l e ct e d by mruramsoi. For al l mod e s e xcept r e ad, the Flash r e quir e s wa i t stat e s (wh i ch 
ar e imp le m e nt e d with a s i ngl e count e r) dur i ng which it is possible to access th e RAM. On l y 1 
transact i on may be pending whil e wa i ting for the wa i t states to e xp i r e . Mu l t i p le byt e s may be 
wr i tt e n to F l ash without exit i ng th e wr i t e mode. 

Th e MAU e nsur e s that only va li d contro l sequences mooting tho t i m i ng roqu i romonts of tho F l ash 
20 memory are prov i ded. A wr i te time out i s i nclud e d which ensures tho Flash cannot b e l oft in write 
mode i ndef i nitely; th i s is used when the Flash i s programm e d via the lO Unit to e nsure the X 
address do e s not change wh il e in wr i te mod e . Oth e rwise, other un i ts shou l d e nsur e that when 



*• MRUMod e ^ wi l l a l ways bo 0 whon MRUTootWE - 1 
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wr i ting bytos to F l ash, tho X addroos doos not chango. Tho X address is h el d constant by th o 
MAU dur i ng write and pago eras e modos to protoct the F l ash. If an X address ohango is dotootod 
by th e MAU during a F l ash wr i to s e qu e nc e , It will exit wr i to mode a l lowing th e X address to 
change and r e-e nter wr i te modo. Thus, tho data will st i l l bo wr i tt e n to F l ash but i t w il l tako l onger. 
5 Wh e n e ither tho F l ash or RAM i s not boing used, th e MAU sots the contro l signa l s to put tho 
particular m e mory typ e into standby to min i miso pow e r consumption. 

Tho MAU assumes no new transact i ons can start while one is in progress and al l i nputs must 
remain constant unti l MAU i s ready. 
4072 Flash test mode 

10 MAU also e nab l es tho Flash tost modo rogistor to bo programmed which q I Iowg various 

product i on t e sts to bo carried out. I f MRUTcstWE - 1, transact i ons arc direct e d towards the test 
mod e r e gist e r. Most of the tests us e the samo contro l soquonces that arc used for normal 
operation except that one t i me valu e n ee ds to be changed. Th i s is provided by tho flaohTimo 
rogistor that can bo wr i tten to by the CPU a ll ow i ng tho timer to b e set to a rang e of va l ues up to 

15 more than 1 s e cond. A special contro l s e quence i s g e nerated when tho tost mode regist e r is s e t 
to 0x1 E and i s initiated by wr i ting to tho Flash. 

Noto that on rosot, timoSoi and flaohTimo are both cloored to 0. Tho 5 bit flash t e st rogistor w i thin tho 
TSMC flash IP Is a l so reset by sotting tmr -1 . Whon MRUTostWE - 1. any open wr i to s e qu e nc e i s 
c l os e d e ven i f the write i s not to the 5 bit flash t e st rogistor within tho TSMC flash I P. 

20 40t3 Flash power failure protection 

Pow e r could fail at any tim e ; tho most sorious conGoquonco wou l d b e if this occurr e d dur i ng 
wr i ting to the Flash and data b e came corrupted i n another location to that be i ng wr i tt e n to. Th e 
MAU w ill protect tho F l ash by sw i tching off th e charge pump (h i gh vo l tag e supply us e d for 
programm i ng and erasing) as soon as th e power starts to fa il . Aft e r a t i m e de l ay of about 6^o 

25 (programmable), to a l low tho discharge of th e charge pump, tho QA chip w il l be rosot whether or 
not tho power supply r e covers. 
4©t4 Flas h acce s s state mac hi ne 

4©:§ I nterface 

30 Tabl e 387. MAU i nt e rface descr i pt i on 



Signal name 


m 


Description 






System clock. 




\B 


System reset (active low). 




MAURAMEn 








Flag indicating whothor tho oxtornal user noodo 


access to the RAM at a gross level (e.g. the CPU is 
active and therefore may want RAM access). 1 ~ 




wants access available, 0 ~ don't want. 


MRUNowTrons 








Flag Indicating MRU wishes to start a new 
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transaction. May only bo asGortod (- 1) whon 


K 4 A 1 1 ^3 ^ • M ^ Alls ^« ■ A A .A 1 .M.* A « « r» * * A & Im. .m. L», .m. 1 ^ ^ ^ A _ - * 


MAUKdy — 1 . All inputs below must be held constant 
until MAU is ready. 


MKURAMSel 




1 RAM, 0 " Flash. 






MRUMode2-0 




Type of transaction to be performed. 


MRUAdr12-0 




Memory address from the MRU. 


MRUDataOut31 

Q 


\fi 


Data used to control and set tost modes and timing 


MRUTestWE 


\B 


Flao IndicatinQ test-mode tran*=iHntion=*i 


PwrFoiling 


[ft 








MAURdy 


Out 






Tho MAU is ready when MAURdy - 1 . It is always 


wait states. 


RAMOutEn 








0 ~ onablo tho RAM to road or write this cycle (i.e. 
active low) 1 ~ disable tho RAM this cycio (saves 


power, memory is intact) 


RAMWE 


Qtrt 






SRAM). 


MemClk 


Qui 


Inverted system clock to the RAM (required to moot 
timing). 


FlashCtriS 0 




Lroniroi signals to mo riasn. 

IFREN ~ information block enable, not used always 


— n 

— y 

Afe — A aooross onauio 
YE ~ Y address enablo 
SB ~ sense amplifier enable (read only) 




v=^E — ouipul enapie ^reuu oniyj, ni-^ wnen kjc. — y 


NVSTR " enables all write and erase modes 


ERASE - page erase modo 


MAS1 ~ mass erase modo 






Out 




TMR - Register rosot for tost modo 


RAMAdre 0 


Otrt 






RAM address in tho range 0 to 05. 


FlashAdr12 0 


Out 


Flash address, full rango. 


MAURotOutL 


Hi it 


Activates the global reset, RstL. 



4©t6 Calculation of t i mer values 

Set and calculate timer init i al i sation valu e s bas e d on F l ash data sh ee t va l ues, clock p e riod and 
c l ock rang e . 

# Note ! — Flaoh data ohcct givco minimum timingo 
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# Dolayo greater than 1 clock cycle 



cloGk_j)cr 



# no 



10 



15 



Flaah Tnvo 



Flaoh Tnvh 



Flaoh Tnvhl 



Flaoh_Tpga 



Flaoh_Tpgh 



Flaoh_Tprog 
Flaoh Tado — 



Flaoh Tadh 



Flaoh Trcv 



Flaoh Thv 



7500 



7500 



# no 



150 



# uo 



# UO 



100 



# no 



-3^ 



# uo 



100 



1500 



# uo — # BytQ write timoout 

# no 



Flaoh Toraoc 



# mo — # Not currently uocd 

# mo 



Flaoh Tmc 



300 



# mo 



20 



25 



30 



# Derive maximum count o — ( — 1 oincc otatc machine io oynchronouo) 

FIACII_NVC = Flaoh_Tnvo/cloc3c_pcr i 

FLACII NVII — 



Flaoh_Tnvh/Glock_pcr 



FIJVSII_ 


_NVII1 


= Flaoh_Tnvhl*1000/cloGk_pcr i 


FLACII^ 


:^GG 


= Flaoh_Tpgo*1000/clock_j>cr 1 


FIiACII_ 


:^»GH 

PROG 


° Flaoh_Tpgh/GloGk_pGr 1 


FIiASn_ 




= Flaoh_Tprog*1000/cloc]t_j)Gr 1 


FIASII_ 
FIACII_ 


:^i^s 

:^ft©H 


= Flaoh_Tado/clock_j)er 3r 

= Flaoh Tadh*1000/clock per i 



FLASH ADH l\m) WRITE VGli 



FIJ\£H T^DH \ FliASII rCII i 1 # note io l l 



FliACII RCV 



Flaoh_Trcv/ cloclc^er 



FliACII IIV 



= Flaoh_Thv*1000000/cloGk_j>cr 3b 

FIASH__ERACE = Flaoh_TeraoG* 1000 000 /cloGk_j)cr 
FLASH^MB ° Flaoh_Tmo* 1000 000 /clookjcr i 



35 4^ 



40 



Gount_oige — = — 34 — # — Number — e€ — bite — ifi — timer — counter ( ncwCount ) 

determined by Tmc 

DEFAULTg 



Defau l ts to UGO whon no action is spocifiod. 
FlaohTranoPendingGet ° 0 
FlaohTranoPendingReoct « 0 
TMRSct ° 0 
TMRRot a 0 



STLECet 
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STLERat « 0 

TcotTimGEn ° 0 

IFREN ° FlaohXadr^ 

XE ^ 0 

5 YE a 0 

SE « 0 

OE = 0 

PROG = 0 

NVSTR = 0 

10 ERASE = 0 

MA61 ° 0 

MAURotOutL " 1 



— (acGGOoCount ^ 0) 

15 nowCount — = aaoGOoCount 1 — # — dGGrGmcnt — unlcoo — inotructQd 

othcrwioG 
Bise 

riGwCount = 0 



Bndlf 

20 4aB Reset 

In i t i a l is e state and count e r r e g i sters. 
# aoynchronouo rcoct — (active low) 

otatc < — idle 

acGGooCount < 1 

25 count 2 < & 

XadrRcg < & 

FlaohTranorcnding < 9^ 

TcotTimc < 0- 



TMR < 



30 CTLBFlag < 0- 

40.9 State macm i nc 

Th e stato machine gonoratoo sequeno e s of t i mod wav e forms to control tho oporation of tho F l ash 
m e mory. 

35 FlaohTranoPGndingRGOGt - 1 

— ( aomcthingToDo) — # Flaoh otarting oonditiono 

If (MRUTcotWB) 

ncxtStatc = TMO 



ElOG 
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Switch — (MRUModcint) 
CaoG doWritC ! 



ncxtStatc ^writcNVC 
nowCount ■ FIjACH__NVC 
Caoc doRQadi 



-SB- 



10 ncxtStatc = idle 

Caoc doBraocragc : 

ncxtStatc = pagGEraoc 

ncwCount ° FIjASH_NVS 

Caoo doEraacDcvicc : 

15 ncxtStatc - maooEraoc 

ncwCount ° FIjASII_^TVC 

EndSwitah 



Endlf 



Endlf 

20 19.0.1 Flash pag e oraso 

Tho fo l lowing psoducocode i i l ustratos tho F l ash pago oraso Qoquonco. 
pagcEraac 

ERASE ° 1 

XE ■ 1 



25 If ( i Pwr Failing) 

— ( count Z) 



ncwCount ° FL/USII ERASE 



ncxtStatc - pagcEraacERASE 

Endlf 



30 Bise 

ncxtStatc = Hclpl 

Endlf 



35 pagcBraocERACE 

ERASE « 1 

l^TVSTR u . 1 



If ( i Pwr Failing) 

40 If ( count Z) 
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Endlf 

Bloo 

ncwCount « TcotTimCj ^^o 

ncxtStatc - Hclpl 

Endlf 

pagcEraoQ^JVII 
^JVCTR 1 

XE = 1 

— ( iPwrFailing) 

^ — ( count Z) 

ncwCovint = FIiACH_RCV 

ncxtCtatc = RCVDM 

Endlf 

Elac 

ncwCount = TcotTimCj ^-g 

ncxtStatc -Hclpl 

Endlf 

RCVPM 

— ( count Z) 

ncxtCtatc = idle # exit 

Endlf 

19.9.2 Flash mass oraso 

Th e follow i ng pooducooode i l lustrates the F l ash mass e rase Qoquonoo. 
maaoEraac 

MASl = 1 

ERASE ^ 1 

XE = 1 

If ( count Z) 

^ — ( i TcatTimca ^^ 

ncwCount = FIiASn_ME 

Bloc 

ncwCount ° TcotTimCj ^^— | — 0000 

Endlf 

ncxtStatc =maooEraoGME 

Endlf 
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10 



15 



20 



25 



30 



35 



maooBraoQMB 

MASl » 1 

BRACE o 1 

NVCXn ° 1 

XB = 1 



— (oountZ) 
ncwCount 



FiiACii mnii 



ncxtStatc = maaoBraocNVHl 



Bndlf 

maaoEraocNVIIl 

POASl <= 1 

NVSTR ° 1 

XB - 1 



If (Gountz) 
ncwCoiAnt 



FLASH RCV 



noxtStatc = RCVrM 



Endlf 

19.9.3 F l ash byt e writ e 

The fo ll ow i ng pooducocodo il l ustrates tho F l ash byto writo soquonco. 
writcNVC 

PROG - 1 

XB = 1 



— ( tPwrFailing) 

if — ( count Z) 

If ( i STLBFlag) 



iiGwCount 



FLASH PCS 



ncxtStatc "writoPGS 



Bloc 



r^nwrr>lln^, m Tnn i i-Timn^^ p — | — 0000 



ncxtStatc = STLEO 
Endlf 



Endlf 



Bloc 



ncwCount ^ TcotTimCj , 

ncxtStatc =IIclpl 

Endlf 



40 



writcPGS 
PROG ° 1 
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NVSTR ° 1 

XB = 1 

if — ( iPwrFailing) 

If (aountg) 

5 ncwCount = FIjASH_.ADS 

ncxtStatc =writGADS 

Endlf 

Bloc 

10 ncxtCtatc =Hclpl 

Endlf 



writcADS # Add Tado to Tpga 
PROG ° 1 



15 NVSTR = 1 

XB « 1 



FlaohTranoPGndingRcoGt = 1 

M — ( iPwr Failing) 

£f — ( count Z) 

20 If ( .TGOtTiTnGa ^4- 

ncwCount ° FLASH^PROG 

Eloc 



nowrnimt = Ton^Timn ig q — | — OOQO 

Endlf 



25 ncxtStatc = writcPROG 

Endlf 

Eloc 



ncxtStatc - Hclpl 



30 Endlf 



writcPROG 

PROG =■ 1 

^TVSTR « 1 

35 YE ^ 1 

XE = 1 

i# — ( -i Pwr Failing) 

Ef — (coxintZ) 

ncwCount ° FIiACH_ADH_Al?TD_WRITE_PGII 

40 ncxtStatc writcADII 
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Endlf 

Eloo 

ncxtStatc g= IIclp2 

Bndlf 

writcADH 

PROG = 1 

^TVSTR = 1 

XE = 1 

FlaohTranorcndingSct = aomcthingToDo 

M — ( iPwrFailing) 

— ( i FlaohNowTrano) 

£f — (cQuntg), GraoGfull exit after timeout 

ncwCount « FIASH^NVII 

• nextState = vnritcNVII 

Endlf 

Bloc # Do oome thing ao there io a new tranoaotion 

If ( (MRUModeint » doWritc) a ( i XadrCh) ) 

ncwCoiint = FLASII_ADS Write another byte 

nextCtate = gwritGADS 

ElOG 

ncwCount — = — FIiASH_NVII Exit — sts — aew — trana — is — aefe — Flaoh 

write 

ncxtStatc =writcNVH 

Endlf 

Endlf 

Eloe 

nowPmin^ m Tr > ^^T^ mn^j p 

ncxtStatc = Helpl 

Endlf 

writcNVH 

l^rVCTR = 1 

XE 1 

FlaohTranorcndingSct = oomcthingToDo 

— ( i PwrFailing) 

3&# — ( count Z) 

ncwCount ° FIASH RCV 
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ncxtStatc = RCV 



Endlf 



ElOG 



ncxtStatc « Hclpl 



Endlf 



R€V tt v/ait til \ic' rc allowed to do another tranoaction 

FlaahTranorcndingSct = oomcthingToDo 

10 If ( count Z) 

ncxtStatc = idle 

Endlf 



19.9.^ T e st Mod e s e qu e nc e 

Th e fo l low i ng pseduoocod e il lustrat e s th e t e st mode s e qu e nc e . 
15 TMO # Needed thio due to delay on TMR 
IFRBN ° 0 

ncxtStatc = idle # default 

If ( ^fllUJfodoint3 ,-)- 

TeotTimcBn = 1 



35 



20 Endlf 

If (MRUT^odcint^ ^ 

If ( .MRUData0ut3 .-f 

TMRSct = 1 



STLERot a s 1 # Reoct flag ao leaving tcot mode 

25 B3rse 

If (MRUDataOute - ^ = 11110) 

STLESct ■» 1 

Elac 



STLERot 



30 Endlf 

TmRat = 1 



ncxtStatc = TMl # Will get priority 

Endlf 



Endlf 

IFRBN 



ncxtStatc « TM2 



40 
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NVSTR 



-SB- 



IFRBN 



ncxtStatQ = TM3 

NVSTR - 1 



-GB- 



MASl « MRUDataOut^ 

10 IFREM = MRUDataOut^ 

XB ° I>4RUDataOut€ ^ 

YE " MRUDataOut^ 

ERASE = MRUDataOut» 

TMRSct ° 1 

15 ncxtStato = TM 4 

NVSTR ° 1 

SB = 1 



20 MA£1 = MRUDataOut^ . 

IFREN = mUDataOut^ 

XB = MRUDataOut^ 

YE ° MRUDataOut: ^ 

ERASE ° MRUDataOutfl . 

25 TMRRot = 1 

ncxtStato = TM5 

I>JVCTR « 1 

30 — SB « 1 

MASl o MRUDataOut4 , 

IFREty = MRUDataOuts 

XE = MRUDataOut^ 

YE ° MRUDataOut^ 

35 ERASE « MRUDataOut^ 

noxtStatc =TM6 

NVSTR r= 1 



40 — SE- 
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ncxtStatc - idle 

10.0.5 Reverse tunnel i ng and thin ox i do l oak tost 

Tiio following psoducocodo shows the reverse tunneling and th i n oxide l eak tost 
soquonoo. 

5 STLEO 

XB « 1 

PROG. - 1 

NVSTR = 1 

^ — ( count Z) 

10 riQwCount ° FLACII^I^JVH 

ncxtStato = STLEl 

Endlf 



CTLBl 

15 XE « 1 

NVSTR ■ 1 

If (Gomitg) 

ncwCount «a FLASH^RCV 

ncxtStatc = STLSa 

20 Endlf 



STLE2 

^ — (countZ) 

ncxtStatc = idle 

25 Endlf 

19.9.6 Emerg e ncy instructions 

The follow i ng ps e ducocod e shows th e stat e s us e d for e merg e ncy s i tuat i ons such 
as wh e n power is fa ili ng. 
IIclpl # MAURdy — > 0 to hold MA.U input a conotant, — if not too late 

30 — XE = 1 

— ( count Z) 

ncxtStatc = Goodbye 

Endlf 

35 Hclp2 # ^4AURdy — > 0 to hold MAU inputa conotant, — if not too late 

XE o 1 

YE = 1 

if — ( count Z) 

ncxtStatc - Goodbye 

40 Endlf 
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Goodby e 

XE a 1 # rrcvcnto Flaoh timing violation 

MAURotOutli = 0 # RooGt whole chip whether power failo 

5 # nothing eloe to do or recover a 

19.10 Concurrent log i c 

acceooCount < — newCount # update acceooCovint every cycle 

count Z < (newCount ° 0) 

10 XadrReg < — FlaohXAdr # otore the previoua X addreoo 

otate < — nextstate 

— ( FlaohTranoPcndingRcact ) 

FlaohTranoPcnding < — 0 # React flag — (hao priority) 

15 Elac 

^ — ( FlaohTranoPendingSet ) 

FlaohTranoPending < — 1 # Set flag 

Bndlf 



20 



Bndlf 

-I# — (TeotTimeEn) 

TeotTime < — MRUDataOutap o 

Endlf 



25 If (TMRSet) SRFF for Tm 

Tfgl < i 

Elae 



If (TMRRot) 
TMR < & 



30 Endlf 

Endlf 



If (STLBRot) SRFF for STLE tcota 



CTLEFlag < & 

35 Eloe 

If (STLECet) 



STLEFlag < — i 



Endlf 

Endlf 
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FlaohNcwTrano = MRUNcwTrano a — ( i r4RUIlAMSQl) 

RAMNcwTrana = MRUNcwTrana a MRUR7\f4Scl 

aomothingToDo = FlaohTranoPcnding v FlaohNcwTrano 

5 quickCmd ° — (MRUModcint « doRcad) — a — iMRUTcotWE 

FlaohRdy = — ( (otatc ° idle) a ( l OomcthingToDo v quickCmd)) 

V (((otatG writcADII) 

V — (otato = writc^TVlI) 

V — (otatc = writcRCV) ) — a — ( iFlaQhTranoPcndingCct) ) 

10 V ((otatc = TMO) a (ncxtStatc idle)) 

V (otatc = TM6) 



If (MRURamGol) 

MAURdy = 1 # Alwayo ready for RAM 

15 ElOQ 

MAURdy i-- FlaohRdy 

Endlf 



landX = MRUModC a- — | — MRTTAdr- j^^ c 

20 FlaohXAdr = landX When ( ( .XE) v (SB a OE) ) Eloc XadrRcg 

FlaohAdr = FlaohXAdr | mUAdr ^ # Merge X and Y addrcooco 

XadrCh — = i — When ( (XadrRcg — — landX) a — XB — a ( ■ i SE) a ( l OE) 

A FlaohlJcwTrano) — Eloc 0 
# Xadr change 

25 

MRUModcint = MRUModO a^ ^ tt Backwardo compatabili fey 

RAMAdr = MRUAdr^ .^__# — maximum — addreoo — = — 9S-, — reoponoibility — e# 

MRU for valid adr 

RAMWE - MRUModcint^ 

30 RAMOutEn = — iRAMNcwTrano # turn off RAM if not uoing it 



FlaahCtrl(O) = IFREN 

FlaohCtrl (1) — ^ XE 

FlaohCtrl(2) ^ YE 

35 FlaahCtrlO) ■= CB 

FlaohCtrl ( l ) - OE 

FlaohCtrl(D) — = PROG 

FlaohCtrKG) ■-■ ITVCTR 

FlaohCtrl (7) — ° BRACE 
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FlaahCtrl (8) 



MASl 



McmCllc 



i Cl]c # Memory cloclc 



20 Analogue un i t 

Th i s s e ction spocifios tho mandatory blocks of Sootion 11.1 on pag e 1 in a way wh i ch al l ows 
somo froodom in the dotai l od I mpl e montation. 

Circuits n ee d to oporato ovor th e t e mporaturo range 40^C to *125^ Gr 

Tho unit prov i d e s powor on r e s e t, prot e ct i on of tho F l ash memory against erroneous writ e s during 
pow e r down ( I n conjunct i on with th e MAU) and tho syst e m clock SysClk. 
Voltage b udget 

Tho table bolow shows tho koy thresholds for Vyp wh i ch d e fine th e r e quiromonts for powor on 
reset and normal operation. 
Tablo 388. Vgo li m i ts 



VDD parameter 



D e scr i ption 



Voltag e 



VDDFTmax 



Flash t e st maximum 



3^^ 



VDDFTtyp 



Flash tost typical 



3t3 



VDDFTm i n 



F l ash tost min i mum 



VDDmax 



Normal op e rat i on maximum (typ +|2. ?§' 



E5S- 



VDDtyp 



Normal op e ration typica l 



2S 



VDDmin 



Normal op e rat i on min i mum (typ — §%) 2.375 



VDDPORmax 



Pow e r on r e set maximum 



13" 



2O72 Voltage reference 

Th i s c i rcuit g e n e rates a stabl e voltage that i s approximately independent of PVT (process, 
voltage, t e mp e rature) and will typica l ly be implemented as a bandgap. Usual l y, a startup c i rcu i t is 
r e qu i red to avo i d th e stable V^g " 0 cond i t i on. The des i gn should aim to m i nim i se tho add i tiona l 
vo l tage above V^g requ i red for the c i rcuit to op e rate. An additional output, BGOn, w ill bo provided 
and assert e d wh e n the bandgap has start e d and i ndicates to other b l ocks that th e output vo l tage 
i s stabl e and may be used. 

Table 389. Bandgap targ e t p e rformance 



Parameter 


Conditions 


1^ ji^ 




Max 






typiea[ 




4^ 


4^ 


V 



Tho vo l tago VDDFT may only b e appl i ed for tho timos spocifiod in tho TSMG F l aoh momory tost dooumont. 

— Voltago rogu l atoro us e d to deriv e VDD will typica l ly hav e symmotrio to l oranoo I 
^ — Tho m i n i mum a l lowabl e vo l tago for F l ash m e mory op e rat i on. 
— Ovor PVT, not inc l ud i ng offcots 
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typical 




§0 






Vstart 


worst case 








V 












nA 


N/temp 










mV/oC 







2Gt3 Power detection un i t 

Only und e r vo l tag e d e t e ction w ill be described and i o r e quir e d to prov i de two outputs: 

-* und e rL controls the power on res e t; and 

5 PwrFa ili ng I nd i cat e s poss i b le fai l ure of the power supply. 

Both s i gnals ar e d e riv e d by compar i ng scal e d v e rsions of Vpp against the roforonco voltage V^ gT 

20.3.1 Vp t^ monotonio i ty 

Th e rising and fal l ing edgos of Vyp (from the oxtornal power supply) sha l l b e monotonic in ord e r to 
guarantoo corr e ct op e ration of powor on r e set and powor fail i ng det e ction. Random noiso may b e 
10 pr o sont but shou l d havo a p e ak to poak amplitude of l ess than th e hyst e r e sis of th e comparators 
us e d for det e ction in the PDU. 

20.3.2 Und e r Voltag e D e t e ction Unit 

Th e und e rL signal gen e rat e s the global res e t to th e log i c which shou l d b e de assort e d when th e 
supp l y vo l tage is high enough for the logic and analogue circu i ts to oporato. S i nc e the l ogic r e set 
15 i s asynchronous, i t I s not necessary to onsuro th e c l ock i s activ e b e for e r e l e as i ng th e r e s e t or to 
i nclud e any d el ay. 

Th e QA ch i p l og i c w i ll start i mmod l atoly tho powor on rosot is roloasod so th i s shou l d on l y bo 
done when tho cond i t i ons of supp l y voltag e and clock frequency aro with i n l i m i ts for the correct 
op e ration of th e l ogic. 

20 Tho power on rosot signa l sha ll not be tr i ggered by narrow sp i k e s (<100ns) on th e pow e r supp l y. 
Some Immun i ty should bo prov i d e d to pow e r supp l y gl i tch e s although s i nc e th e QA chip may bo 
und e r attack, any r e s e t delay should bo kept short. Tho unit should not bo tr i ggorod by l ogic 
dynamic current spikes r e sult i ng in short voltogo sp i k e s du e to bond wire and package 
i nductance. 

25 On th e r i sing e dg e of Vqq, the maximum thr e shold for d e assert i ng th e signal shall b e wh e n Vo p-> 
Vppini B. On th e falling e dge of Vyp, th e minimum thr e sho l d for ass e rting th e signa l shal l b e Voo-< 

The reset s i gna l must b e h e ld low long enough (Tp wfmn) -to onsuro all fl i p flops are res e t. Tho 
standard c el l data shoot [7] g i ves a figure of 0.73ns for the minimum width of th e res e t pu l s e for a ll 
30 flip flop typos. 

2 b i ts of tr i mming (trim4^) w i ll b e provid e d to tak e up a l l of th e e rror i n th e bandgap vo l tag e . This 
wi l l on l y aff e ct tho ass e rt i on of tho rosot during powor down since tho powor on default sotting 
must be us e d dur i ng power up. 
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Although th e roforonoo voltago cannot b e d i r e ct l y m e asured, i t i s compar e d aga i nst Vu Q4fi-tf4e 
PDU. The stato of th e power on res e t signal can bo inf e rr e d by trying to commun i cato through tho 
s e ria l bus w i th tho chip. By po lli ng tho chip and s l owly i ncr e asing Vyo, a po i nt w i ll bo roaohod 
whoro tho power on rosot is roloasod al l owing th e s e rial bus to operate; this vo l tago shou l d bo 
5 rocordod. As V^p is l ower e d, i t w il l cross th e thr e sho l d wh i ch assorts th e reset s i gnal. Th e pow e r 
on defau l t is sot to tho l owest voltag e that can be trimm e d (which giv e s the maximum hystorisis). 
This vo l tago shou l d bo rocordod (or i t may b e suff i ci e nt to est i mat e i t from the res e t r ele as e 
vo l tage r e corded above). V pp Is then i ncreas e d abov e the rosot roloase thresho l d and the PDU 
tr i m adjusted to th e sett i ng tho clos e st to ypppoRmaK^ -^ ^ should then b e lowered and th e thr e sho l d 
10 at which tho rosot is r e- asserted confirmed. 

Tabl e 390. Pow e r on r e s e t targ e t performance 



Parameter 


Conditions 










Vthrup 


T - 27oC 
















Vthrdn 


T - 27oC 


2^ 






V 


Vhystmin 










mV 








§ 




HA 


Tspike 






•] QQ 




RS 


Vminr 










V 


Tpwmin 




4- 






HS 



Power on rosot behav i our 

Th e signal PwrFai li ng w ill bo used to protect tho Flash memory by turn i ng off tho charge pump 
15 during a write or pag e e ras e if th e supp l y voltago drops b el ow a c e rtain threshold. Th e charg e 

pump is oxpoctod to tak e about 5us to discharge. Tho PwrFai l ing signal shall bo protect e d against 
narrow spikes (< 100ns) on tho power supply. 

Tho nom i nal threshold for asserting the signa l needs to bo in tho range \/p Qfima)r<A/^Qp^ < ^y omn 
so l a chos e n to bo ass e rt e d wh e n VD D-<-VDDPFtyp-'=A/ DDpo RyT^3 x -h 2QQmV Thin infnrn n r I aw rfitn 
20 li mitat i on which must b e < 200mV/5us to ensure enough tim e to detect that pow e r is fa i l i ng before 
the supp l y drops too l ow and th e r e s e t is activated. Th i s requirement must bo mot in tho 
app l ication by provision of ad e quat e supp l y decoup li ng or oth e r m e ans to control tho rat e of 

Tabl e 391 . Power fa il ing d e t e ction target performanc e 

25 



Parameter 


Conditions 


1^ jp 






Unite 








Vthf 


T - 27oC 


2r4- 


























6 







Thoso l imitG aro aftor trimm i ng and ino l udo an o l fovvanoo for VDD ramping. 
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Tspike 










RS 


Vminr 










V 



2 bits of trimming (trim4^) wi ll be prov i d e d to tak e up a ll of tho orror i n tho bandgap voltogo. 
2O74 Ring oscillator 

SysClk is required to be in the range 7-14 MHz throughout the lifetime of the circuit provided Vdd 
5 is maintained within the range Vddmin < Vdd < Vddmax- The 2:1 range Is derived from the 

programming time requirements of the TSMC Flash memory. If this range is exceeded, the useful 
lifetime of the Flash may be reduced. 

The first version of the QA chip, without physical protection, does not require the addition of 
random jitter to the clock. However, it is recommended that the ring oscillator be designed in such 
10 a way as to allow for the addition of jitter later on with minimal modification. In this way, the un- 
trimmed centre frequency would not be expected to change. 

The initial frequency error must be reduced to remain within the range 10MHz / 1 .41 to 10MHz 
X 1 .41 allowing for variation in: 
voltage 
15 • temperature 

• ageing 

• added jitter 

• errors in frequency measurement and setting accuracy 
The range budget must be partitioned between these variables. 

20 Figur e 4 11. Ficure 38 is a Ring oscillator block diagram 

The above arrangement allows the oscillator centre frequency to be trimmed since the bias 
current of the ring oscillator is controlled by the DAC. SysClk Is derived by dividing the oscillator 
frequency by 5 which makes the oscillator smaller and allows the duty cycle of the clock to be 
better controlled. 

25 20. 4 .1 DAC (programmable current source) 

Using Vbg, this block sources a current that can be programmed by the Trim signal. 6 of the 
available 8 trim bits will be used (trim7.2) giving a clock adjustment resolution of about 250kHz. 
The range of current should be such that the ring oscillator frequency can be adjusted over a 4 to 
1 range. 

30 Tab le 392 T able 1 7 . Programmable current source target performance 



Parameter 


Conditions 


Min 


Typ 


Max 


Units 


lout 


Trim7-2 = 0 
Trim7-2 = 32 
Trim 7-2 = 63 




5 

12.5 
20 






Vrefin 






1.23 




V 


Rout 


Trim7-2 = 63 


2.5 






Ma 
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•Ring oscillator circuit 

Tabl e 39 3T able 18 . Ring oscillator target performance 



Parameter 


Conditions 


Min 


Typ 


Max 


Units 


Fosc=° 




7 


10 


14 


MHz 


IDD 






10 




mA 


Kl 






1 




MHz/kiA 


KVDD 






+200 




KHz/V 


KT 






+30 




KHz/oC 


Vstart 




1.5 






V 



5 K| = control sensitivity, Kvdd = Vdd sensitivity, Kj = temperature sensitivity 

With the figures above, Kvdd will give rise to a maximum variation of +50kHz and 
Kt to +1 .8MHz over the specified range of Vdd and temperature. 

20.^.3 Dlv5 

The ring oscillator will be prescaled by 5 to obtain the nominal 10MHz clock. An asynchronous 
1 0 design may be used to save power. Several divided clock duty cycles are obtainable, eg 4:1 , 3:2 
etc. To ease timing requirements for the standard cell logic block, the following clock will be 
generated; most flip-flops will operate on the rising edge of the clock allowing negative edge 
clocking to meet memory timing. 
Tab l e 39 4 T able 19 . Div5 target performance 

15 



Parameter 


Conditions 


Min 


Typ 


Max 


Units 


Fmax 


Vdd = 1.5V 


100 






MHz 


IDD 






10 







207§ Power on reset 

This block combines the overL (omitted from the current version), underL and MAURstOutL signals to 
provide the global reset. MAURstOutL is delayed by one clock cycle to ensure a reset generated 
when this signal is asserted has at least this duration since the reset deasserts the signal itself. It 
20 should be noted that the register, with active low reset RN, is the only one in the QA chip not 
connected to RstL. 

[4] TSMC. Oct 1, 2000. SFC0008_08B9_HE, 8K x 8 Embedded Flash Memory Specification. 
Rev 0.1. 

[5] TSMC (design service division). Sep 10, 2001. 0.25um Embedded Flash Test Mode User 
25 Guide, V0.3. 

[6] TSMC (EmbFlash product marketing). Oct 1 9. 2001 . 0.25um Application Note, V2.2. 



Accounting for division by 5 
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[7] Artisan Components, Jan 99, Process Perfect Library Databook 2.5-Volt Standard Cells, 
Rev1 .0. 

OTHER APPLCAT I ONS FOR PROTOCOLS AND OA CH I PS 

5 A Introduct i on 

I n i ts preferred form, th e OA chip [1] is a programmab l e 32 bit microprocossor w i th socurity 
f e atur e s (8,000 gatos, 3k bits of RAM and Skbytos of flash memory for program and non vo l at il o 
data storag e ). It i s manufactur e d i n a 0.25 um CMOS process. 

10 Physica l ly, the ch i p is mounted in a 5 pin SOT23 p l astic package and communicat e s with oxtorno l 
circu i try via a two p i n s e rial bus. 

Th e OA chip was designed to for outhont i cating consumable usag e and performance upgrades in 
print e rs and associated hardware. 

15 

Because of its cor e functiona l ity and program mobility th e OA ch i p can a l so b e used i n app l ications 
that diff e r sign i ficantly from its or i g i na l one. This document s ee ks to identify som e of those areas. 

3 App l ications Overv i ew 

20 Applications i nclud e : 

Regular EEPROM 

ScGurc EEPROM 

General purpooc MPU with accurity fcaturcG 

Security coproeeooor for microproceaoor oyotem 

25 Security coproceaaor for PC — (with optional USD connection) 

Rcoourcc diopenoer oecure, — web baoed tranofer of a variable 

quantity from "aource" — to "oinlc" 
^ ID tag 

Security paoo inoido of f icco 

30 -* Set top box OGCurity 

Car 3cey 

Car Petrol 

Car manufacturer ^^genuine parto^^ detection, v ^ yhere the car 

requirca genuine — (or authorised) — part a to function. 
35 Aeroplane control on motor control servos to allow oeeuro 

external control on an aircraft in a hijaclc situation, 
Security device for controlling access to and copying of 

audio, — video, — and data — (eg, — preventing unauthorized 

downloading of music to a device) , 
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A Exemplary AppHcat i on Doscriptions 



4t4 Car P e tro l 

Using mochan i sms and protocols similar to thos e d e scrib e d in relat i on to i nk r e f i lls, rof ilii ng of 
5 p e trol can bo contro l lod. An oxamp le of a commercial relationsh i p th i s allows i s soi l ing a car at a 
d i scount e d rate, but requ i ring that the car be refi ll ed at designat e d s e rvic e stations. Sim il arly, 
pr e v e ntion of unauthor i z e d servicing can b e ach ie ved. 

4t2 Car K e ys 

10 A^irA Ba si c advantages over phys i cal keys 

Koyg and looko can bo caaily programmed &. configurod for uac 

Can only bo duplicatcd/roprogrammod by an authorised 

individual 

Tho oamc key can be uaod for physical entry/exit and remote 

15 (radio baocd) — ontry/cxit 

Inbuilt ooGurity fcaturca 

472t2 S i ngle key for multiple ve h icles 

Us e fu l when a family has more than one car. 

Can bo programmed do any keyo fita any car. 

20 Fewer number of duplicate keyo. 

Mioplacing a key for a particular car any key for any other 

car can be uocd ao oppooe to duplicate of the game key, 
472r3 Multiple keys for a s i ngle veh i cle 

4 .2.3.1 — Sam e company car b ei ng dr i v e n by mu l t i ple dr i vers 

25 Mileage can be logged per driver e.g. — for accounting 

purpooco . 

Key per-miooiono can be different per driver — (e.g. boot/trunk 

acGcoo may be dioablcd -)- 

4.2.3.2 — Sam e family car b e ing dr i ven by ch i ldr e n and parents 

30 Time/date roQtrictiono can be applied to — (e.g. — children^ o) 

Iceys 

-■ Speedo above a specified limit — (and duration of that apced) 

can be logged for auditing purpoaes — (may be less dangerous 
than actually enforeing a speed limit) 
35 4t2t4 No PRO B LEM I F KEY LOST 

Can easi l y: 

make a new key the oame ao loot one — (existing copico of key 

will otill function) 
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rcprogram tho locko on car — (and rcprogram all non loot keys 

to match) — oo tho loot Iccy will no longer function 
4t3t5 No PROBLEM I F KEY LEFT I N GAR 

Eaoy to crcato a one timo uoo opon door only key via roadoidc 

5 aoaiotancG baood on accrGt paooword information, — driver^ o 
liconoo etc — (provonto having to broak into the car) 
Az2^ Car rentals 

Key can havo ah expiration date — (e.g. — aome period paot the 

rental end date) 

10 473t7 Single p h ysical key for all locks i n car 

A s i ngle physica l key can opon a ll locks (door, immob il iser, boot/trunk, glovobox etc.). 
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